- What are the three types of roles? Basic roles (previously known as primitive roles), predefined roles, and custom roles
- What are basic roles? There are several basic roles that existed prior to the introduction of IAM: Owner, Editor, and Viewer. These roles are concentric; that is, the Owner role includes the permissions in the Editor role, and the Editor role includes the permissions in the Viewer role.
- What are predefined roles? IAM provides additional predefined roles that give granular access to specific Google Cloud resources and prevent unwanted access to other resources. These roles are created and maintained by Google. Google automatically updates their permissions as necessary, such as when Google Cloud adds new features or services.
- What are custom roles? IAM also provides the ability to create customized IAM roles. You can create a custom IAM role with one or more permissions and then grant that custom role to users who are part of your organization.
- What is Cloud Logging? Cloud Logging is a fully managed service that performs at scale and can ingest application and platform log data, as well as custom log data from GKE environments, VMs, and other services inside and outside of Google Cloud. (Part of GCP Operations Suite, fka Stackdriver)
- What is Cloud Monitoring? Cloud Monitoring provides visibility into the performance, uptime, and overall health of cloud-powered applications. Collect metrics, events, and metadata from Google Cloud services, hosted uptime probes, application instrumentation, and a variety of common application components. Visualize this data on charts and dashboards and create alerts so you are notified when metrics are outside of expected ranges. (Part of GCP Operations Suite, fka Stackdriver)
- Google Cloud Storage classes:
AI APIs
AI (Platform)
BigQuery
Bigtable
Cloud SQL
Cloud Spanner
Dataflow
Dataprep
Dataproc
Pub/Sub