5Configuring access and security

• 5.1IAM policies and roles

  Understand the core of Google Cloud access control: viewing and creating IAM policies, the difference and selection among basic, predefined, and custom roles, and designing access along the principle of least privilege.

• 5.2Service accounts

  Understand service accounts—identities used by apps and workloads: creating them, using them in IAM policies with least privilege, assigning them to resources, service account impersonation, and issuing short-lived credentials to avoid long-lived keys.