Build and operate the data processing systems behind analytics and ML on Google Cloud, including BigQuery, Dataflow, and Pub/Sub, and track your readiness for the Professional Data Engineer exam.
Advanced
Prepare and test your skills
Advanced
Prepare and test your skills
Concept
folder
Topic in 2 exam domains
- folder · Concept
- --folder · Concept
- Folder · Concept
Also called: Folder resources, folders, FOLDER_ID, Google Cloud folders, google.storage.control.v2.Folder
An organizational node above projects used to group projects and apply folder-level quotas or policies.
Where this appears on the exam
2 subdomains in 2 of 5 domains
Related topics
FoundationsBuilding blocksBuilding blocksThis topicBuilds on theseBuilds on theseBuilds on theseBuilds on theseAppliedOrganization policiesFeatureresource hierarchyConceptIdentity and Access ManagementServiceVPC Service ControlsFeatureorganization policyConceptorganization resourceConceptorganizationConcept
folderConcept
custom constraintsFeatureprojectConceptIAM policyConceptCloud StorageServiceCloud Billing accountConceptCustomer-Managed Encryption KeysFeatureCloud SQLServicePoints to what builds on itWorks with or alternative toHover or tap a line to see what connects the two
- project is part of folder From the official documentation: “Folders can contain sub-folders and projects.”
- folder is part of organization From the official documentation: “Folders and projects are all mapped under the organization node.”
- organization policy configures folder From the official documentation: “You can enforce organization policies at the organization, folder, or project level.”
- folder is part of Cloud Storage From the official documentation: “The folder and its contents, including stored objects and other managed folders, are deleted from your Cloud Storage bucket.”
- folder works with organization policy From the official documentation: “You can enforce organization policies at the organization, folder, or project level.”
- folder is part of organization resource From the official documentation: “Organization resources contain folder and project resources.”
- folder depends on organization resource From the official documentation: “Once you have an organization resource, you can create folder resources and begin to organize your resource hierarchy.”
- folder is part of resource hierarchy From the official documentation: “Folders and projects are nodes in the Google Cloud resource hierarchy.”
- IAM policy configures folder From the official documentation: “Set IAM policy for a folder.”
- Organization policies configures folder From the official documentation: “Organization policies contain rules, called *constraints*, that the organization administrator places on a project, folder, or organization.”
- Cloud SQL works with Cloud Storage From the official documentation: “Exports data from a Cloud SQL instance to a Cloud Storage bucket as a SQL dump or CSV file.”
- Customer-Managed Encryption Keys secures Cloud Storage From the official documentation: “CMEKs encrypt data at rest in Cloud SQL, Cloud Storage, and within GKE clusters.”
- project is part of organization From the official documentation: “An organization might contain multiple projects.”
- Customer-Managed Encryption Keys secures Cloud SQL From the official documentation: “Enable CMEK for Cloud SQL Databases”
- Cloud Storage works with Customer-Managed Encryption Keys From the official documentation: “Cloud Storage supports CMEK for routing logs.”
- custom constraints is part of organization policy From the official documentation: “However, if you want more granular, customizable control over the specific fields that are restricted in your organization policies, you can also create *custom constraints* and use those custom constraints in an organization policy.”
- Identity and Access Management secures Cloud Storage From the official documentation: “Cloud Storage uses Identity and Access Management (IAM) for authorization.”
- organization policy configures project From the official documentation: “You can enforce organization policies at the organization, folder, or project level.”
- project is part of organization resource From the official documentation: “Organization resources contain folder and project resources.”
- VPC Service Controls secures Cloud Storage From the official documentation: “Storage Transfer Service supports transfers to Cloud Storage buckets protected by VPC Service Controls.”
- custom constraints configures organization policy From the official documentation: “However, if you want more granular, customizable control over the specific fields that are restricted in your organization policies, you can also create *custom constraints* and use those custom constraints in an organization policy.”
- Customer-Managed Encryption Keys depends on Cloud Storage From the official documentation: “If used for storing Customer-managed Encryption Keys (CMEK): Cloud Storage (See [Cloud Storage pricing](/storage/pricing).)”
- Identity and Access Management works with VPC Service Controls From the official documentation: “VPC Service Controls perimeters and Identity and Access Management (IAM) roles work together.”
- organization is part of resource hierarchy From the official documentation: “- *Organization*: Represents your company, and serves as the root of your resource hierarchy.”
- Organization policies configures Cloud SQL From the official documentation: “This page describes how to add organization policies on Cloud SQL instances, to put restrictions on Cloud SQL at the project, folder, or organization level.”
- organization policy configures organization From the official documentation: “You can enforce organization policies at the organization, folder, or project level.”
- organization resource is part of resource hierarchy From the official documentation: “Projects are created under organization resources, and can be placed under folders or the organization resource itself, forming the [resource hierarchy](/resource-manager/docs/cloud-platform-resource-hierarchy).”
- project depends on Cloud Billing account From the official documentation: “A project and its service-level resources are always paid for by a single billing account.”
- Cloud Billing account works with project From the official documentation: “A Cloud Billing account defines who pays for a given set of resources, and it can be linked to one or more projects.”
- Cloud SQL depends on Cloud Storage From the official documentation: “When ingesting data from Cloud SQL, data is first staged to a Cloud Storage bucket.”
- Cloud SQL works with Identity and Access Management From the official documentation: “This page describes how Cloud SQL is integrated with IAM .”
- Cloud SQL works with VPC Service Controls From the official documentation: “Make sure that you configure VPC Service Controls so that the project that hosts the CA Service CA pool and CA<br>and the project that hosts Cloud SQL belong to the same service perimeter.”
- Cloud Storage works with Identity and Access Management From the official documentation: “To learn how to use IAM with Cloud Storage, see [Using IAM Permissions](/storage/docs/access-control/using-iam-permissions).”
- Cloud Storage is part of project From the official documentation: “All of your Google Cloud resources belong to a project, including Cloud Storage resources like buckets and objects.”
- custom constraints is part of organization From the official documentation: “Lists the custom constraints set on an organization.”
- Customer-Managed Encryption Keys is part of Cloud SQL From the official documentation: “Cloud SQL also lets you add another layer of encryption to data using [customer-managed encryption keys (CMEK)](/sql/docs/postgres/cmek).”
- Customer-Managed Encryption Keys is part of Cloud Storage From the official documentation: “[Cloud Storage](/storage/docs/introduction) provides features such as customer-managed encryption, lifecycle management, and aging and retention policies.”
- IAM policy configures Cloud Billing account From the official documentation: “Set the IAM policy for a Cloud Billing account.”
- IAM policy configures Cloud Storage From the official documentation: “Access to new buckets is managed using IAM policies instead of<br>[Cloud Storage Access control lists (ACLs)](/storage/docs/access-control/lists).”
- IAM policy is part of Identity and Access Management From the official documentation: “IAM lets you control **who (users)** has **what access (roles)** to **which resources** by setting IAM policies.”
- IAM policy is part of project From the official documentation: “Removes a policy binding to the IAM policy of a project, given a project ID and the binding.”
- organization works with organization policy From the official documentation: “You can enforce organization policies at the organization, folder, or project level.”
- Organization policies configures organization From the official documentation: “Organization policies contain rules, called *constraints*, that the organization administrator places on a project, folder, or organization.”
- Organization policies configures project From the official documentation: “Organization policies contain rules, called *constraints*, that the organization administrator places on a project, folder, or organization.”
- organization policy configures Customer-Managed Encryption Keys From the official documentation: “An organization policy prevented creating a resource or running a query. To learn more about this policy, see [Require CMEKs for all resources](/bigquery/docs/customer-managed-encryption#services_constraint).”
- organization policy works with project From the official documentation: “You can enforce organization policies at the organization, folder, or project level.”
- organization policy depends on resource hierarchy From the official documentation: “How organization policies are evaluated at different levels of the [resource hierarchy](/organization-policy/hierarchy-evaluation).”
- project is part of resource hierarchy From the official documentation: “Folders and projects are nodes in the Google Cloud resource hierarchy.”
- VPC Service Controls configures Cloud SQL From the official documentation: “This page describes how to enable VPC Service Controls on a Cloud SQL project.”
- VPC Service Controls secures project From the official documentation: “You can use VPC Service Controls to create a perimeter around your in-scope CDE projects.”
How learners score on this topic
Last updated