Google Cloud Certified Professional-Data-Engineer Question # 19 Topic 3 Discussion

Remove Cloud Storage IAM permissions to the External Team on the acme-raw-data project

Create Virtual Private Cloud (VPC) firewall rules on the acme-raw-data protect that deny all Ingress traffic from the External Team CIDR range

Create a VPC Service Controls perimeter containing both protects and BigQuery as a restricted API Add the External Team users to the perimeter s Access Level

Create a VPC Service Controls perimeter containing both protects and Cloud Storage as a restricted API. Add the Development Team users to the perimeter's Access Level