Configure Log Router Sink Bigquery Writer Identity

Worked example. The correct answer is already marked and every option is explained below, so there is nothing to select here. To answer questions yourself, start the free trial.

An enterprise data engineering team processes streaming events using Cloud Dataflow and manages batch pipelines using Cloud Dataproc. To satisfy security audit requirements and analyze system health, the team creates a custom Log Router sink configured to route Dataflow and Dataproc execution and audit logs into a BigQuery dataset residing in a centralized observability project.

After creating the log sink, the team notices that log entries are not appearing in the destination BigQuery dataset.

Which action should the data engineer take to enable the log sink to export logs successfully?

Assign the Logs Configuration Writer (roles/logging.configWriter) role to the sink's writerIdentity on the source project.

Retrieve the writerIdentity service account from the log sink's configuration and grant it the BigQuery Data Editor (roles/bigquery.dataEditor) role on the destination project or dataset.

Grant the Logs Bucket Writer (roles/logging.bucketWriter) role to the default Compute Engine service account on the destination project.

Grant the Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) the BigQuery Data Editor role on the destination observability project.

Professional Cloud Data Engineer

Configure Log Router Sink Bigquery Writer Identity

Related questions