An operations engineer needs to configure automated backup retention and disaster recovery for a production Cloud SQL for PostgreSQL instance, while also exporting database dumps periodically to a centralized Google Cloud Storage bucket located in a separate security project. Which TWO actions must the engineer perform to establish this operational workflow securely and effectively?
- Enable automated daily backups and binary logging (point-in-time recovery) on the Cloud SQL instance configuration.Answer
- Grant the automatically assigned Cloud SQL instance service account the Storage Object Creator role on the target destination Cloud Storage bucket.Answer
- CGenerate a service account JSON key file and upload it to the Cloud SQL database instance flags to authorize automated export operations.
- DConfigure Cloud Firestore in Datastore mode to store the transactional backup logs instead of Cloud SQL native point-in-time recovery logs.
Answer
To establish secure automated backups and cross-project database exports, the operations engineer must enable automated daily backups and point-in-time recovery on the Cloud SQL instance, and grant the instance's service account the Storage Object Creator role on the target Cloud Storage bucket.
The solution requires configuring Cloud SQL native automated backups with point-in-time recovery for continuous database protection, and granting the Cloud SQL instance's built-in service account the Storage Object Creator IAM role on the external Cloud Storage bucket to enable secure cross-project database exports.
Step-by-Step Solution
Key Concept
Managing Cloud SQL Automated Backups and Cross-Project Storage Export Permissions
Estimated Time:2m 0s