Build and operate the data processing systems behind analytics and ML on Google Cloud, including BigQuery, Dataflow, and Pub/Sub, and track your readiness for the Professional Data Engineer exam.
Advanced
Prepare and test your skills
Advanced
Prepare and test your skills
Concept
principle of least privilege
Topic in 3 exam domains
- principle of least privilege · Concept
- Principle of Least Privilege · Concept · MPC security model
Also called: security principle of least privilege
A security practice of granting only the necessary access permissions to resources.
Where this appears on the exam
3 subdomains in 2 of 5 domains
Related topics
FoundationsThis topicBuilds on theseBuilds on theseAppliedIdentity and Access ManagementServiceIdentity and Access Management (IAM)Service
principle of least privilegeConcept
Cloud DeployServiceIAM rolesConceptSecret ManagerServiceCloud StorageServiceBigQueryServiceDataformServicePoints to what builds on itWorks with or alternative toHover or tap a line to see what connects the two
- Identity and Access Management works with principle of least privilege From the official documentation: “IAM lets you adopt the [security principle of least privilege](https://wikipedia.org/wiki/Principle_of_least_privilege) so that you need to grant only the necessary access to your resources.”
- Identity and Access Management configures principle of least privilege From the official documentation: “IAM lets you adopt the [security principle of least privilege](https://en.wikipedia.org/wiki/Principle_of_least_privilege), so you grant only the necessary access to your resources.”
- Identity and Access Management (IAM) secures principle of least privilege From the official documentation: “IAM lets you adopt the [security principle of least privilege](https://en.wikipedia.org/wiki/Principle_of_least_privilege), so you grant only the necessary access to your resources within *Lakehouse*.”
- BigQuery is an alternative to Cloud Storage From the official documentation: “The `import_result_sink` must be a Cloud Storage path or a BigQuery table.”
- BigQuery works with Cloud Storage From the official documentation: “Sample to load Avro data from Cloud Storage into a new BigQuery table”
- BigQuery works with Dataform From the official documentation: “You can define custom SQL commands for Dataform to run in BigQuery.”
- Cloud Deploy works with Cloud Storage From the official documentation: “Delete the Cloud Storage buckets that Cloud Deploy created.”
- IAM roles is part of Identity and Access Management From the official documentation: “IAM roles give the principals permissions to perform tasks on your App Topology resources.”
- Identity and Access Management secures Cloud Storage From the official documentation: “Cloud Storage uses Identity and Access Management (IAM) for authorization.”
- BigQuery works with Identity and Access Management From the official documentation: “BigQuery uses Identity and Access Management (IAM) for authorization.”
- Identity and Access Management secures Secret Manager From the official documentation: “Secret Manager uses Identity and Access Management (IAM) for authorization.”
- Identity and Access Management (IAM) secures BigQuery From the official documentation: “BigQuery uses IAM for fine-grained access control.”
- BigQuery depends on Cloud Storage From the official documentation: “BigQuery relies on Cloud Storage for staging file data and supports reading from and writing to several other sources and Google Cloud services.”
- Cloud Deploy depends on Identity and Access Management From the official documentation: “In addition to other Identity and Access Management permissions you need for using Cloud Deploy, you need the following permissions in order to perform additional actions that might be needed for a canary deployment:”
- Cloud Storage works with Identity and Access Management From the official documentation: “To learn how to use IAM with Cloud Storage, see [Using IAM Permissions](/storage/docs/access-control/using-iam-permissions).”
- Dataform depends on BigQuery From the official documentation: “The following error occurs when you trigger a pipeline invocation before granting Dataform access to BigQuery:”
- Dataform works with Identity and Access Management From the official documentation: “Dataform uses Identity and Access Management (IAM) for authorization.”
- Dataform depends on Identity and Access Management (IAM) From the official documentation: “Dataform uses [Identity and Access Management (IAM)](/iam/docs) for access control.”
- IAM roles secures Cloud Storage From the official documentation: “**Fine-grained access control**: Control agent access to Cloud Storage precisely using [IAM roles](/storage/docs/access-control/iam-roles).”
- IAM roles is part of Identity and Access Management (IAM) From the official documentation: “To prevent test disruptions, ensure that your Identity and Access Management (IAM) roles, policies, and failover configurations are correctly set up.”
- Identity and Access Management secures BigQuery From the official documentation: “Security in BigQuery is intrinsically linked to [Identity and Access Management (IAM)](/iam/docs/overview) in Google Cloud.”
- Identity and Access Management secures Cloud Deploy From the official documentation: “As with all Google Cloud products, Identity and Access Management protects Cloud Deploy by controlling which authenticated users and service accounts can perform which actions.”
- Identity and Access Management secures Dataform From the official documentation: “To learn more about managing permissions for Dataform resources, see [Control access with IAM](/dataform/docs/access-control).”
- Identity and Access Management (IAM) secures Cloud Deploy From the official documentation: “Access in Cloud Deploy is controlled using [Identity and Access Management (IAM)](/iam).”
- Identity and Access Management (IAM) secures Cloud Storage From the official documentation: “Cloud Storage supports two methods for granting users access to your buckets and objects: Identity and Access Management (IAM) and access control lists (ACLs).”
- Identity and Access Management (IAM) secures Secret Manager From the official documentation: “Secret Manager uses Identity and Access Management (IAM) for access control.”
How learners score on this topic
Last updated