Audit Pipeline Deployment Metadata Cloud Logging

Worked example. The correct answer is already marked and every option is explained below, so there is nothing to select here. To answer questions yourself, start the free trial.

Your enterprise uses Google Cloud continuous integration and continuous delivery (CI/CD) pipelines to deploy microservices onto Google Kubernetes Engine (GKE) clusters. Following a security incident, the DevOps and security teams require a centralized auditing mechanism to trace all active and historical cluster deployments directly to their originating source code Git commit SHA, container artifact URI, and software package versions.

You need to implement a solution that captures this deployment metadata and allows you to programmatically inspect and analyze these audit records within Cloud Logging. What should you do?

Enable Cloud Service Mesh authorization policies and query the server-accesslog-stackdriver log stream in Cloud Logging to extract deployment manifest headers.

Configure Developer Connect insights to capture deployment intelligence, and query the structured sdlc_deployment log entries in Cloud Logging to analyze commit references, artifact URIs, and package details.

Assign the roles/clouddeploy.viewer IAM role and query Cloud Audit Logs filtered by the clouddeploy.deliveryPipelines.listEffectiveTags API method.

Grant the roles/datafusion.viewer role to export Cloud Data Fusion execution metrics and query the datafusion.pipelines.get audit trail in Cloud Logging.

Professional Cloud DevOps Engineer

Audit Pipeline Deployment Metadata Cloud Logging

Related questions