Google Cloud Professional Cloud Security Engineer — Question 72

You are exporting application logs to Cloud Storage. You encounter an error message that the log sinks don't support uniform bucket-level access policies. How should you resolve this error?

Answer options

• A. Change the access control model for the bucket
• B. Update your sink with the correct bucket destination.
• C. Add the roles/logging.logWriter Identity and Access Management (IAM) role to the bucket for the log sink identity.
• D. Add the roles/logging.bucketWriter Identity and Access Management (IAM) role to the bucket for the log sink identity.

Correct answer: A

Explanation

The correct answer is A because changing the access control model for the bucket will allow compatibility with log sinks. The other options involve updating IAM roles or the sink destination but do not address the fundamental issue with uniform bucket-level access policies, which is the core problem here.