Google Cloud Digital LeaderSecurity and operations with Google CloudMedium
A data analytics company uses Google Cloud for processing sensitive customer data. They need to ensure that all administrative activities performed on their Google Cloud resources, such as creating storage buckets or modifying IAM policies, are recorded and immutable for compliance and auditing purposes. Which Google Cloud service provides this capability?
- ACloud Trace
- BCloud Source Repositories
- CCloud Monitoring
- DCloud Logging (Audit Logs)
Show answer & explanationAnswer & explanation
Correct answer: D. Cloud Logging (Audit Logs)
Cloud Logging, specifically its Audit Logs feature, automatically records administrative activities, data access, and system events for Google Cloud resources, which is crucial for compliance and auditing.
Why the other options are wrong
- A. Cloud Trace helps track latency and performance of requests in distributed systems.
- B. Cloud Source Repositories is for hosting and managing source code.
- C. Cloud Monitoring collects metrics and events for performance and health, not detailed administrative actions.
Cloud Audit Logs
Cloud Audit Logs maintain an immutable record of administrative activities, data access, and system events across Google Cloud resources, crucial for security, auditing, and compliance.
- Records who did what, where, and when.
- Three types: Admin Activity, Data Access, System Event.
- Automatically generated and retained.
- Essential for compliance and forensic analysis.
Memory trick: Logs audit every cloud step.