Identify Best Practices for Authorization
In this lesson you will learn the best practices for authorization using cloud IAM. First leverage and understand the resource hierarchy specifically use projects to group resources that share the same trust boundary. Check the policy granted on each resource and make sure you recognize the inheritance, because of inheritance always use the principle of least privilege when granting roles. Audit policies using cloud auto logs and audit memberships of groups used in policies. When it comes to using service accounts here few best practices. Be very careful when granting the service account users role as it provides access to all the resources for which the service account has access. Also when you create a service account give it a display name that clearly identifies its purpose ideally using an established naming convention inside your organization and when it comes to service account keys establish key rotation policies and methods