Examkin

Question

Difficulty: MediumEnabling and Managing Cloud Service APIs

A cloud engineer needs to enable the Google Kubernetes Engine API (`container.googleapis.com`) for a target project named `app-cluster-prod` using the `gcloud` CLI tool. Which of the following requirements and commands are necessary to successfully enable this API? (Select TWO.)

  1. Execute the command `gcloud services enable container.googleapis.com --project=app-cluster-prod`.Answer
  2. Grant the executing service account or identity the Service Usage Admin role (`roles/serviceusage.serviceUsageAdmin`) on the project.Answer
  3. C
    Execute the command `gcloud components enable container.googleapis.com` to activate the API across all organization projects.
  4. D
    Grant the executing identity the Service Usage Consumer role (`roles/serviceusage.serviceUsageConsumer`) on the target project.

Answer

To enable the Google Kubernetes Engine API for a target project, you must execute `gcloud services enable container.googleapis.com --project=app-cluster-prod` using an identity that holds the Service Usage Admin role (`roles/serviceusage.serviceUsageAdmin`) on the target project.
Enabling a Google Cloud API requires using the `gcloud services enable` command for the target project and holding an IAM role with `serviceusage.services.enable` permissions, such as Service Usage Admin.

Step-by-Step Solution

1
Identify the required IAM permissions for API administration.
Determine that the identity requires the Service Usage Admin role (`roles/serviceusage.serviceUsageAdmin`), which provides the `serviceusage.services.enable` permission.
Enabling project APIs is an administrative action requiring specific Service Usage management privileges.
2
Identify the correct gcloud CLI command syntax for enabling service APIs.
Construct the command `gcloud services enable container.googleapis.com --project=app-cluster-prod`.
The `gcloud services enable` command targets specific service endpoints on specified project identifiers.

Key Concept

Enabling GCP Service APIs using gcloud services enable and Service Usage IAM Roles
Estimated Time:1m 30s
Rate this question

Topics

Enabling and Managing Cloud Service APIs

More questions from this topic