A company wants sensitive Google-managed services reachable only from trusted networks, including its hybrid landing zone, while reducing data exfiltration risk. Which design best fits?

Question

Accepted Answer

B. Use VPC Service Controls service perimeters and extend private access from hybrid networks with Private Google Access on-premises extensions. VPC Service Controls provides service perimeters for supported Google-managed services and can extend private access to hybrid environments with Private Google Access on-premises extensions. Cloud Interconnect improves connectivity, but by itself it does not create the context-based data exfiltration controls of a service perimeter.

A company wants sensitive Google-managed services reachable only from trusted networks, including its hybrid landing zone, while reducing data exfiltration risk. Which design best fits?

Related Questions

Discussion