An operations team needs to export audit and application logs from a Google Cloud project into a Cloud Storage bucket for long-term compliance storage. They require a continuous, automated routing mechanism built directly into Google Cloud's operational suite. Which feature should they configure to meet this requirement?
- A Cloud Logging Log Sink configured with the Cloud Storage bucket as the destination target.Answer
- BA continuous Storage Transfer Service job configured using the primitive Owner role to ingest logs from Cloud Logging.
- CA Cloud IAM policy granting the Service Account User role to the default Compute Engine service account to export log archives.
- DA Quotas page quota increase request to expand the retention window of _Default log buckets beyond standard limits.
Answer
The operations team should configure a Cloud Logging Log Sink pointing to the Cloud Storage bucket as its destination target.
Configuring a Log Sink with a Cloud Storage destination is the native, fully managed Google Cloud method to continuously route ingested log entries into Cloud Storage for long-term retention and compliance.
Step-by-Step Solution
Key Concept
Cloud Logging Sinks and Export Routing