Soru

Zorluk: OrtaManaging Cloud Projects and Resource Hierarchy

A cloud engineer is tasked with onboarding a new telemetry analytics team into an existing Google Cloud Organization. The engineer must establish an isolated resource hierarchy branch, enable resource consumption, and delegate administrative access following Google Cloud recommended practices. Arrange the following administrative steps in the correct operational sequence from start to finish.

  1. 1Create a dedicated environment folder under the Organization node using `gcloud resource-manager folders create`.
  2. 2Provision a new Cloud Project inside the newly created environment folder using `gcloud projects create`.
  3. 3Link an active Cloud Billing Account to the new project using `gcloud billing projects link`.
  4. 4Grant required predefined IAM roles to the engineering team on the project using `gcloud projects add-iam-policy-binding`.

Cevap

The correct operational sequence is: 1) Create the environment folder under the Organization node, 2) Provision the new Cloud Project inside that folder, 3) Link an active Cloud Billing Account to the project, and 4) Grant predefined IAM roles to the engineering team at the project level.
The workflow follows logical GCP dependency requirements: the parent Folder must be provisioned first within the Organization hierarchy; the Project is then created as a child of that Folder; the Billing Account is attached to the Project to allow compute resource allocation; and finally, IAM role bindings are configured on the initialized Project resource to grant appropriate team access.

Adım Adım Çözüm

1
Execute `gcloud resource-manager folders create` specifying the Organization ID as the parent.
Establishes the container folder within the organization hierarchy.
Projects require a designated parent node (Organization or Folder) during creation.
2
Execute `gcloud projects create` specifying the newly created folder ID as the `--folder` flag.
Creates the project resource within the folder hierarchy.
The project must exist before billing can be linked or IAM policies attached.
3
Execute `gcloud billing projects link` with the project ID and billing account ID.
Associates the project with an active billing account.
Enables paid service resource provisioning within the newly created project.
4
Execute `gcloud projects add-iam-policy-binding` to assign predefined roles to the team group.
Delegates access permissions to team members.
Applies principle of least privilege access control to the operational project.

Anahtar Kavram

Resource Hierarchy Construction and Project Lifecycle Management
Tahmini Süre:1m 30s
Bu soruyu puanla