Professional Cloud Security EngineerEnsuring complianceMedium
A healthcare organization is using Google Cloud and needs to ensure that they are promptly informed about important events related to their Google Cloud projects that could impact compliance or security, such as impending service deprecations, security bulletins, or policy violations. They require a centralized and reliable mechanism to receive these notifications across different departments. Which Google Cloud service should they use to manage these essential communications?
- ACloud Pub/Sub
- BEssential Contacts
- CCloud Logging
- DCloud Monitoring
Show answer & explanationAnswer & explanation
Correct answer: B. Essential Contacts
Essential Contacts allows organizations to specify contacts for receiving critical notifications from Google Cloud regarding security, abuse, billing, and other important compliance-related events. This ensures that the right people are informed about critical operational and security matters.
Why the other options are wrong
- A. Cloud Pub/Sub is a messaging service for asynchronous communication between applications, not for Google's direct notifications to customers.
- C. Cloud Logging collects and stores log entries, but doesn't manage who receives proactive critical notifications from Google Cloud.
- D. Cloud Monitoring collects metrics and creates alerts based on resource behavior, not for Google-initiated compliance notifications.
Essential Contacts
A Google Cloud service that allows organizations to define who should receive critical notifications from Google Cloud regarding various operational, security, and compliance-related events.
- Centralized management of notification recipients.
- Supports multiple contact types (e.g., security, legal, billing).
- Ensures critical information reaches the right stakeholders.
Memory trick: Essential Contacts: Your Cloud's Emergency Call List.