IBM Exam C1000-172 Topic 2 Question 8 Discussion

In IBM Cloud, a monitoring agent properly authenticates with the IBM Cloud Monitoring service by using a service instance authorization. This approach allows secure interaction between the monitoring agent and the monitoring service by using identity and access management (IAM) policies and authorizations associated with a service instance.

Service instance authorizations grant specific permissions to services, enabling them to authenticate and interact with other services or resources securely. For IBM Cloud Monitoring, the agent uses the service instance authorization to send metrics to the monitoring service, ensuring that the communication is authenticated and authorized without relying on hard-coded credentials or API keys tied to individual users.

The service instance authorization method is recommended because it is aligned with best practices for securing services in cloud environments, offering a centralized and controlled way to manage permissions.

IBM Cloud Documentation Reference:

IBM Cloud Monitoring: Setting up and Configuring Agents

Service Authorization for IBM Cloud Services