Certification     Google     Cloud Certified Associate     Google Associate Cloud Engineer

---

Google Cloud Identity and Access Management (IAM) is an indispensable tool for Cloud Engineers. It offers centralized access control and visibility of all Google Cloud resources, providing a unified view of security policies across the entire organization.
Use this course to explore how IAM works in general and in Google Cloud. Learn how to manage IAM user roles, view IAM role assignments, and identify grantable roles. Practice working with custom roles, service accounts, and IAM audit logs. Lastly, examine identity federation in IAM. Learn how to access resources using workload identity and configure conditional access.
By the end of the course, you'll be able to manage all resource authorization using Google Cloud IAM. This course is part of a collection that prepares learners for the Google Cloud Associate Cloud Engineer certification.

---

---

Objectives

Google Associate Cloud Engineer: Google Identity & Access Management (IAM) discover the key concepts covered in this course describe the concepts comprising identity and access management (IAM) view IAM role assignments and list grantable roles manage IAM user roles by granting, changing, or revoking access identify the concepts and required permissions for IAM custom roles create an IAM custom role manage custom roles with Deployment Manager identify the types of service accounts and associated permissions available in Google Cloud IAM create and manage a service account create a new VM instance to run on a service account grant access to a service account in another project view IAM audit logs in Cloud Logging describe identity federation using identify pools, providers, and other concepts access resources using workload identity federation manage and configure conditional access, adding or modifying role bindings and providing temporary access summarize the key concepts covered in this course