Keep the reporting database off the public internet
A hands-on ACE lab. You produce the real artefact and 9 automated checks verify it behaves the way the exam expects.
- Certification
- ACE
- Format
- Artifact workspace
- Difficulty
- medium
- Estimated time
- 20 min
- Automated checks
- 9
The brief
Repair main.tf. Preserve app-network as a custom-mode VPC and keep reporting-db in us-central1 on PostgreSQL 15 with its current tier, REGIONAL availability, backups, and deletion protection. Reserve an internal /16 named google-managed-services-app-network for VPC peering on app-network, connect that range to servicenetworking.googleapis.com, and make Cloud SQL explicitly depend on the connection. Attach the instance to app-network for private IP, disable public IPv4, and remove authorized networks.
Part of ACE preparation
Labs are written by ExamNova to teach the decisions the exam tests. They are not reproductions of vendor lab content.