You have two Google Cloud projects, named Project A and Project

A. You need to create a Cloud Function in Project A that saves the output in a Cloud Storage bucket in Project

B. You want to follow the principle of least privilege. What should you do?

C. 1. Create a Google service account in Project

D. 2. Deploy the Cloud Function with the service account in Project

E. 3. Assign this service account the roles/storage.objectCreator role on the storage bucket residing in Project

F. 1. Create a Google service account in Project A2. Deploy the Cloud Function with the service account in Project

G. 3. Assign this service account the roles/storage.objectCreator role on the storage bucket residing in Project

H. 1. Determine the default App Engine service account (PROJECT_ID@appspot.gserviceaccount.com) in Project
 

Correct Answer: C

This question is in Google Professional Cloud Developer Exam
For getting Google Professional Cloud Developer Certificate