Exam Professional Cloud Developer topic 1 question 293 discussion

Option B – Cloud Run Deployment • Cloud Run is serverless and fully managed, automatically scales, and significantly reduces infrastructure management overhead. • You can easily deploy containerized applications on Cloud Run. • It supports Google Workspace user authentication when integrated with IAP. • ✅ Correct: Fully meets scalability and minimal management goals. ⸻ Option D – IAP Authentication with HTTPS Access Role • Identity-Aware Proxy (IAP) allows Google Workspace user authentication for web applications without managing user credentials. • roles/iap.httpsResourceAccessor is needed for users to access HTTPS-secured web applications behind IAP. • ✅ Correct: Secure, minimal effort authentication via Google Workspace and IAP.

B. Containerize the application, and deploy it as a Cloud Run service. Cloud Run is a fully managed service that allows you to run containerized applications without managing the underlying infrastructure. This aligns with your goal of minimizing infrastructure management effort and provides scalability for your application. D. Configure Identity Aware Proxy, and grant the roles/iap.httpsResourceAccessor IAM role to the users that need to access the application. Identity Aware Proxy (IAP) secures access to your application by authenticating users using their Google Workspace credentials. By granting the roles/iap.httpsResourceAccessor IAM role to the internal users, you ensure that only authenticated users can access the application. This method leverages existing Google Workspace accounts, simplifying user management.