Exam Associate Data Practitioner topic 1 question 12 discussion

A and D would work but because to follow the principle of least privilege, we're going to choose A, Dataflow developer.

The best option is A. Request the Dataflow Developer role. Requesting the Dataflow Developer role is optimal because it grants the necessary permissions to restart Dataflow pipelines, aligning with the user's need, while adhering to the principle of least privilege by providing a focused set of permissions. Option B (Dataflow Viewer) is insufficient as it only provides read-only access and lacks the permission to restart pipelines. Option C (Dataflow Worker) is incorrect as it is intended for service accounts, not user access, and doesn't grant pipeline management permissions. Option D (Dataflow Admin) is excessive, granting far more permissions than needed for simply restarting pipelines, thus violating the principle of least privilege. Therefore, Option A is the clear and correct choice for requesting the minimum necessary IAM role to restart Dataflow pipelines.

Dataflow Worker provides the necessary permissions for managing and interacting with Dataflow streaming pipelines, including restarting them. This role gives you the ability to execute and manage the pipelines without granting excessive permissions, aligning with the principle of least privilege.