Cert EspressoLearn. Practise. Find your flow.

A LITTLE FOCUS.
A BIG NEXT STEP.

Your pace. Your space.
Google Cloud · Agentic Architect

Agent permissions, registry, and MCP integrations

Agentic Architect · Lesson 9 of 16 · 1:11:56

YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗

In this lesson

Prepare for the Google Cloud Professional Agentic Architect exam, on the official exam guide. In this lesson: Agent Identity, Agent Registry, the Google Cloud MCP servers with IAM deny policies, and custom integrations. Includes three original practice questions.

Preview the topics
  • Four Cymbal Air agents share one service account with a key, and the audit log cannot tell which agent changed a record. What should the team use instead?
  • Cymbal Air’s security team wants every agent in the organization to use only read-only tools of the Google Cloud MCP servers, whatever roles a project grants. What should it create?
  • Cymbal Air’s crew-scheduling system has an internal API, and a dozen agents need it as a set of tools, with central governance. What should the team do?