An Associate Cloud Engineer is tasked with setting up a new environment for the Finance engineering division under an existing Google Cloud Organization. What is the correct sequence of administrative steps to establish the resource container structure, enable billing, and grant access using least privilege?
- 1Create a new dedicated Folder under the Organization node to house the division resources.
- 2Create a new Google Cloud Project directly inside the newly created Folder.
- 3Link an active Cloud Billing Account to the newly created Project.
- 4Grant predefined IAM roles to the division lead at the Folder level to allow policy inheritance to the project.
Cevap
The correct sequence is to first create the parent Folder under the Organization, create the child Project inside the Folder, link the Billing Account to the Project, and finally grant the necessary IAM predefined role at the Folder level for inherited permissions.
The correct order follows standard GCP resource hierarchy provisioning: first build the parent container (Folder) under the Organization node, then create the child resource container (Project) inside the Folder, link the Project to a Cloud Billing Account to permit resource deployment, and finally bind predefined IAM roles at the Folder level to automatically grant permissions to child resources via IAM policy inheritance.
Adım Adım Çözüm
Anahtar Kavram
Google Cloud Resource Hierarchy Provisioning and IAM Policy Inheritance