Learn the recommended Google practice for assigning IAM roles and using analytics tools to review Apigee API traffic patterns across multiple environments.
Table of Contents
Question
You work for an ecommerce company, and you are responsible for deploying and managing multiple APIs. The operations team wants to review the traffic patterns in the orders-prod and users-prod environments. These are the only environments in the store-prod environment group. You want to follow Google-recommended practices. What should you do?
A. Assign the Apigee Analytics Viewer IAM role to the operations team for both environments. Use Cloud Monitoring to review traffic patterns.
B. Assign the Apigee Analytics Viewer IAM role to the operations team for both environments. Use Apigee API Analytics to review traffic patterns.
C. Assign the Apigee API Reader IAM role to each user of the operations team for both environments. Use Cloud Monitoring to review traffic patterns.
D. Assign the Apigee API Reader IAM role to each user of the operations team for both environments. Use Apigee API Analytics to review traffic patterns.
Answer
To review traffic patterns in the orders-prod and users-prod Apigee environments, which are part of the store-prod environment group, the best approach is:
B. Assign the Apigee Analytics Viewer IAM role to the operations team for both environments. Use Apigee API Analytics to review traffic patterns.
Explanation
The Apigee Analytics Viewer IAM role grants read-only access to Apigee analytics data for the specified environments. This role allows the operations team to view traffic patterns without the ability to modify the APIs or analytics configuration.
Apigee API Analytics is the recommended tool for analyzing API traffic patterns within Apigee environments. It provides detailed insights into API usage, performance, and errors, enabling the operations team to identify trends, troubleshoot issues, and optimize API performance.
Using Cloud Monitoring (options A and C) is not the best choice because it is a general-purpose monitoring tool and does not provide the same level of granularity and API-specific metrics as Apigee API Analytics.
Assigning the Apigee API Reader IAM role (options C and D) is not necessary since this role is used for read-only access to API configurations and does not grant access to analytics data.
By following this approach, you adhere to Google-recommended practices for role-based access control and utilize the most appropriate tool for analyzing Apigee API traffic patterns.
Google Professional Cloud Developer certification exam assessment practice question and answer (Q&A) dump including multiple choice questions (MCQ) and objective type questions, with detail explanation and reference available free, helpful to pass the Google Professional Cloud Developer exam and earn Google Professional Cloud Developer certification.