# IAM dan Keamanan Data (Data Engineering) > Least privilege, service accounts, peran GCP, enkripsi at rest/in transit, data masking, audit logs, kepatuhan GDPR, VPC Service Controls - 20 pertanyaan wawancara - Senior - [Pertanyaan Wawancara: Data Engineering](https://sharpskill.dev/id/technologies/data-engineering/pertanyaan-wawancara.md) ## 1. Apa prinsip fundamental yang harus diterapkan saat memberikan izin IAM di GCP? **Jawaban** Prinsip least privilege berarti memberikan hanya izin yang benar-benar diperlukan untuk menyelesaikan tugas. Dalam Data Engineering, ini berarti sebuah pipeline hanya boleh memiliki akses ke bucket, dataset, dan tabel yang benar-benar dibutuhkannya. Prinsip ini mengurangi permukaan serangan dan membatasi potensi kerusakan jika sebuah service account dikompromikan. ## 2. Apa perbedaan antara service account dan akun pengguna di GCP? **Jawaban** Service account adalah identitas yang dirancang untuk aplikasi dan layanan, sedangkan akun pengguna mewakili seseorang. Service account melakukan autentikasi menggunakan kunci JSON atau Workload Identity, tidak memiliki kata sandi, dan dirancang untuk otomatisasi. Dalam Data Engineering, setiap pipeline harus memiliki service account sendiri dengan izin spesifik. ## 3. Bagaimana hierarki peran IAM di GCP, dari yang paling sedikit hingga paling banyak izinnya? **Jawaban** Hierarki peran IAM dimulai dari Viewer (hanya baca) ke Editor (baca/tulis tanpa manajemen IAM) ke Owner (kontrol penuh termasuk IAM dan penagihan). Untuk pipeline data, disarankan menggunakan peran prabuatan granular seperti BigQuery Data Viewer atau Storage Object Creator daripada peran primitif yang terlalu luas ini. ## 17 pertanyaan lagi tersedia - Mengapa kunci JSON service account harus dihindari di lingkungan produksi GCP? - Apa perbedaan antara enkripsi at rest dan enkripsi in transit? Daftar gratis: https://sharpskill.dev/id/login ## Topik wawancara Data Engineering lainnya - [Linux & Shell - Dasar-dasar](https://sharpskill.dev/id/technologies/data-engineering/pertanyaan-wawancara/linux-shell-basics.md): 20 pertanyaan, Junior - [Git & GitHub - Dasar-dasar](https://sharpskill.dev/id/technologies/data-engineering/pertanyaan-wawancara/git-github-fundamentals.md): 20 pertanyaan, Junior - [Python lanjutan untuk Data Engineering](https://sharpskill.dev/id/technologies/data-engineering/pertanyaan-wawancara/python-advanced-de.md): 25 pertanyaan, Junior - [Docker - Dasar-dasar](https://sharpskill.dev/id/technologies/data-engineering/pertanyaan-wawancara/docker-fundamentals.md): 25 pertanyaan, Junior - [Google Cloud Platform - Dasar-Dasar](https://sharpskill.dev/id/technologies/data-engineering/pertanyaan-wawancara/gcp-fundamentals.md): 20 pertanyaan, Junior - [CI/CD dan Kualitas Kode](https://sharpskill.dev/id/technologies/data-engineering/pertanyaan-wawancara/ci-cd-code-quality.md): 20 pertanyaan, Mid-Level - [Docker Compose](https://sharpskill.dev/id/technologies/data-engineering/pertanyaan-wawancara/docker-compose.md): 20 pertanyaan, Mid-Level - [FastAPI - API Data](https://sharpskill.dev/id/technologies/data-engineering/pertanyaan-wawancara/fastapi.md): 20 pertanyaan, Mid-Level - [SQL Lanjutan untuk Data Engineering](https://sharpskill.dev/id/technologies/data-engineering/pertanyaan-wawancara/sql-advanced-de.md): 20 pertanyaan, Mid-Level - [Data Lake - Arsitektur dan Ingesti](https://sharpskill.dev/id/technologies/data-engineering/pertanyaan-wawancara/data-lake.md): 20 pertanyaan, Mid-Level - [BigQuery untuk Data Engineering](https://sharpskill.dev/id/technologies/data-engineering/pertanyaan-wawancara/bigquery-de.md): 20 pertanyaan, Mid-Level - [PostgreSQL - Administrasi](https://sharpskill.dev/id/technologies/data-engineering/pertanyaan-wawancara/postgresql-admin.md): 20 pertanyaan, Mid-Level - [Data Modeling untuk Data Engineering](https://sharpskill.dev/id/technologies/data-engineering/pertanyaan-wawancara/data-modeling-de.md): 20 pertanyaan, Mid-Level - [Fivetran & Airbyte - Ingesti Data](https://sharpskill.dev/id/technologies/data-engineering/pertanyaan-wawancara/fivetran-airbyte.md): 20 pertanyaan, Mid-Level - [dbt - Dasar](https://sharpskill.dev/id/technologies/data-engineering/pertanyaan-wawancara/dbt-fundamentals-de.md): 20 pertanyaan, Mid-Level - [Apache Airflow - Dasar-Dasar](https://sharpskill.dev/id/technologies/data-engineering/pertanyaan-wawancara/airflow-fundamentals.md): 20 pertanyaan, Mid-Level - [Kubernetes - Dasar-Dasar](https://sharpskill.dev/id/technologies/data-engineering/pertanyaan-wawancara/kubernetes-fundamentals.md): 20 pertanyaan, Mid-Level - [dbt - Fitur lanjutan](https://sharpskill.dev/id/technologies/data-engineering/pertanyaan-wawancara/dbt-advanced-de.md): 20 pertanyaan, Senior - [Pola ETL / ELT / ETLT](https://sharpskill.dev/id/technologies/data-engineering/pertanyaan-wawancara/etl-elt-patterns.md): 20 pertanyaan, Senior - [Apache Airflow - Lanjutan](https://sharpskill.dev/id/technologies/data-engineering/pertanyaan-wawancara/airflow-advanced.md): 20 pertanyaan, Senior - [Airflow + dbt - Orkestrasi Pipeline](https://sharpskill.dev/id/technologies/data-engineering/pertanyaan-wawancara/airflow-dbt-integration.md): 20 pertanyaan, Senior - [PySpark - Pemrosesan Skala Besar](https://sharpskill.dev/id/technologies/data-engineering/pertanyaan-wawancara/pyspark.md): 20 pertanyaan, Senior - [Google Pub/Sub - Streaming Data](https://sharpskill.dev/id/technologies/data-engineering/pertanyaan-wawancara/pubsub-streaming.md): 20 pertanyaan, Senior - [Apache Beam & Dataflow](https://sharpskill.dev/id/technologies/data-engineering/pertanyaan-wawancara/apache-beam-dataflow.md): 20 pertanyaan, Senior - [Kubernetes - Produksi dan Penskalaan](https://sharpskill.dev/id/technologies/data-engineering/pertanyaan-wawancara/kubernetes-advanced.md): 20 pertanyaan, Senior - [Terraform - Infrastructure as Code](https://sharpskill.dev/id/technologies/data-engineering/pertanyaan-wawancara/terraform.md): 20 pertanyaan, Senior - [Database NoSQL](https://sharpskill.dev/id/technologies/data-engineering/pertanyaan-wawancara/nosql-databases.md): 20 pertanyaan, Senior - [Data Architecture Modern](https://sharpskill.dev/id/technologies/data-engineering/pertanyaan-wawancara/data-architecture.md): 20 pertanyaan, Senior - [Monitoring dan Observability](https://sharpskill.dev/id/technologies/data-engineering/pertanyaan-wawancara/monitoring-observability.md): 20 pertanyaan, Senior --- Source: SharpSkill (https://sharpskill.dev), tech interview preparation for your real stack. HTML version of this page: https://sharpskill.dev/id/technologies/data-engineering/pertanyaan-wawancara/iam-security-de