Soru

Zorluk: ZorManaging Storage and Database Solutions

An operations engineer needs to configure automated backup retention and disaster recovery for a production Cloud SQL for PostgreSQL instance, while also exporting database dumps periodically to a centralized Google Cloud Storage bucket located in a separate security project. Which TWO actions must the engineer perform to establish this operational workflow securely and effectively?

  1. Enable automated daily backups and binary logging (point-in-time recovery) on the Cloud SQL instance configuration.Cevap
  2. Grant the automatically assigned Cloud SQL instance service account the Storage Object Creator role on the target destination Cloud Storage bucket.Cevap
  3. C
    Generate a service account JSON key file and upload it to the Cloud SQL database instance flags to authorize automated export operations.
  4. D
    Configure Cloud Firestore in Datastore mode to store the transactional backup logs instead of Cloud SQL native point-in-time recovery logs.

Cevap

To establish secure automated backups and cross-project database exports, the operations engineer must enable automated daily backups and point-in-time recovery on the Cloud SQL instance, and grant the instance's service account the Storage Object Creator role on the target Cloud Storage bucket.
The solution requires configuring Cloud SQL native automated backups with point-in-time recovery for continuous database protection, and granting the Cloud SQL instance's built-in service account the Storage Object Creator IAM role on the external Cloud Storage bucket to enable secure cross-project database exports.

Adım Adım Çözüm

1
Identify native database backup mechanisms
Enabling automated backups and point-in-time recovery ensures transaction logs and daily snapshots are retained natively by Cloud SQL.
Native automated backups provide automated point-in-time restoration without relying on external export scripts for local instance recovery.
2
Determine service account identity and IAM permissions for Cloud Storage exports
Identify the Cloud SQL service account email address using `gcloud sql instances describe` and grant it `roles/storage.objectCreator` on the destination Cloud Storage bucket in the central project.
Cloud SQL perform SQL dump exports using its underlying managed service account identity, requiring object creation permissions in the target bucket.

Anahtar Kavram

Managing Cloud SQL Automated Backups and Cross-Project Storage Export Permissions
Tahmini Süre:2m 0s
Bu soruyu puanla