Your customer wants to group Google Cloud resources that share common IAM policies. What should you use?

Folders in Google Cloud provide a mechanism to group projects and other folders, creating a hierarchical structure. This hierarchy is crucial for managing IAM policies because policies applied at a higher level (like a folder) are inherited by all resources within that folder and its sub-folders. This allows for efficient, centralized management of access control for a collection of projects. Labels are key-value pairs used for organizing and filtering resources, but they do not enforce IAM policies. While a proper billing account structure is important for cost management, it does not directly group resources for IAM policy inheritance. Similarly, a project naming structure helps with organization but doesn't inherently apply or manage IAM policies across multiple projects.