Examkin

Question

Difficulty: Very hardCreating Billing Budgets, Alerts, and BigQuery Exports

A FinOps engineer is designing a centralized cost governance architecture for an enterprise Google Cloud environment. The organization requires two capabilities: first, streaming daily granular cost logs into BigQuery for custom SQL analytics; second, triggering an automated Cloud Run microservice to modify resource deployment parameters whenever project expenditure exceeds 80% of the monthly budget allocation. Which set of IAM permissions and service integration configurations strictly aligns with Google Cloud recommended practices to accomplish this?

  1. Grant the engineer the Billing Account Administrator role on the billing account and the BigQuery Data Editor role on the target dataset; configure a Cloud Billing budget threshold notification publishing to a Cloud Pub/Sub topic that invokes the Cloud Run service.Answer
  2. B
    Grant the engineer the Billing Account Viewer role on the billing account; configure the Cloud Billing budget to use the native 'Automatic Hard Stop' action to directly freeze project resources upon reaching the 80% threshold.
  3. C
    Grant the engineer the Project Owner role on the project hosting the BigQuery dataset and the Billing Account User role on the billing account; configure the Cloud Billing budget to send direct HTTP Webhook calls directly to the Cloud Run endpoint.
  4. D
    Enable the Cloud Billing API at the Organization level; configure the BigQuery export to automatically provisions a system-managed dataset in the target project without requiring explicit BigQuery dataset IAM permissions.

Answer

Grant the engineer the Billing Account Administrator role on the billing account and the BigQuery Data Editor role on the target dataset; configure a Cloud Billing budget threshold notification publishing to a Cloud Pub/Sub topic that invokes the Cloud Run service.
The correct response accurately identifies both authorization and architectural requirements. Configuring a BigQuery billing export requires the user to hold the Billing Account Administrator role on the Cloud Billing account and the BigQuery Data Editor role on the target dataset. Furthermore, because GCP budgets do not automatically shut down resources, publishing threshold events to a Cloud Pub/Sub topic is the standard GCP pattern for triggering downstream automation services like Cloud Run.

Step-by-Step Solution

1
Evaluate IAM permission requirements for Cloud Billing BigQuery Export.
Configuring export requires Billing Account Administrator on the Cloud Billing Account and BigQuery Data Editor (or BigQuery Admin) on the destination BigQuery dataset.
Permissions are required on both sides of the integration: permission to configure billing export settings on the billing account and permission to create/write table data in the BigQuery dataset.
2
Analyze budget threshold notification capabilities.
GCP billing budgets send notification emails and publish JSON messages to Cloud Pub/Sub topics upon hitting configured percentages or amounts.
Budgets do not directly execute resource shutdowns or invoke HTTP webhooks directly without an intermediate message queue.
3
Determine the mechanism for automated programmatic actions.
Connect the budget's Pub/Sub topic to trigger a Cloud Run service (or Cloud Function) that parses the budget payload and executes governance actions via GCP APIs.
Pub/Sub acts as the event broker between Cloud Billing alerting events and serverless compute execution.

Key Concept

Cloud Billing Budgets, Pub/Sub Integration, and BigQuery Billing Export IAM
Rate this question

Topics

Creating Billing Budgets, Alerts, and BigQuery Exports

More questions from this topic