A security architect says VPC Service Controls alone is enough to govern both protected data and all metadata movement for supported services. Which response is most accurate?

Question

Accepted Answer

B. That is incorrect because VPC Service Controls is designed primarily to control data movement across supported services, while IAM should still be used to control metadata access. VPC Service Controls is designed primarily to control data movement across supported Google-managed services, not to provide comprehensive metadata control. Google recommends using IAM, including custom roles where needed, to govern metadata access appropriately.

A security architect says VPC Service Controls alone is enough to govern both protected data and all metadata movement for supported services. Which response is most accurate?

Related Questions

Discussion