GCP - Cloud IAM Advanced
You want to audit all data access to Cloud Storage buckets in your project and store logs in BigQuery for analysis. Which steps should you take?
You want to audit all data access to Cloud Storage buckets in your project and store logs in BigQuery for analysis. Which steps should you take?
hard📝 Best Practice Q15 of 15
Step-by-Step Solution
Solution:
Step 1: Enable data access audit logs for Cloud Storage
This ensures logs capture who accessed or changed Cloud Storage buckets.Step 2: Create a sink with filter resource.type="gcs_bucket" and export to BigQuery
This filters logs to only Cloud Storage bucket access and stores them in BigQuery for analysis.Final Answer:
Enable data access audit logs for Cloud Storage, create a sink with filter resource.type="gcs_bucket", export to BigQuery dataset -> Option AQuick Check:
Enable logs + filter + export to BigQuery = audit setup [OK]
Quick Trick: Enable logs, filter by resource, export to BigQuery [OK]
Common Mistakes:
- Using system logs instead of data access logs
- Exporting all logs without filtering
- Relying on firewall rules for logging
Master "Cloud IAM Advanced" in GCP
Want More Practice?
15+ quiz questions · All difficulty levels · Free
Free Signup - Practice All QuestionsMore GCP Quizzes