Access control (IAM vs ACLs) in GCP - Quick Revision & Key Differences

Recall & Review

beginner

What is IAM in Google Cloud Platform?

IAM (Identity and Access Management) is a system that lets you control who can do what on your cloud resources by assigning roles to users or groups.

beginner

What does ACL stand for and what is its purpose?

ACL stands for Access Control List. It is a list that specifies which users or systems can access a specific resource and what actions they can perform.

intermediate

How does IAM differ from ACLs in managing access?

IAM manages access by assigning roles to users or groups at a resource level, while ACLs manage access by listing permissions directly on individual resources.

intermediate

Which access control method is recommended for managing permissions across many resources in GCP?

IAM is recommended because it provides centralized, role-based access control that is easier to manage at scale.

intermediate

Can ACLs be used together with IAM in Google Cloud?

Yes, ACLs can be used for some specific services or resources, but IAM is the primary and preferred method for access control in GCP.

What does IAM primarily manage in Google Cloud?

A Who can access resources and what roles they have

B Network traffic routing

C Billing and cost management

D Data encryption keys

IAM controls who can access cloud resources and what actions they can perform by assigning roles.

Which of the following best describes an ACL?

A A network firewall rule

B A list of permissions attached directly to a resource

C A billing account for cloud services

D A group of users with the same role

An ACL is a list that specifies which users or systems can access a resource and what actions they can perform.

Why is IAM preferred over ACLs for managing access in GCP?

A ACLs are more secure than IAM

B IAM is only for network settings

C IAM provides centralized, role-based access control

D IAM does not require user accounts

IAM allows centralized management of permissions using roles, making it easier to manage access at scale.

Which access control method would you use to assign permissions to a group of users at once?

A IAM roles

B Individual ACL entries

C Firewall rules

D Encryption keys

IAM roles can be assigned to groups, allowing permission management for many users at once.

Can ACLs be used in Google Cloud alongside IAM?

A Only for network traffic

B No, ACLs are not supported

C Only for billing purposes

D Yes, but IAM is the primary method

ACLs can be used for some resources, but IAM is the main access control system in GCP.

Explain the difference between IAM and ACLs in Google Cloud Platform.

Think about how permissions are assigned and managed.

Describe why IAM is considered a best practice for access control in GCP.

Consider managing many users and resources.