Google Cloud Platform Identity Architecture Questions

Assess design of Identity and Access Management across Google Cloud Platform. Topics include patterns for service accounts and short lived credentials, human user federation and single sign on using OpenID Connect, attribute based access control and least privilege, identity lifecycle and governance, delegated access models across projects and organizations, access certification, and auditability. Expect discussion of automation for credential rotation, compromise containment, and cross project trust models.