GCP-PCA · Review mode

An operations team needs administrative SSH access to many Compute Engine VMs. Each member should authenticate with their own personal SSH key, and key revocation should affect only that user. Which approach follows Google Cloud best practices?

• AA. Each team member adds their public SSH key to their Google Cloud account using OS Login, and the project enables OS Login
• BB. Generate one SSH key pair and distribute the private key to everyone
• CC. Embed shared credentials in instance metadata
• DD. Disable SSH on all VMs