← Google Cloud Platform learning pathGoogle Cloud Platform · Module 2 of 10
IAM and security
Control access with Google Cloud IAM.
📖 Key ideas
- IAM binds principals (users, groups, service accounts) to roles on resources.
- Basic roles (Owner, Editor, Viewer) are broad; prefer predefined roles.
- Service accounts are identities for apps.
- Avoid downloading service account keys; use workload identity.
- Secret Manager stores API keys and passwords.
💡 Real-life example: IAM is a guest list at a wedding hall: each guest gets access only to the areas on their pass.
PrincipalWho gets access
RoleCollection of permissions
Service accountIdentity for applications
Secret ManagerStores secrets securely