medium10 pts · first answer countscloud-securitygcp-iamdata-perimeter
GCP VPC Service Controls
In Google Cloud, a stolen service account token is used from an attacker's laptop to copy BigQuery data to their own project. Which control is designed to stop that even with valid credentials?
Discussion 0
Join free to post in the discussion.
Related questions
- Who patches the VM operating system?Cloud Engineer
- Principle of least privilegeCloud Engineer
- Protecting the root userCloud Engineer
- What HTTPS protectsCloud Engineer
- Shell access without opening port 22Cloud Engineer
- IAM user vs IAM roleCloud Engineer
- Explicit deny always winsCloud Engineer
- Nothing allowed means deniedCloud Engineer