Cert EspressoLearn. Practise. Find your flow.

A LITTLE FOCUS.
A BIG NEXT STEP.

Your pace. Your space.
Google Cloud · Agentic Architect

Agent authentication and Principal Access Boundary

Agentic Architect · Lesson 14 of 16 · 2:00:23

YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗

In this lesson

Prepare for the Google Cloud Professional Agentic Architect exam, on the official exam guide. In this lesson: OAuth for agents (two-legged and three-legged), API keys and tokens in the auth manager, Agent Identity in depth, and Principal Access Boundary. Includes three original practice questions.

Preview the topics
  • A Cymbal Air agent must read a traveler’s calendar, in a third-party app, on that traveler’s behalf. How should the agent authenticate?
  • Cymbal Air’s fare agent only needs to read fares, and its tools must never be able to change them, whatever the model decides. What should the architect do?
  • Even if someone grants a role by mistake, Cymbal Air’s agents must never reach resources outside Cymbal Air’s organization. What should the architect configure?