Least privilege principle in GCP - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is the Least Privilege Principle in cloud security?

It means giving users or services only the minimum access rights they need to do their job, nothing more.

beginner

Why is the Least Privilege Principle important in Google Cloud Platform (GCP)?

It reduces the risk of accidental or malicious actions by limiting what users and services can do.

intermediate

How can you implement the Least Privilege Principle in GCP?

By assigning roles with only necessary permissions using IAM roles, and avoiding broad roles like Owner or Editor when possible.

beginner

What is a common mistake that violates the Least Privilege Principle?

Giving users or services full admin rights when they only need limited access.

intermediate

How does the Least Privilege Principle help during a security breach?

It limits the damage because attackers get only limited access, reducing what they can do.

What does the Least Privilege Principle ensure in cloud environments?

A Users have only the permissions they need

B Users have full access to all resources

C Users can share passwords freely

D Users can create unlimited resources

The principle limits permissions to only what is necessary for the user or service.

Which GCP feature helps enforce the Least Privilege Principle?

A IAM roles

B Cloud Storage buckets

C Compute Engine instances

D Cloud Functions

IAM roles control permissions and access levels for users and services.

What is a risk of not following the Least Privilege Principle?

A Better user experience

B Faster resource provisioning

C Lower cloud costs

D Increased risk of accidental data loss

Excess permissions can lead to accidental or malicious actions causing data loss.

Which role should you avoid assigning broadly to follow least privilege?

A Viewer

B Owner

C Custom role with limited permissions

D Billing Account User

Owner role grants full control and should be given only when absolutely necessary.

How often should you review permissions to maintain least privilege?

A Never, once set it stays forever

B Only when a breach happens

C Regularly, to remove unnecessary access

D Only for new users

Regular reviews help ensure permissions stay minimal and appropriate.

Explain the Least Privilege Principle and how it applies to managing access in GCP.

Think about giving only the access needed to do a job.

Describe common mistakes when implementing least privilege and how to avoid them in GCP.

Focus on permission assignment and review.