Professional Cloud Security EngineerEnsuring complianceMedium
A global healthcare organization uses Google Cloud for sensitive patient data. They need to ensure that all administrative access to their Google Cloud resources by Google support teams is logged and visible to their security and compliance officers. They also need to be able to review the justification for such access, including the specific reason and the Google employee's identity. Which Google Cloud service provides this level of transparency?
- ACloud Audit Logs
- BAccess Transparency
- CSecurity Command Center
- DCloud Logging
Show answer & explanationAnswer & explanation
Correct answer: B. Access Transparency
Access Transparency provides near real-time logs of actions taken by Google personnel when accessing customer content. These logs include details like the Google employee's identity, the reason for access, and the resources accessed, fulfilling the requirement for visibility and justification review.
Why the other options are wrong
- A. Cloud Audit Logs record administrative activities and data access by users within the customer's organization, not typically Google personnel's direct access to customer content for support.
- C. Security Command Center aggregates security findings and vulnerabilities but doesn't provide detailed logs of Google personnel access.
- D. Cloud Logging is a general logging service but doesn't specifically provide logs of Google personnel's access to customer content.
Access Transparency
Access Transparency provides near real-time logs of administrative actions taken by Google support and engineering personnel when accessing customer content, including justification and identity.
- Logs Google personnel's access to customer data and configurations.
- Includes details like employee identity, reason, and resources accessed.
- Provides auditable evidence for compliance and security reviews.
Memory trick: Access Transparency is like a 'CCTV' for Google's support team, showing their every move.