Your team uses a service account to authenticate data transfers from a given Compute Engine virtual machine instance of to a specified Cloud Storage bucket.
An engineer accidentally deletes the service account, which breaks application functionality.
You want to recover the application as quickly as possible without compromising security.
What should you do?
Click on the arrows to vote for the correct answer
A. B. C. D.B.
https://cloud.google.com/iam/docs/creating-managing-service-accounts#undeleting_a_service_accountOption A, temporarily disabling authentication on the Cloud Storage bucket, is not a recommended solution as it would compromise the security of the system. This option would allow anyone with access to the bucket to access the data stored in it, potentially leading to data loss or leakage. Therefore, it is not a valid solution.
Option B, using the undelete command to recover the deleted service account, may work in some cases, but it is not a reliable solution. The ability to undelete a service account depends on how long ago it was deleted and whether or not it was permanently deleted. Additionally, this option may take a significant amount of time to complete, which may not be acceptable in a time-sensitive situation.
Option C, creating a new service account with the same name as the deleted service account, is a valid solution. This option allows the system to resume normal operations quickly while maintaining the same level of security as before. It is important to note that this solution will only work if the deleted service account was not permanently deleted and if the account name is available.
Option D, updating the permissions of another existing service account and supplying those credentials to the application, is not a recommended solution as it may compromise the security of the system. Giving an existing service account more permissions than it needs to perform its intended function may allow it to access resources it should not have access to, leading to data loss or leakage.
In summary, option C, creating a new service account with the same name as the deleted service account, is the best solution to recover the application as quickly as possible without compromising security.