Question

[Managing service incidents] Your company runs an e-commerce business. The application responsible for payment processing has structured JSON logging with the following schema: Capture and access of logs from the payment processing application is mandatory for operations, but the jsonPayload.user_email field contains personally identifiable information (PII). Your security team does not want the entire engineering team to have access to PII. You need to stop exposing PII to the engineering team and restrict access to security team members only. What should you do?

Accepted Answer

Apply a jsonPayload.user_email restricted field to the _Default bucket. Grant the Log Field Accessor role to the security team members.

Answer

Apply a jsonPayload.user_email exclusion filter to the _Default bucket.

Answer

Apply the conditional role binding resource.name.extract("locations/global/buckets/(bucket)/") == "_Default" to the _Default bucket.

Answer

Modify the application to toggle inclusion of user_email when the log_user_email environment variable is set to true. Restrict the engineering team members who can change the production environment variable by using the CODEOWNERS file.

[Managing service incidents] Your company runs an e-commerce business. The application responsible for payment processing has structured JSON logging…

Take the free PROFESSIONAL-CLOUD-DEVOPS-ENGINEER practice test

Other PROFESSIONAL-CLOUD-DEVOPS-ENGINEER practice questions