You are deploying an application on Google Cloud that requires a relational database for storage. To satisfy your company’s security policies, your application must connect to your database through an encrypted and authenticated connection that requires minimal management and integrates with Identity and Access Management (IAM). What should you do?
Deploying a Cloud SQL database and configuring IAM database authentication is the correct approach. Accessing the database through the Cloud SQL Auth Proxy ensures that the connection is both encrypted and authenticated. The proxy takes care of managing the encryption and leveraging IAM for authentication, reducing the management overhead. This solution integrates well with Google Cloud's Identity and Access Management, satisfying the company's security requirements for minimal management and secure connections.
Cloud SQL Auth Proxy: This proxy ensures secure connections to your Cloud SQL database by automatically handling encryption (SSL/TLS) and IAM-based authentication. It simplifies the management of secure connections without needing to manage SSL/TLS certificates manually. IAM Database Authentication: This allows you to use IAM credentials to authenticate to the database, providing a unified and secure authentication mechanism that integrates seamlessly with Google Cloud IAM.
A,B: You must managing SSL certification and database credentials. D: Relies on database-specific credentials rather than IAM, which doesn't fully leverage the benefits of IAM integration.