A healthcare enterprise manages a multi-tenant Google Cloud organization structured into multiple environment folders. The central FinOps team must implement centralized billing analysis across all projects, automate real-time budget threshold notifications to an external Slack channel, and enforce strict governance over quota requests and billing settings across business units. Which TWO actions should the Cloud Architect recommend to satisfy these requirements?
- Enable detailed billing data export at the Cloud Billing Account level to stream all project billing data into a central administration project's BigQuery dataset.Cevap
- Attach a Cloud Pub/Sub topic to Cloud Billing Budgets at the Billing Account level, and deploy a Cloud Run service using least-privilege IAM roles to process budget messages and forward them to Slack.Cevap
- CGrant the Owner primitive IAM role at the folder level to business unit leads so they can configure project-level BigQuery billing exports and manage regional quota requests independently.
- DConfigure CI/CD deployment pipelines to dynamically submit regional Compute Engine quota increase requests via gcloud commands immediately prior to provisioning new compute instances.
Cevap
The Cloud Architect should enable detailed billing data export at the Cloud Billing Account level to a central BigQuery dataset, and attach a Cloud Pub/Sub topic to Cloud Billing Budgets to trigger a least-privilege Cloud Run service for automated Slack alerts.
Centralizing billing data export at the Cloud Billing Account level provides complete organizational cost visibility without delegating access to project-level teams. Connecting Cloud Billing Budgets to Cloud Pub/Sub allows secure, event-driven processing of threshold notifications via Cloud Run without exposing sensitive credentials or using elevated IAM permissions.
Adım Adım Çözüm
Anahtar Kavram
Centralized Cloud Billing governance, BigQuery billing export, Pub/Sub budget automation, and proactive quota planning.