IAM policy binding in GCP - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is an IAM policy binding in Google Cloud?

An IAM policy binding connects a role to one or more members, defining who has what permissions on a resource.

beginner

What are the main components of an IAM policy binding?

The main components are: <br>1. Role - a set of permissions.<br>2. Members - users, groups, or service accounts.<br>3. Condition (optional) - a rule to limit when the binding applies.

beginner

How do you specify a member in an IAM policy binding?

Members are specified by their type and identity, for example:<br>- user:[e-mail]<br>- serviceAccount:[e-mail]<br>- group:[e-mail]

intermediate

What is the purpose of a condition in an IAM policy binding?

A condition limits when the binding applies, based on attributes like request time or resource properties, adding extra security control.

beginner

Why should you follow the principle of least privilege when creating IAM policy bindings?

To give only the minimum permissions needed, reducing the risk of accidental or malicious actions on your cloud resources.

What does an IAM policy binding connect in Google Cloud?

A A VM to a network

B A role to members

C A project to a billing account

D A storage bucket to a folder

An IAM policy binding connects a role (permissions) to members (users, groups, service accounts).

Which of the following is NOT a valid member type in an IAM policy binding?

A user:[e-mail]

B serviceAccount:[e-mail]

C device:device123

D group:[e-mail]

Device is not a valid member type; valid types include user, serviceAccount, group, and domain.

What is the role of a condition in an IAM policy binding?

A To limit when the binding applies

B To assign a role permanently

C To list all members

D To delete the binding

Conditions limit when the binding applies, adding extra control based on rules.

Which principle helps reduce risk when assigning IAM roles?

A Principle of least privilege

B Principle of maximum access

C Principle of open sharing

D Principle of unlimited roles

The principle of least privilege means giving only the permissions needed, reducing risk.

In an IAM policy binding, what does the 'role' represent?

A A billing account

B A user account

C A network location

D A set of permissions

A role is a collection of permissions that define what actions members can perform.

Explain what an IAM policy binding is and its main components.

Think about who gets what permissions and under what conditions.

Describe why using conditions in IAM policy bindings can improve security.

Consider how rules can restrict access based on time or resource attributes.