An organization is deciding on the layout of their resource hierarchy in Google Cloud. They have several projects within a folder. What will happen when user access policies are applied to the folder?
A.
The policy will be inherited by the projects in the folder but will not affect their resources.
B.
The policy will be inherited by the projects and their resources within the folder.
C.
The policy will be applied to all folders within the organization.
D.
The policy applies to the folder only, and will not be inherited by any projects.
B. The policy will be inherited by the projects and their resources within the folder.
When user access policies (IAM policies) are applied at the folder level in Google Cloud, these policies are inherited by all projects within that folder and also apply to the resources within those projects. This inheritance ensures that the access controls set at the folder level are enforced consistently across all the projects and their resources, providing centralized management of permissions.
Why the other options are incorrect:
A. The policy will be inherited by the projects in the folder but will not affect their resources: This is incorrect because the IAM policy applied at the folder level does affect both the projects and the resources within those projects. Resources like virtual machines, storage buckets, etc., will inherit the folder's IAM policy as well.
C. The policy will be applied to all folders within the organization: This is incorrect because IAM policies applied at one folder level only affect that folder and its contained projects/resources. It does not automatically propagate to other folders within the organization unless explicitly set for those folders as well.
D. The policy applies to the folder only, and will not be inherited by any projects: This is incorrect because IAM policies set at the folder level do get inherited by the projects within that folder, making it easier to manage access controls at a higher level in the hierarchy.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
joshnort
3 months, 1 week agojoshnort
3 months, 1 week ago