Build and operate the data processing systems behind analytics and ML on Google Cloud, including BigQuery, Dataflow, and Pub/Sub, and track your readiness for the Professional Data Engineer exam.
Advanced
Prepare and test your skills
Advanced
Prepare and test your skills
Google Cloud service
Identity and Access Management (IAM)
Topic in 4 exam domains
- Identity and Access Management (IAM) · Service
- Identity and Access Management (IAM) · Concept
- Identity and Access Management (IAM) · Feature
- Identity and Access Management IAM · Service
Google Cloud access management service whose roles control access to Cloud Service Mesh.
Where this appears on the exam
4 subdomains in 4 of 5 domains
~25% of exam
Domain 3
Storing the data~20% of exam
~15% of exam
~18% of exam
Related topics
This topicWorks alongsideBuilds on theseApplied
Identity and Access Management (IAM)Service
VPC Service ControlsServiceIdentity and Access ManagementServiceApplication Default CredentialsFeatureAlloyDB for PostgreSQLServiceArtifact AnalysisServiceCloud StorageServiceKnowledge CatalogServiceBigtableServiceDataformServiceCloud LoggingServiceCloud DeployServiceCompute EngineServiceCloud ProfilerServiceError ReportingServiceIAM policiesConceptIAM rolesConceptBigQueryServiceGKEServicePoints to what builds on itWorks with or alternative toHover or tap a line to see what connects the two
- Identity and Access Management (IAM) secures BigQuery From the official documentation: “BigQuery uses IAM for fine-grained access control.”
- AlloyDB for PostgreSQL works with Identity and Access Management (IAM) From the official documentation: “Provide Google Cloud integrations for [Identity and Access Management (IAM)](/alloydb/docs/manage-iam-authn), [tags](/alloydb/docs/manage-tags), [Cloud Key Management Service](/alloydb/docs/cmek), and [Network Intelligence Center](/network-intelligence-center/docs).”
- Artifact Analysis depends on Identity and Access Management (IAM) From the official documentation: “Artifact Analysis uses [Identity and Access Management (IAM)](/iam/docs/overview) to grant granular access to specific resources depending on the task you are going to perform.”
- Bigtable works with Identity and Access Management (IAM) From the official documentation: “Bigtable uses [IAM](/iam) for access control.”
- Cloud Logging depends on Identity and Access Management (IAM) From the official documentation: “Cloud Logging uses [Identity and Access Management (IAM)](/iam/docs/overview) roles and permissions to let you control who can view, write, and manage Logging resources.”
- Cloud Profiler works with Identity and Access Management (IAM) From the official documentation: “Cloud Profiler controls access to profiling activities in Google Cloud projects by using [Identity and Access Management (IAM)](/iam/docs/overview) roles and permissions.”
- Dataform depends on Identity and Access Management (IAM) From the official documentation: “Dataform uses [Identity and Access Management (IAM)](/iam/docs) for access control.”
- IAM policies is part of Identity and Access Management (IAM) From the official documentation: “To prevent test disruptions, ensure that your Identity and Access Management (IAM) roles, policies, and failover configurations are correctly set up.”
- IAM roles is part of Identity and Access Management (IAM) From the official documentation: “To prevent test disruptions, ensure that your Identity and Access Management (IAM) roles, policies, and failover configurations are correctly set up.”
- Identity and Access Management (IAM) secures Cloud Deploy From the official documentation: “Access in Cloud Deploy is controlled using [Identity and Access Management (IAM)](/iam).”
- Identity and Access Management (IAM) secures Cloud Storage From the official documentation: “Cloud Storage supports two methods for granting users access to your buckets and objects: Identity and Access Management (IAM) and access control lists (ACLs).”
- Identity and Access Management (IAM) secures Error Reporting From the official documentation: “You can use [Identity and Access Management (IAM)](/iam/docs/overview) roles to control access to Error Reporting data, ensuring team members have the permissions they need to view, triage, and manage application errors while enforcing least privilege.”
- BigQuery is an alternative to Cloud Storage From the official documentation: “The `import_result_sink` must be a Cloud Storage path or a BigQuery table.”
- BigQuery works with Cloud Storage From the official documentation: “Sample to load Avro data from Cloud Storage into a new BigQuery table”
- Application Default Credentials secures BigQuery From the official documentation: “To authenticate to BigQuery, set up Application Default Credentials.”
- BigQuery works with Cloud Logging From the official documentation: “BigQuery utilizes Cloud Logging for some of your log data.”
- Application Default Credentials secures Bigtable From the official documentation: “To authenticate to Bigtable, set up Application Default Credentials.”
- Application Default Credentials works with Cloud Storage From the official documentation: “To authenticate to Cloud Storage, set up Application Default Credentials.”
- Application Default Credentials works with BigQuery From the official documentation: “Create a BigQuery client using application default credentials.”
- VPC Service Controls secures BigQuery From the official documentation: “BigQuery data is protected with VPC Service Controls”
- Application Default Credentials secures Cloud Storage From the official documentation: “To authenticate to Cloud Storage, set up Application Default Credentials.”
- Application Default Credentials works with Compute Engine From the official documentation: “To authenticate to Compute Engine, set up Application Default Credentials.”
- BigQuery works with Dataform From the official documentation: “You can define custom SQL commands for Dataform to run in BigQuery.”
- Cloud Logging works with GKE From the official documentation: “Enable Cloud Logging on GKE Clusters”
- BigQuery depends on Application Default Credentials From the official documentation: “To authenticate to BigQuery, set up Application Default Credentials.”
- BigQuery works with Bigtable From the official documentation: “BigQuery lets you query your Bigtable data from BigQuery.”
- BigQuery works with Knowledge Catalog From the official documentation: “Some Knowledge Catalog functionalities trigger job execution using BigQuery.”
- Bigtable depends on Application Default Credentials From the official documentation: “To authenticate to Bigtable, set up Application Default Credentials.”
- Compute Engine is an alternative to GKE From the official documentation: “You can also deploy a third-party model to either Vertex AI Model Garden or self-host on GKE or Compute Engine.”
- Application Default Credentials works with Bigtable From the official documentation: “To authenticate to Bigtable, set up Application Default Credentials.”
- Application Default Credentials secures Compute Engine From the official documentation: “To authenticate to Compute Engine, set up Application Default Credentials.”
- Cloud Logging works with Cloud Storage From the official documentation: “Cloud Storage writes various log entries to Cloud Logging in the Google Cloud console.”
- Cloud Storage works with Compute Engine From the official documentation: “For example, you can create a service account that your Compute Engine instances use to access objects stored in Cloud Storage buckets.”
- Application Default Credentials configures BigQuery From the official documentation: “To authenticate to BigQuery, set up Application Default Credentials.”
- Application Default Credentials secures Knowledge Catalog From the official documentation: “To authenticate to Knowledge Catalog, set up Application Default Credentials.”
- Cloud Deploy works with Cloud Storage From the official documentation: “Delete the Cloud Storage buckets that Cloud Deploy created.”
- Cloud Logging works with Compute Engine From the official documentation: “Compute Engine sends you Cloud Logging events for scheduled, started, or completed maintenance.”
- Cloud Logging works with Error Reporting From the official documentation: “To connect your EC2 applications to Error Reporting, send your exceptions or other errors to Logging.”
- Cloud Profiler depends on Application Default Credentials From the official documentation: “To authenticate to Profiler, set up Application Default Credentials.”
- Cloud Storage depends on Application Default Credentials From the official documentation: “To authenticate to Cloud Storage, set up Application Default Credentials.”
- GKE depends on Compute Engine From the official documentation: “For example, GKE deploys clusters on Compute Engine VMs.”
- IAM roles is part of Identity and Access Management From the official documentation: “IAM roles give the principals permissions to perform tasks on your App Topology resources.”
- Identity and Access Management secures Cloud Storage From the official documentation: “Cloud Storage uses Identity and Access Management (IAM) for authorization.”
- VPC Service Controls secures Cloud Storage From the official documentation: “Storage Transfer Service supports transfers to Cloud Storage buckets protected by VPC Service Controls.”
- AlloyDB for PostgreSQL works with BigQuery From the official documentation: “Datastream lets you stream from AlloyDB for PostgreSQL to BigQuery using the Free Tier, providing up to 100 GiB of change data capture data free every month.”
- AlloyDB for PostgreSQL works with Cloud Storage From the official documentation: “AlloyDB lets you import data from files located in a Cloud Storage bucket.”
- AlloyDB for PostgreSQL works with Knowledge Catalog From the official documentation: “Enable the Knowledge Catalog integration for your AlloyDB cluster”
- Application Default Credentials configures Cloud Storage From the official documentation: “To authenticate to Cloud Storage, set up Application Default Credentials. For more information, see [Set up authentication for client libraries](/storage/docs/authentication#client-libs).”
- Application Default Credentials works with Identity and Access Management From the official documentation: “To authenticate to IAM, set up Application Default Credentials.”
- Application Default Credentials configures Knowledge Catalog From the official documentation: “To authenticate to Knowledge Catalog, set up Application Default Credentials.”
- Artifact Analysis depends on Application Default Credentials From the official documentation: “To authenticate to Artifact Analysis, set up Application Default Credentials.”
- Artifact Analysis works with VPC Service Controls From the official documentation: “VPC Service Controls provides support for Artifact Analysis.”
- BigQuery depends on Cloud Logging From the official documentation: “BigQuery utilizes Cloud Logging for some of your log data.”
- BigQuery works with Identity and Access Management From the official documentation: “BigQuery uses Identity and Access Management (IAM) for authorization.”
- Bigtable is an alternative to Cloud Storage From the official documentation: “If the joining data is in the gigabyte or terabyte range, use either Bigtable or Cloud Storage to merge the joining data to the driving data, depending on the nature of the data.”
- Cloud Deploy works with GKE From the official documentation: “Quickstart: Deploy an app to GKE by using Cloud Deploy”
- Cloud Logging depends on Application Default Credentials From the official documentation: “To authenticate to Logging, set up Application Default Credentials.”
- Cloud Logging is an alternative to Cloud Storage From the official documentation: “Instead, they are routed to either Cloud Storage (recommended) or Cloud Logging, depending on your organization's configuration.”
- Cloud Logging works with Knowledge Catalog From the official documentation: “Knowledge Catalog sends logs for service operations and job executions to Cloud Logging.”
- Cloud Profiler works with Compute Engine From the official documentation: “Shows how to initialize Cloud Profiler with Python on Google Compute Engine or Google Kubernetes Engine.”
How learners score on this topic
Last updated