Question 2

Explanation

The correct answer is to create an organization node and assign folders for each business unit. Organizing GCP projects based on different business units and providing separate sets of IAM permissions for each unit can be achieved by creating an organization node and assigning folders for each business unit. An organization node is the top-level node in the Google Cloud resource hierarchy. It provides a centralized location for managing resources across multiple projects and enables you to set policies and controls that apply to all resources within the organization. By assigning folders for each business unit under the organization node, you can group related projects together and apply IAM policies and permissions to the entire folder, rather than to individual projects. This makes it easier to manage permissions and ensure that each unit has the appropriate access to the resources they need. Additionally, by creating folders for each business unit, you can delegate management of those folders to the corresponding engineering group, allowing them to manage their own resources independently while still maintaining central control over the organization’s cloud resources.