- Lab
-
Libraries: If you want this lab, consider one of these libraries.
- Cloud
- Security
Diagnose Blocked Workload Access in Google Cloud
In this lab, you'll troubleshoot a nightly export job in Google Cloud that started failing after a deployment. You'll: - Reproduce the failure and find where access is denied - Compare the workload's identity and configuration before and after the deployment - Restore the export with the smallest permitted change, without granting new access - Confirm the export works and that the weekly purge job is still blocked
Lab Info
Table of Contents
-
Challenge
Reproduce the failed export and locate the denial
Run the nightly export job to reproduce the failure, then use the service's logs to find the denied request. Identify the principal, permission, and resource in the denial before changing anything.
-
Challenge
Inspect the workload identity, effective configuration, and API state
Compare the release 41 and release 42 revisions to find which configuration change caused the failure. Check what access each candidate service account holds and confirm the required APIs are enabled. Then explain why each fix proposed in the ticket would violate least privilege or break a requirement.
-
Challenge
**Restore access with the minimum configuration change**
Deploy a new revision that keeps the release 42 configuration and runs as the intended service account. Restore access without granting, widening, or changing any IAM role.
-
Challenge
Verify the export succeeds and the purge stays blocked
Run the export and confirm it writes a new file in the v2 format. Then run the purge and confirm it is still denied, which proves the workload can do its job and nothing more.
Real skill practice before real-world application
Hands-on Labs are real environments created by industry experts to help you learn. These environments help you gain knowledge and experience, practice without compromising your system, test without risk, destroy without fear, and let you learn from your mistakes. Hands-on Labs: practice your skills before delivering in the real world.
Learn by doing
Engage hands-on with the tools and technologies you’re learning. You pick the skill, we provide the credentials and environment.
Follow your guide
All labs have detailed instructions and objectives, guiding you through the learning process and ensuring you understand every step.
Turn time into mastery
On average, you retain 75% more of your learning if you take time to practice. Hands-on labs set you up for success to make those skills stick.