Question: 1/50
Your organization needs to grant a third-party application temporary access to read objects from a specific Cloud Storage bucket without creating a service account. The access should expire automatically after 2 hours. What is the most appropriate solution?
Generate a signed URL with a 2-hour expiration time
Create a temporary IAM binding with a condition that expires after 2 hours
Share the bucket publicly and revoke access after 2 hours manually
Create a service account key and manually delete it after 2 hours