Overview of VPC Service Controls

<!doctype html> <html lang="en" dir="ltr"> <head><script type="text/javascript" src="/_static/js/bundle-playback.js?v=HxkREWBo" charset="utf-8"></script> <script type="text/javascript" src="/_static/js/wombat.js?v=txqj7nKC" charset="utf-8"></script> <script>window.RufflePlayer=window.RufflePlayer||{};window.RufflePlayer.config={"autoplay":"on","unmuteOverlay":"hidden"};</script> <script type="text/javascript" src="/_static/js/ruffle/ruffle.js"></script> <script type="text/javascript"> __wm.init("https://web.archive.org/web"); __wm.wombat("https://cloud.google.com/vpc-service-controls/docs/overview","20241124040939","https://web.archive.org/","web","/_static/", "1732421379"); </script> <link rel="stylesheet" type="text/css" href="/_static/css/banner-styles.css?v=S1zqJCYt" /> <link rel="stylesheet" type="text/css" href="/_static/css/iconochive.css?v=3PDvdIFv" />  <meta name="google-signin-client-id" content="721724668570-nbkv1cfusk7kk4eni4pjvepaus73b13t.apps.googleusercontent.com"> <meta name="google-signin-scope" content="profile email https://www.googleapis.com/auth/developerprofiles https://www.googleapis.com/auth/developerprofiles.award https://www.googleapis.com/auth/cloud-platform https://www.googleapis.com/auth/webhistory"> <meta property="og:site_name" content="Google Cloud"> <meta property="og:type" content="website"><meta name="theme-color" content="#039be5"><meta charset="utf-8"> <meta content="IE=Edge" http-equiv="X-UA-Compatible"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="manifest" href="/web/20241124040939/https://cloud.google.com/_pwa/cloud/manifest.json" crossorigin="use-credentials"> <link rel="preconnect" href="//web.archive.org/web/20241124040939/https://www.gstatic.com/" crossorigin> <link rel="preconnect" href="//web.archive.org/web/20241124040939/https://fonts.gstatic.com/" crossorigin> <link rel="preconnect" href="//web.archive.org/web/20241124040939/https://fonts.googleapis.com/" crossorigin> <link rel="preconnect" href="//web.archive.org/web/20241124040939/https://apis.google.com/" crossorigin> <link rel="preconnect" href="//web.archive.org/web/20241124040939/https://www.google-analytics.com/" crossorigin><link rel="stylesheet" href="//web.archive.org/web/20241124040939cs_/https://fonts.googleapis.com/css?family=Google+Sans:400,500,700|Google+Sans+Text:400,400italic,500,500italic,700,700italic|Roboto:400,400italic,500,500italic,700,700italic|Roboto+Mono:400,500,700&display=swap"> <link rel="stylesheet" href="//web.archive.org/web/20241124040939cs_/https://fonts.googleapis.com/css2?family=Material+Icons&family=Material+Symbols+Outlined&display=block"><link rel="stylesheet" href="https://web.archive.org/web/20241124040939cs_/https://www.gstatic.com/devrel-devsite/prod/v870e399c64f7c43c99a3043db4b3a74327bb93d0914e84a0c3dba90bbfd67625/cloud/css/app.css"> <link rel="shortcut icon" href="https://web.archive.org/web/20241124040939im_/https://www.gstatic.com/devrel-devsite/prod/v870e399c64f7c43c99a3043db4b3a74327bb93d0914e84a0c3dba90bbfd67625/cloud/images/favicons/onecloud/favicon.ico"> <link rel="apple-touch-icon" href="https://web.archive.org/web/20241124040939im_/https://www.gstatic.com/devrel-devsite/prod/v870e399c64f7c43c99a3043db4b3a74327bb93d0914e84a0c3dba90bbfd67625/cloud/images/favicons/onecloud/super_cloud.png"><link rel="canonical" href="https://web.archive.org/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/overview"><link rel="search" type="application/opensearchdescription+xml" title="Google Cloud" href="https://web.archive.org/web/20241124040939/https://cloud.google.com/s/opensearch.xml"> <link rel="alternate" hreflang="en" href="https://web.archive.org/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/overview"/><link rel="alternate" hreflang="x-default" href="https://web.archive.org/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/overview"/><link rel="alternate" hreflang="zh-Hans" href="https://web.archive.org/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/overview?hl=zh-cn"/><link rel="alternate" hreflang="fr" href="https://web.archive.org/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/overview?hl=fr"/><link rel="alternate" hreflang="de" href="https://web.archive.org/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/overview?hl=de"/><link rel="alternate" hreflang="id" href="https://web.archive.org/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/overview?hl=id"/><link rel="alternate" hreflang="it" href="https://web.archive.org/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/overview?hl=it"/><link rel="alternate" hreflang="ja" href="https://web.archive.org/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/overview?hl=ja"/><link rel="alternate" hreflang="ko" href="https://web.archive.org/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/overview?hl=ko"/><link rel="alternate" hreflang="pt-BR" href="https://web.archive.org/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/overview?hl=pt-br"/><link rel="alternate" hreflang="es-419" href="https://web.archive.org/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/overview?hl=es-419"/><title>Overview of VPC Service Controls  |  Google Cloud</title> <meta property="og:title" content="Overview of VPC Service Controls | Google Cloud"><meta property="og:url" content="https://web.archive.org/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/overview"><meta property="og:image" content="https://web.archive.org/web/20241124040939im_/https://cloud.google.com/_static/cloud/images/social-icon-google-cloud-1200-630.png"> <meta property="og:image:width" content="1200"> <meta property="og:image:height" content="630"><meta property="og:locale" content="en"><meta name="twitter:card" content="summary_large_image"><script type="application/ld+json"> { "@context": "https://web.archive.org/web/20241124040939/https://schema.org", "@type": "Article", "headline": "Overview of VPC Service Controls" } </script><script type="application/ld+json"> { "@context": "https://web.archive.org/web/20241124040939/https://schema.org", "@type": "BreadcrumbList", "itemListElement": [{ "@type": "ListItem", "position": 1, "name": "VPC Service Controls", "item": "https://web.archive.org/web/20241124040939/https://cloud.google.com/vpc-service-controls" },{ "@type": "ListItem", "position": 2, "name": "Documentation", "item": "https://web.archive.org/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs" },{ "@type": "ListItem", "position": 3, "name": "Overview of VPC Service Controls", "item": "https://web.archive.org/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/overview" }] } </script> <link rel="stylesheet" href="/web/20241124040939cs_/https://cloud.google.com/extras.css"></head> <body class="" template="page" theme="cloud-theme" type="article" layout="docs" free-trial display-toc pending> <devsite-progress type="indeterminate" id="app-progress"></devsite-progress> <section class="devsite-wrapper"> <devsite-cookie-notification-bar></devsite-cookie-notification-bar><cloudx-track usercountry="FR"></cloudx-track> <cloudx-utils-init></cloudx-utils-init> <devsite-header keep-tabs-visible> <div class="devsite-header--inner nocontent"> <div class="devsite-top-logo-row-wrapper-wrapper"> <div class="devsite-top-logo-row-wrapper"> <div class="devsite-top-logo-row"> <button type="button" id="devsite-hamburger-menu" class="devsite-header-icon-button button-flat material-icons gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Navigation menu button" visually-hidden aria-label="Open menu"> </button> <div class="devsite-product-name-wrapper"> <a href="/web/20241124040939/https://cloud.google.com/" class="devsite-site-logo-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Site logo" track-type="globalNav" track-name="googleCloud" track-metadata-position="nav" track-metadata-eventdetail="nav"> <picture> <img src="https://web.archive.org/web/20241124040939im_/https://www.gstatic.com/devrel-devsite/prod/v870e399c64f7c43c99a3043db4b3a74327bb93d0914e84a0c3dba90bbfd67625/cloud/images/cloud-logo.svg" class="devsite-site-logo" alt="Google Cloud"> </picture> </a> <span class="devsite-product-name"> <ul class="devsite-breadcrumb-list"> <li class="devsite-breadcrumb-item devsite-has-google-wordmark"> </li> </ul> </span> </div> <div class="devsite-top-logo-row-middle"> <div class="devsite-header-upper-tabs"> <cloudx-tabs-nav class="upper-tabs"> <nav class="devsite-tabs-wrapper" aria-label="Upper tabs"> <tab class="devsite-active"> <a href="https://web.archive.org/web/20241124040939/https://cloud.google.com/docs" track-metadata-eventdetail="https://cloud.google.com/docs" class="devsite-tabs-content gc-analytics-event " track-type="nav" track-metadata-position="nav - docs-home" track-metadata-module="primary nav" aria-label="Documentation, selected" data-category="Site-Wide Custom Events" data-label="Tab: Documentation" track-name="docs-home" track-link-column-type="single-column"> Documentation </a> </tab> <tab class="devsite-dropdown devsite-clickable "> <a href="https://web.archive.org/web/20241124040939/https://cloud.google.com/docs/tech-area-overviews" track-metadata-eventdetail="https://cloud.google.com/docs/tech-area-overviews" class="devsite-tabs-content gc-analytics-event " track-type="nav" track-metadata-position="nav - technology-areas" track-metadata-module="primary nav" data-category="Site-Wide Custom Events" data-label="Tab: Technology areas" track-name="technology-areas" track-link-column-type="single-column"> Technology areas </a> <a href="#" role="button" aria-haspopup="true" aria-expanded="false" aria-label="Dropdown menu for Technology areas" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/tech-area-overviews" track-metadata-position="nav - technology-areas" track-metadata-module="primary nav" data-category="Site-Wide Custom Events" data-label="Tab: Technology areas" track-name="technology-areas" track-link-column-type="single-column" class="devsite-tabs-dropdown-toggle devsite-icon devsite-icon-arrow-drop-down"></a> <div class="devsite-tabs-dropdown" aria-label="submenu" hidden> <button class="devsite-tabs-close-button material-icons button-flat gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Close dropdown menu" aria-label="Close dropdown menu" track-type="nav" track-name="close" track-metadata-eventdetail="#" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav">close</button> <div class="devsite-tabs-dropdown-content"> <div class="devsite-tabs-dropdown-column "> <ul class="devsite-tabs-dropdown-section "> <li class="devsite-nav-item"> <a href="https://web.archive.org/web/20241124040939/https://cloud.google.com/docs/ai-ml" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/ai-ml" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip> <div class="devsite-nav-item-title"> AI and ML </div> </a> </li> <li class="devsite-nav-item"> <a href="https://web.archive.org/web/20241124040939/https://cloud.google.com/docs/application-development" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/application-development" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip> <div class="devsite-nav-item-title"> Application development </div> </a> </li> <li class="devsite-nav-item"> <a href="https://web.archive.org/web/20241124040939/https://cloud.google.com/docs/application-hosting" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/application-hosting" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip> <div class="devsite-nav-item-title"> Application hosting </div> </a> </li> <li class="devsite-nav-item"> <a href="https://web.archive.org/web/20241124040939/https://cloud.google.com/docs/compute-area" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/compute-area" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip> <div class="devsite-nav-item-title"> Compute </div> </a> </li> <li class="devsite-nav-item"> <a href="https://web.archive.org/web/20241124040939/https://cloud.google.com/docs/data" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/data" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip> <div class="devsite-nav-item-title"> Data analytics and pipelines </div> </a> </li> <li class="devsite-nav-item"> <a href="https://web.archive.org/web/20241124040939/https://cloud.google.com/docs/databases" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/databases" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip> <div class="devsite-nav-item-title"> Databases </div> </a> </li> <li class="devsite-nav-item"> <a href="https://web.archive.org/web/20241124040939/https://cloud.google.com/docs/dhm-cloud" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/dhm-cloud" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip> <div class="devsite-nav-item-title"> Distributed, hybrid, and multicloud </div> </a> </li> <li class="devsite-nav-item"> <a href="https://web.archive.org/web/20241124040939/https://cloud.google.com/docs/generative-ai" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/generative-ai" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip> <div class="devsite-nav-item-title"> Generative AI </div> </a> </li> <li class="devsite-nav-item"> <a href="https://web.archive.org/web/20241124040939/https://cloud.google.com/docs/industry" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/industry" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip> <div class="devsite-nav-item-title"> Industry solutions </div> </a> </li> <li class="devsite-nav-item"> <a href="https://web.archive.org/web/20241124040939/https://cloud.google.com/docs/networking" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/networking" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip> <div class="devsite-nav-item-title"> Networking </div> </a> </li> <li class="devsite-nav-item"> <a href="https://web.archive.org/web/20241124040939/https://cloud.google.com/docs/observability" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/observability" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip> <div class="devsite-nav-item-title"> Observability and monitoring </div> </a> </li> <li class="devsite-nav-item"> <a href="https://web.archive.org/web/20241124040939/https://cloud.google.com/docs/security" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/security" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip> <div class="devsite-nav-item-title"> Security </div> </a> </li> <li class="devsite-nav-item"> <a href="https://web.archive.org/web/20241124040939/https://cloud.google.com/docs/storage" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/storage" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip> <div class="devsite-nav-item-title"> Storage </div> </a> </li> </ul> </div> </div> </div> </tab> <tab class="devsite-dropdown devsite-clickable "> <a href="https://web.archive.org/web/20241124040939/https://cloud.google.com/docs/cross-product-overviews" track-metadata-eventdetail="https://cloud.google.com/docs/cross-product-overviews" class="devsite-tabs-content gc-analytics-event " track-type="nav" track-metadata-position="nav - crossproduct" track-metadata-module="primary nav" data-category="Site-Wide Custom Events" data-label="Tab: Cross-product tools" track-name="crossproduct" track-link-column-type="single-column"> Cross-product tools </a> <a href="#" role="button" aria-haspopup="true" aria-expanded="false" aria-label="Dropdown menu for Cross-product tools" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/cross-product-overviews" track-metadata-position="nav - crossproduct" track-metadata-module="primary nav" data-category="Site-Wide Custom Events" data-label="Tab: Cross-product tools" track-name="crossproduct" track-link-column-type="single-column" class="devsite-tabs-dropdown-toggle devsite-icon devsite-icon-arrow-drop-down"></a> <div class="devsite-tabs-dropdown" aria-label="submenu" hidden> <button class="devsite-tabs-close-button material-icons button-flat gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Close dropdown menu" aria-label="Close dropdown menu" track-type="nav" track-name="close" track-metadata-eventdetail="#" track-metadata-position="nav - crossproduct" track-metadata-module="tertiary nav">close</button> <div class="devsite-tabs-dropdown-content"> <div class="devsite-tabs-dropdown-column "> <ul class="devsite-tabs-dropdown-section "> <li class="devsite-nav-item"> <a href="https://web.archive.org/web/20241124040939/https://cloud.google.com/docs/access-resources" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/access-resources" track-metadata-position="nav - crossproduct" track-metadata-module="tertiary nav" tooltip> <div class="devsite-nav-item-title"> Access and resources management </div> </a> </li> <li class="devsite-nav-item"> <a href="https://web.archive.org/web/20241124040939/https://cloud.google.com/docs/costs-usage" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/costs-usage" track-metadata-position="nav - crossproduct" track-metadata-module="tertiary nav" tooltip> <div class="devsite-nav-item-title"> Costs and usage management </div> </a> </li> <li class="devsite-nav-item"> <a href="https://web.archive.org/web/20241124040939/https://cloud.google.com/docs/devtools" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/devtools" track-metadata-position="nav - crossproduct" track-metadata-module="tertiary nav" tooltip> <div class="devsite-nav-item-title"> Google Cloud SDK, languages, frameworks, and tools </div> </a> </li> <li class="devsite-nav-item"> <a href="https://web.archive.org/web/20241124040939/https://cloud.google.com/docs/iac" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/iac" track-metadata-position="nav - crossproduct" track-metadata-module="tertiary nav" tooltip> <div class="devsite-nav-item-title"> Infrastructure as code </div> </a> </li> <li class="devsite-nav-item"> <a href="https://web.archive.org/web/20241124040939/https://cloud.google.com/docs/migration" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/migration" track-metadata-position="nav - crossproduct" track-metadata-module="tertiary nav" tooltip> <div class="devsite-nav-item-title"> Migration </div> </a> </li> </ul> </div> </div> </div> </tab> <tab class="devsite-dropdown devsite-clickable "> <a href="https://web.archive.org/web/20241124040939/https://cloud.google.com/" track-metadata-eventdetail="https://cloud.google.com/" class="devsite-tabs-content gc-analytics-event " track-type="nav" track-metadata-position="nav - related-sites" track-metadata-module="primary nav" data-category="Site-Wide Custom Events" data-label="Tab: Related sites" track-name="related-sites" track-link-column-type="single-column"> Related sites </a> <a href="#" role="button" aria-haspopup="true" aria-expanded="false" aria-label="Dropdown menu for Related sites" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/" track-metadata-position="nav - related-sites" track-metadata-module="primary nav" data-category="Site-Wide Custom Events" data-label="Tab: Related sites" track-name="related-sites" track-link-column-type="single-column" class="devsite-tabs-dropdown-toggle devsite-icon devsite-icon-arrow-drop-down"></a> <div class="devsite-tabs-dropdown" aria-label="submenu" hidden> <button class="devsite-tabs-close-button material-icons button-flat gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Close dropdown menu" aria-label="Close dropdown menu" track-type="nav" track-name="close" track-metadata-eventdetail="#" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav">close</button> <div class="devsite-tabs-dropdown-content"> <div class="devsite-tabs-dropdown-column "> <ul class="devsite-tabs-dropdown-section "> <li class="devsite-nav-item"> <a href="https://web.archive.org/web/20241124040939/https://cloud.google.com/" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip> <div class="devsite-nav-item-title"> Google Cloud Home </div> </a> </li> <li class="devsite-nav-item"> <a href="https://web.archive.org/web/20241124040939/https://cloud.google.com/free" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/free" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip> <div class="devsite-nav-item-title"> Free Trial and Free Tier </div> </a> </li> <li class="devsite-nav-item"> <a href="https://web.archive.org/web/20241124040939/https://cloud.google.com/architecture" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/architecture" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip> <div class="devsite-nav-item-title"> Architecture Center </div> </a> </li> <li class="devsite-nav-item"> <a href="https://web.archive.org/web/20241124040939/https://cloud.google.com/blog" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/blog" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip> <div class="devsite-nav-item-title"> Blog </div> </a> </li> <li class="devsite-nav-item"> <a href="https://web.archive.org/web/20241124040939/https://cloud.google.com/contact" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/contact" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip> <div class="devsite-nav-item-title"> Contact Sales </div> </a> </li> <li class="devsite-nav-item"> <a href="https://web.archive.org/web/20241124040939/https://cloud.google.com/developers" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/developers" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip> <div class="devsite-nav-item-title"> Google Cloud Developer Center </div> </a> </li> <li class="devsite-nav-item"> <a href="https://web.archive.org/web/20241124040939/https://developers.google.com/" track-type="nav" track-metadata-eventdetail="https://developers.google.com/" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip> <div class="devsite-nav-item-title"> Google Developer Center </div> </a> </li> <li class="devsite-nav-item"> <a href="https://web.archive.org/web/20241124040939/https://console.cloud.google.com/marketplace" track-type="nav" track-metadata-eventdetail="https://console.cloud.google.com/marketplace" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip> <div class="devsite-nav-item-title"> Google Cloud Marketplace </div> </a> </li> <li class="devsite-nav-item"> <a href="https://web.archive.org/web/20241124040939/https://cloud.google.com/marketplace/docs" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/marketplace/docs" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip> <div class="devsite-nav-item-title"> Google Cloud Marketplace Documentation </div> </a> </li> <li class="devsite-nav-item"> <a href="https://web.archive.org/web/20241124040939/https://www.cloudskillsboost.google/paths" track-type="nav" track-metadata-eventdetail="https://www.cloudskillsboost.google/paths" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip> <div class="devsite-nav-item-title"> Google Cloud Skills Boost </div> </a> </li> <li class="devsite-nav-item"> <a href="https://web.archive.org/web/20241124040939/https://cloud.google.com/solutions" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/solutions" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip> <div class="devsite-nav-item-title"> Google Cloud Solution Center </div> </a> </li> <li class="devsite-nav-item"> <a href="https://web.archive.org/web/20241124040939/https://cloud.google.com/support-hub" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/support-hub" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip> <div class="devsite-nav-item-title"> Google Cloud Support </div> </a> </li> <li class="devsite-nav-item"> <a href="https://web.archive.org/web/20241124040939/https://www.youtube.com/@googlecloudtech" track-type="nav" track-metadata-eventdetail="https://www.youtube.com/@googlecloudtech" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip> <div class="devsite-nav-item-title"> Google Cloud Tech Youtube Channel </div> </a> </li> </ul> </div> </div> </div> </tab> </nav> </cloudx-tabs-nav> </div> <devsite-search enable-signin enable-search enable-suggestions project-name="VPC Service Controls" tenant-name="Google Cloud" project-scope="/vpc-service-controls/docs" url-scoped="https://cloud.google.com/s/results/vpc-service-controls/docs"> <form class="devsite-search-form" action="https://web.archive.org/web/20241124040939/https://cloud.google.com/s/results" method="GET"> <div class="devsite-search-container"> <button type="button" search-open class="devsite-search-button devsite-header-icon-button button-flat material-icons" aria-label="Open search"></button> <div class="devsite-searchbox"> <input aria-activedescendant="" aria-autocomplete="list" aria-label="Search" aria-expanded="false" aria-haspopup="listbox" autocomplete="off" class="devsite-search-field devsite-search-query" name="q" placeholder="Search" role="combobox" type="text" value=""> <div class="devsite-search-image material-icons" aria-hidden="true"> </div> <div class="devsite-search-shortcut-icon-container" aria-hidden="true"> <kbd class="devsite-search-shortcut-icon">/</kbd> </div> </div> </div> </form> <button type="button" search-close class="devsite-search-button devsite-header-icon-button button-flat material-icons" aria-label="Close search"></button> </devsite-search> </div> <devsite-language-selector> <ul role="presentation"> <li role="presentation"> <a role="menuitem" lang="en">English</a> </li> <li role="presentation"> <a role="menuitem" lang="de">Deutsch</a> </li> <li role="presentation"> <a role="menuitem" lang="es_419">Español – América Latina</a> </li> <li role="presentation"> <a role="menuitem" lang="fr">Français</a> </li> <li role="presentation"> <a role="menuitem" lang="id">Indonesia</a> </li> <li role="presentation"> <a role="menuitem" lang="it">Italiano</a> </li> <li role="presentation"> <a role="menuitem" lang="pt_br">Português – Brasil</a> </li> <li role="presentation"> <a role="menuitem" lang="zh_cn">中文 – 简体</a> </li> <li role="presentation"> <a role="menuitem" lang="ja">日本語</a> </li> <li role="presentation"> <a role="menuitem" lang="ko">한국어</a> </li> </ul> </devsite-language-selector> <devsite-user enable-profiles fp-auth id="devsite-user"> <span class="button devsite-top-button" aria-hidden="true" visually-hidden>Sign in</span> </devsite-user> </div> </div> </div> <div class="devsite-collapsible-section "> <div class="devsite-header-background"> <div class="devsite-product-id-row" hidden> <div class="devsite-product-description-row"> </div> </div> <div class="devsite-doc-set-nav-row"> <ul class="devsite-breadcrumb-list"> <li class="devsite-breadcrumb-item "> <a href="https://web.archive.org/web/20241124040939/https://cloud.google.com/vpc-service-controls" class="devsite-breadcrumb-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Lower Header" data-value="1" track-type="globalNav" track-name="breadcrumb" track-metadata-position="1" track-metadata-eventdetail="VPC Service Controls"> VPC Service Controls </a> </li> </ul> <cloudx-tabs-nav class="lower-tabs"> <nav class="devsite-tabs-wrapper" aria-label="Lower tabs"> <tab class="devsite-active"> <a href="https://web.archive.org/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/overview" track-metadata-eventdetail="https://cloud.google.com/vpc-service-controls/docs/overview" class="devsite-tabs-content gc-analytics-event " track-type="nav" track-metadata-position="nav - guides" track-metadata-module="primary nav" aria-label="Guides, selected" data-category="Site-Wide Custom Events" data-label="Tab: Guides" track-name="guides"> Guides </a> </tab> <tab> <a href="https://web.archive.org/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/apis" track-metadata-eventdetail="https://cloud.google.com/vpc-service-controls/docs/apis" class="devsite-tabs-content gc-analytics-event " track-type="nav" track-metadata-position="nav - reference" track-metadata-module="primary nav" data-category="Site-Wide Custom Events" data-label="Tab: Reference" track-name="reference"> Reference </a> </tab> <tab> <a href="https://web.archive.org/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/resources" track-metadata-eventdetail="https://cloud.google.com/vpc-service-controls/docs/resources" class="devsite-tabs-content gc-analytics-event " track-type="nav" track-metadata-position="nav - resources" track-metadata-module="primary nav" data-category="Site-Wide Custom Events" data-label="Tab: Resources" track-name="resources"> Resources </a> </tab> </nav> </cloudx-tabs-nav> <div class="devsite-product-button-row"> <a href="https://web.archive.org/web/20241124040939/https://cloud.google.com/contact" class="cta-button-secondary button " data-overflow="devsite-tabs-wrapper" track-type="contact" data-overflow-wrapper="tab" track-metadata-eventdetail="nav" track-name="sales" track-metadata-position="nav" data-overflow-container="left">Contact Us</a> <a href="//web.archive.org/web/20241124040939/https://console.cloud.google.com/freetrial" class="cloud-free-trial-button cta-button-primary button-primary button cloud-button cloud-button--primary " track-metadata-eventdetail="nav" referrerpolicy="no-referrer-when-downgrade" track-metadata-position="nav" track-name="gcpCta" track-type="freeTrial" data-overflow-class="devsite-header-link devsite-top-button button cloud-free-trial-button cloud-free-trial-enabled cloud-button cloud-button--primary" data-overflow="devsite-top-logo-row" data-overflow-container="right">Start free</a> </div> </div> </div> </div> </div> </devsite-header> <devsite-book-nav scrollbars> <div class="devsite-book-nav-filter"> <span class="filter-list-icon material-icons" aria-hidden="true"></span> <input type="text" placeholder="Filter" aria-label="Type to filter" role="searchbox"> <span class="filter-clear-button hidden" data-title="Clear filter" aria-label="Clear filter" role="button" tabindex="0"></span> </div> <nav class="devsite-book-nav devsite-nav nocontent" aria-label="Side menu"> <div class="devsite-mobile-header"> <button type="button" id="devsite-close-nav" class="devsite-header-icon-button button-flat material-icons gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Close navigation" aria-label="Close navigation"> </button> <div class="devsite-product-name-wrapper"> <a href="/web/20241124040939/https://cloud.google.com/" class="devsite-site-logo-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Site logo" track-type="globalNav" track-name="googleCloud" track-metadata-position="nav" track-metadata-eventdetail="nav"> <picture> <img src="https://web.archive.org/web/20241124040939im_/https://www.gstatic.com/devrel-devsite/prod/v870e399c64f7c43c99a3043db4b3a74327bb93d0914e84a0c3dba90bbfd67625/cloud/images/cloud-logo.svg" class="devsite-site-logo" alt="Google Cloud"> </picture> </a> <span class="devsite-product-name"> <ul class="devsite-breadcrumb-list"> <li class="devsite-breadcrumb-item devsite-has-google-wordmark"> </li> </ul> </span> </div> </div> <div class="devsite-book-nav-wrapper"> <div class="devsite-mobile-nav-top"> <ul class="devsite-nav-list"> <li class="devsite-nav-item"> <a href="/web/20241124040939/https://cloud.google.com/docs" class="devsite-nav-title gc-analytics-event devsite-nav-active" data-category="Site-Wide Custom Events" data-label="Tab: Documentation" track-name="docs-home" track-link-column-type="single-column" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Documentation" track-type="globalNav" track-metadata-eventdetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip> Documentation </span> </a> <ul class="devsite-nav-responsive-tabs"> <li class="devsite-nav-item"> <a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/overview" class="devsite-nav-title gc-analytics-event devsite-nav-has-children devsite-nav-active" data-category="Site-Wide Custom Events" data-label="Tab: Guides" track-name="guides" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Guides" track-type="globalNav" track-metadata-eventdetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip menu="_book"> Guides </span> <span class="devsite-nav-icon material-icons" data-icon="forward" menu="_book"> </span> </a> </li> <li class="devsite-nav-item"> <a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/apis" class="devsite-nav-title gc-analytics-event devsite-nav-has-children " data-category="Site-Wide Custom Events" data-label="Tab: Reference" track-name="reference" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Reference" track-type="globalNav" track-metadata-eventdetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip> Reference </span> <span class="devsite-nav-icon material-icons" data-icon="forward"> </span> </a> </li> <li class="devsite-nav-item"> <a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/resources" class="devsite-nav-title gc-analytics-event devsite-nav-has-children " data-category="Site-Wide Custom Events" data-label="Tab: Resources" track-name="resources" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Resources" track-type="globalNav" track-metadata-eventdetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip> Resources </span> <span class="devsite-nav-icon material-icons" data-icon="forward"> </span> </a> </li> </ul> </li> <li class="devsite-nav-item"> <a href="/web/20241124040939/https://cloud.google.com/docs/tech-area-overviews" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Tab: Technology areas" track-name="technology-areas" track-link-column-type="single-column" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Technology areas" track-type="globalNav" track-metadata-eventdetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip> Technology areas </span> </a> <ul class="devsite-nav-responsive-tabs devsite-nav-has-menu "> <li class="devsite-nav-item"> <span class="devsite-nav-title" tooltip data-category="Site-Wide Custom Events" data-label="Tab: Technology areas" track-name="technology-areas" track-link-column-type="single-column"> <span class="devsite-nav-text" tooltip menu="Technology areas"> More </span> <span class="devsite-nav-icon material-icons" data-icon="forward" menu="Technology areas"> </span> </span> </li> </ul> </li> <li class="devsite-nav-item"> <a href="/web/20241124040939/https://cloud.google.com/docs/cross-product-overviews" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Tab: Cross-product tools" track-name="crossproduct" track-link-column-type="single-column" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Cross-product tools" track-type="globalNav" track-metadata-eventdetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip> Cross-product tools </span> </a> <ul class="devsite-nav-responsive-tabs devsite-nav-has-menu "> <li class="devsite-nav-item"> <span class="devsite-nav-title" tooltip data-category="Site-Wide Custom Events" data-label="Tab: Cross-product tools" track-name="crossproduct" track-link-column-type="single-column"> <span class="devsite-nav-text" tooltip menu="Cross-product tools"> More </span> <span class="devsite-nav-icon material-icons" data-icon="forward" menu="Cross-product tools"> </span> </span> </li> </ul> </li> <li class="devsite-nav-item"> <a href="/web/20241124040939/https://cloud.google.com/" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Tab: Related sites" track-name="related-sites" track-link-column-type="single-column" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Related sites" track-type="globalNav" track-metadata-eventdetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip> Related sites </span> </a> <ul class="devsite-nav-responsive-tabs devsite-nav-has-menu "> <li class="devsite-nav-item"> <span class="devsite-nav-title" tooltip data-category="Site-Wide Custom Events" data-label="Tab: Related sites" track-name="related-sites" track-link-column-type="single-column"> <span class="devsite-nav-text" tooltip menu="Related sites"> More </span> <span class="devsite-nav-icon material-icons" data-icon="forward" menu="Related sites"> </span> </span> </li> </ul> </li> <li class="devsite-nav-item"> <a href="//web.archive.org/web/20241124040939/https://console.cloud.google.com/" class="devsite-nav-title gc-analytics-event " track-metadata-eventdetail="nav" track-name="console" referrerpolicy="no-referrer-when-downgrade" track-metadata-position="nav" track-type="globalNav" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Console" track-type="navMenu" track-metadata-eventdetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip> Console </span> </a> </li> <li class="devsite-nav-item"> <a href="/web/20241124040939/https://cloud.google.com/contact" class="cta-button-secondary button" data-overflow="devsite-tabs-wrapper" track-type="contact" data-overflow-wrapper="tab" track-metadata-eventdetail="nav" track-name="sales" track-metadata-position="nav" data-overflow-container="left" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Contact Us" track-type="navMenu" track-metadata-eventdetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip> Contact Us </span> </a> </li> <li class="devsite-nav-item"> <a href="//web.archive.org/web/20241124040939/https://console.cloud.google.com/freetrial" class="cloud-free-trial-button cta-button-primary button-primary button cloud-button cloud-button--primary" track-metadata-eventdetail="nav" referrerpolicy="no-referrer-when-downgrade" track-metadata-position="nav" track-name="gcpCta" track-type="freeTrial" data-overflow-class="devsite-header-link devsite-top-button button cloud-free-trial-button cloud-free-trial-enabled cloud-button cloud-button--primary" data-overflow="devsite-top-logo-row" data-overflow-container="right" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Start free" track-type="navMenu" track-metadata-eventdetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip> Start free </span> </a> </li> </ul> </div> <div class="devsite-mobile-nav-bottom"> <ul class="devsite-nav-list" menu="_book"> <li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Discover</span> </div></li> <li class="devsite-nav-item"><a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/overview" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /vpc-service-controls/docs/overview" track-type="bookNav" track-name="click" track-metadata-eventdetail="/vpc-service-controls/docs/overview"><span class="devsite-nav-text" tooltip>Product overview</span></a></li> <li class="devsite-nav-item"><a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/supported-products" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /vpc-service-controls/docs/supported-products" track-type="bookNav" track-name="click" track-metadata-eventdetail="/vpc-service-controls/docs/supported-products"><span class="devsite-nav-text" tooltip>Supported products</span></a></li> <li class="devsite-nav-item"><a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/restricted-vip-services" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /vpc-service-controls/docs/restricted-vip-services" track-type="bookNav" track-name="click" track-metadata-eventdetail="/vpc-service-controls/docs/restricted-vip-services"><span class="devsite-nav-text" tooltip>Services supported by the restricted VIP</span></a></li> <li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Get started</span> </div></li> <li class="devsite-nav-item"><a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/access-control" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /vpc-service-controls/docs/access-control" track-type="bookNav" track-name="click" track-metadata-eventdetail="/vpc-service-controls/docs/access-control"><span class="devsite-nav-text" tooltip>Access control with IAM</span></a></li> <li class="devsite-nav-item"><a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/enable" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /vpc-service-controls/docs/enable" track-type="bookNav" track-name="click" track-metadata-eventdetail="/vpc-service-controls/docs/enable"><span class="devsite-nav-text" tooltip>Best practices for enabling VPC Service Controls</span></a></li> <li class="devsite-nav-item"><a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/set-up-service-perimeter" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /vpc-service-controls/docs/set-up-service-perimeter" track-type="bookNav" track-name="click" track-metadata-eventdetail="/vpc-service-controls/docs/set-up-service-perimeter"><span class="devsite-nav-text" tooltip>Set up a perimeter using Google Cloud console</span></a></li> <li class="devsite-nav-item"><a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/add-projects-perimeter-terraform" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /vpc-service-controls/docs/add-projects-perimeter-terraform" track-type="bookNav" track-name="click" track-metadata-eventdetail="/vpc-service-controls/docs/add-projects-perimeter-terraform"><span class="devsite-nav-text" tooltip>Add projects to a perimeter using Terraform</span></a></li> <li class="devsite-nav-item"><a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/set-up-service-perimeter-verify-access" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /vpc-service-controls/docs/set-up-service-perimeter-verify-access" track-type="bookNav" track-name="click" track-metadata-eventdetail="/vpc-service-controls/docs/set-up-service-perimeter-verify-access"><span class="devsite-nav-text" tooltip>Set up a VPC Service Controls perimeter for a Virtual Private Cloud network</span></a></li> <li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Create and test service perimeters</span> </div></li> <li class="devsite-nav-item"><a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/service-perimeters" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /vpc-service-controls/docs/service-perimeters" track-type="bookNav" track-name="click" track-metadata-eventdetail="/vpc-service-controls/docs/service-perimeters"><span class="devsite-nav-text" tooltip>Service perimeter overview</span></a></li> <li class="devsite-nav-item"><a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/architect-perimeters" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /vpc-service-controls/docs/architect-perimeters" track-type="bookNav" track-name="click" track-metadata-eventdetail="/vpc-service-controls/docs/architect-perimeters"><span class="devsite-nav-text" tooltip>Design and architect perimeters</span></a></li> <li class="devsite-nav-item"><a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/create-service-perimeters" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /vpc-service-controls/docs/create-service-perimeters" track-type="bookNav" track-name="click" track-metadata-eventdetail="/vpc-service-controls/docs/create-service-perimeters"><span class="devsite-nav-text" tooltip>Create a perimeter</span></a></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Test the effect of perimeters</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/dry-run-mode" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /vpc-service-controls/docs/dry-run-mode" track-type="bookNav" track-name="click" track-metadata-eventdetail="/vpc-service-controls/docs/dry-run-mode"><span class="devsite-nav-text" tooltip>Dry run mode for perimeters</span></a></li><li class="devsite-nav-item"><a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/manage-dry-run-configurations" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /vpc-service-controls/docs/manage-dry-run-configurations" track-type="bookNav" track-name="click" track-metadata-eventdetail="/vpc-service-controls/docs/manage-dry-run-configurations"><span class="devsite-nav-text" tooltip>Enforce and update dry run configurations</span></a></li></ul></div></li> <li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Control access using service perimeters</span> </div></li> <li class="devsite-nav-item"><a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/vpc-accessible-services" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /vpc-service-controls/docs/vpc-accessible-services" track-type="bookNav" track-name="click" track-metadata-eventdetail="/vpc-service-controls/docs/vpc-accessible-services"><span class="devsite-nav-text" tooltip>VPC accessible services overview</span></a></li> <li class="devsite-nav-item"><a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/access-level-design" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /vpc-service-controls/docs/access-level-design" track-type="bookNav" track-name="click" track-metadata-eventdetail="/vpc-service-controls/docs/access-level-design"><span class="devsite-nav-text" tooltip>Design access levels</span></a></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Use ingress and egress rules</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/ingress-egress-rules" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /vpc-service-controls/docs/ingress-egress-rules" track-type="bookNav" track-name="click" track-metadata-eventdetail="/vpc-service-controls/docs/ingress-egress-rules"><span class="devsite-nav-text" tooltip>Ingress and egress rules overview</span></a></li><li class="devsite-nav-item"><a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/configuring-ingress-egress-policies" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /vpc-service-controls/docs/configuring-ingress-egress-policies" track-type="bookNav" track-name="click" track-metadata-eventdetail="/vpc-service-controls/docs/configuring-ingress-egress-policies"><span class="devsite-nav-text" tooltip>Configure ingress and egress rules</span></a></li><li class="devsite-nav-item devsite-nav-preview"><a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/configure-identity-groups" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /vpc-service-controls/docs/configure-identity-groups" track-type="bookNav" track-name="click" track-metadata-eventdetail="/vpc-service-controls/docs/configure-identity-groups"><span class="devsite-nav-text" tooltip>Configure identity groups and third-party identities</span><span class="devsite-nav-icon material-icons" data-icon="preview" data-title="Preview" aria-hidden="true"></span></a></li><li class="devsite-nav-item devsite-nav-preview"><a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/identity-groups-examples" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /vpc-service-controls/docs/identity-groups-examples" track-type="bookNav" track-name="click" track-metadata-eventdetail="/vpc-service-controls/docs/identity-groups-examples"><span class="devsite-nav-text" tooltip>Example of using identity groups and third-party identities</span><span class="devsite-nav-icon material-icons" data-icon="preview" data-title="Preview" aria-hidden="true"></span></a></li><li class="devsite-nav-item"><a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/secure-data-exchange" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /vpc-service-controls/docs/secure-data-exchange" track-type="bookNav" track-name="click" track-metadata-eventdetail="/vpc-service-controls/docs/secure-data-exchange"><span class="devsite-nav-text" tooltip>Secure data exchange with ingress and egress rules</span></a></li><li class="devsite-nav-item"><a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/context-aware-access" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /vpc-service-controls/docs/context-aware-access" track-type="bookNav" track-name="click" track-metadata-eventdetail="/vpc-service-controls/docs/context-aware-access"><span class="devsite-nav-text" tooltip>Context-aware access with ingress rules</span></a></li></ul></div></li> <li class="devsite-nav-item"><a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/use-access-levels" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /vpc-service-controls/docs/use-access-levels" track-type="bookNav" track-name="click" track-metadata-eventdetail="/vpc-service-controls/docs/use-access-levels"><span class="devsite-nav-text" tooltip>Allow access to protected resources from outside a perimeter</span></a></li> <li class="devsite-nav-item"><a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/enable-internal-ip-access" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /vpc-service-controls/docs/enable-internal-ip-access" track-type="bookNav" track-name="click" track-metadata-eventdetail="/vpc-service-controls/docs/enable-internal-ip-access"><span class="devsite-nav-text" tooltip>Allow access to protected resources from an internal IP address</span></a></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Configure and manage scoped access policies</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/scoped-policies-overview" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /vpc-service-controls/docs/scoped-policies-overview" track-type="bookNav" track-name="click" track-metadata-eventdetail="/vpc-service-controls/docs/scoped-policies-overview"><span class="devsite-nav-text" tooltip>Scoped policy overview</span></a></li><li class="devsite-nav-item"><a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/manage-policies" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /vpc-service-controls/docs/manage-policies" track-type="bookNav" track-name="click" track-metadata-eventdetail="/vpc-service-controls/docs/manage-policies"><span class="devsite-nav-text" tooltip>Create a scoped policy</span></a></li></ul></div></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Manage access for VPC networks</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/vpc-perimeters-management" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /vpc-service-controls/docs/vpc-perimeters-management" track-type="bookNav" track-name="click" track-metadata-eventdetail="/vpc-service-controls/docs/vpc-perimeters-management"><span class="devsite-nav-text" tooltip>VPC networks management in service perimeters</span></a></li><li class="devsite-nav-item"><a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/vpc-networks-rules" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /vpc-service-controls/docs/vpc-networks-rules" track-type="bookNav" track-name="click" track-metadata-eventdetail="/vpc-service-controls/docs/vpc-networks-rules"><span class="devsite-nav-text" tooltip>Rules for including VPC networks in service perimeters</span></a></li><li class="devsite-nav-item"><a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/migrate-vpc-perimeters" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /vpc-service-controls/docs/migrate-vpc-perimeters" track-type="bookNav" track-name="click" track-metadata-eventdetail="/vpc-service-controls/docs/migrate-vpc-perimeters"><span class="devsite-nav-text" tooltip>Example migration of VPC networks into separate perimeters</span></a></li></ul></div></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Manage service perimeters</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/manage-service-perimeters" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /vpc-service-controls/docs/manage-service-perimeters" track-type="bookNav" track-name="click" track-metadata-eventdetail="/vpc-service-controls/docs/manage-service-perimeters"><span class="devsite-nav-text" tooltip>Manage perimeters</span></a></li><li class="devsite-nav-item"><a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/bulk-operations" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /vpc-service-controls/docs/bulk-operations" track-type="bookNav" track-name="click" track-metadata-eventdetail="/vpc-service-controls/docs/bulk-operations"><span class="devsite-nav-text" tooltip>Make bulk changes to perimeters</span></a></li></ul></div></li> <li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Enable communication across service perimeters</span> </div></li> <li class="devsite-nav-item"><a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/share-across-perimeters" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /vpc-service-controls/docs/share-across-perimeters" track-type="bookNav" track-name="click" track-metadata-eventdetail="/vpc-service-controls/docs/share-across-perimeters"><span class="devsite-nav-text" tooltip>Perimeter bridge overview</span></a></li> <li class="devsite-nav-item"><a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/create-perimeter-bridges" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /vpc-service-controls/docs/create-perimeter-bridges" track-type="bookNav" track-name="click" track-metadata-eventdetail="/vpc-service-controls/docs/create-perimeter-bridges"><span class="devsite-nav-text" tooltip>Create a perimeter bridge</span></a></li> <li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Configure private connectivity</span> </div></li> <li class="devsite-nav-item"><a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/private-connectivity" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /vpc-service-controls/docs/private-connectivity" track-type="bookNav" track-name="click" track-metadata-eventdetail="/vpc-service-controls/docs/private-connectivity"><span class="devsite-nav-text" tooltip>Private Google Access with VPC Service Controls</span></a></li> <li class="devsite-nav-item"><a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/set-up-private-connectivity" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /vpc-service-controls/docs/set-up-private-connectivity" track-type="bookNav" track-name="click" track-metadata-eventdetail="/vpc-service-controls/docs/set-up-private-connectivity"><span class="devsite-nav-text" tooltip>Set up private connectivity to Google APIs and services</span></a></li> <li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Monitor</span> </div></li> <li class="devsite-nav-item"><a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/audit-logging" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /vpc-service-controls/docs/audit-logging" track-type="bookNav" track-name="click" track-metadata-eventdetail="/vpc-service-controls/docs/audit-logging"><span class="devsite-nav-text" tooltip>Audit logging</span></a></li> <li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Troubleshoot</span> </div></li> <li class="devsite-nav-item"><a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/retrieve-troubleshoot-errors" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /vpc-service-controls/docs/retrieve-troubleshoot-errors" track-type="bookNav" track-name="click" track-metadata-eventdetail="/vpc-service-controls/docs/retrieve-troubleshoot-errors"><span class="devsite-nav-text" tooltip>Retrieve errors from audit logs</span></a></li> <li class="devsite-nav-item"><a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/troubleshooter" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /vpc-service-controls/docs/troubleshooter" track-type="bookNav" track-name="click" track-metadata-eventdetail="/vpc-service-controls/docs/troubleshooter"><span class="devsite-nav-text" tooltip>Troubleshoot service perimeter denials</span></a></li> <li class="devsite-nav-item"><a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/troubleshooting" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /vpc-service-controls/docs/troubleshooting" track-type="bookNav" track-name="click" track-metadata-eventdetail="/vpc-service-controls/docs/troubleshooting"><span class="devsite-nav-text" tooltip>Troubleshoot common issues</span></a></li> <li class="devsite-nav-item"><a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/troubleshoot-services-within-perimeter" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /vpc-service-controls/docs/troubleshoot-services-within-perimeter" track-type="bookNav" track-name="click" track-metadata-eventdetail="/vpc-service-controls/docs/troubleshoot-services-within-perimeter"><span class="devsite-nav-text" tooltip>Troubleshoot issues with other services</span></a></li> </ul> <ul class="devsite-nav-list" menu="Technology areas" aria-label="Side menu" hidden> <li class="devsite-nav-item"> <a href="/web/20241124040939/https://cloud.google.com/docs/ai-ml" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: AI and ML" track-type="navMenu" track-metadata-eventdetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip> AI and ML </span> </a> </li> <li class="devsite-nav-item"> <a href="/web/20241124040939/https://cloud.google.com/docs/application-development" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Application development" track-type="navMenu" track-metadata-eventdetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip> Application development </span> </a> </li> <li class="devsite-nav-item"> <a href="/web/20241124040939/https://cloud.google.com/docs/application-hosting" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Application hosting" track-type="navMenu" track-metadata-eventdetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip> Application hosting </span> </a> </li> <li class="devsite-nav-item"> <a href="/web/20241124040939/https://cloud.google.com/docs/compute-area" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Compute" track-type="navMenu" track-metadata-eventdetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip> Compute </span> </a> </li> <li class="devsite-nav-item"> <a href="/web/20241124040939/https://cloud.google.com/docs/data" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Data analytics and pipelines" track-type="navMenu" track-metadata-eventdetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip> Data analytics and pipelines </span> </a> </li> <li class="devsite-nav-item"> <a href="/web/20241124040939/https://cloud.google.com/docs/databases" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Databases" track-type="navMenu" track-metadata-eventdetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip> Databases </span> </a> </li> <li class="devsite-nav-item"> <a href="/web/20241124040939/https://cloud.google.com/docs/dhm-cloud" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Distributed, hybrid, and multicloud" track-type="navMenu" track-metadata-eventdetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip> Distributed, hybrid, and multicloud </span> </a> </li> <li class="devsite-nav-item"> <a href="/web/20241124040939/https://cloud.google.com/docs/generative-ai" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Generative AI" track-type="navMenu" track-metadata-eventdetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip> Generative AI </span> </a> </li> <li class="devsite-nav-item"> <a href="/web/20241124040939/https://cloud.google.com/docs/industry" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Industry solutions" track-type="navMenu" track-metadata-eventdetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip> Industry solutions </span> </a> </li> <li class="devsite-nav-item"> <a href="/web/20241124040939/https://cloud.google.com/docs/networking" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Networking" track-type="navMenu" track-metadata-eventdetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip> Networking </span> </a> </li> <li class="devsite-nav-item"> <a href="/web/20241124040939/https://cloud.google.com/docs/observability" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Observability and monitoring" track-type="navMenu" track-metadata-eventdetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip> Observability and monitoring </span> </a> </li> <li class="devsite-nav-item"> <a href="/web/20241124040939/https://cloud.google.com/docs/security" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Security" track-type="navMenu" track-metadata-eventdetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip> Security </span> </a> </li> <li class="devsite-nav-item"> <a href="/web/20241124040939/https://cloud.google.com/docs/storage" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Storage" track-type="navMenu" track-metadata-eventdetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip> Storage </span> </a> </li> </ul> <ul class="devsite-nav-list" menu="Cross-product tools" aria-label="Side menu" hidden> <li class="devsite-nav-item"> <a href="/web/20241124040939/https://cloud.google.com/docs/access-resources" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Access and resources management" track-type="navMenu" track-metadata-eventdetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip> Access and resources management </span> </a> </li> <li class="devsite-nav-item"> <a href="/web/20241124040939/https://cloud.google.com/docs/costs-usage" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Costs and usage management" track-type="navMenu" track-metadata-eventdetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip> Costs and usage management </span> </a> </li> <li class="devsite-nav-item"> <a href="/web/20241124040939/https://cloud.google.com/docs/devtools" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Cloud SDK, languages, frameworks, and tools" track-type="navMenu" track-metadata-eventdetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip> Google Cloud SDK, languages, frameworks, and tools </span> </a> </li> <li class="devsite-nav-item"> <a href="/web/20241124040939/https://cloud.google.com/docs/iac" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Infrastructure as code" track-type="navMenu" track-metadata-eventdetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip> Infrastructure as code </span> </a> </li> <li class="devsite-nav-item"> <a href="/web/20241124040939/https://cloud.google.com/docs/migration" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Migration" track-type="navMenu" track-metadata-eventdetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip> Migration </span> </a> </li> </ul> <ul class="devsite-nav-list" menu="Related sites" aria-label="Side menu" hidden> <li class="devsite-nav-item"> <a href="/web/20241124040939/https://cloud.google.com/" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Cloud Home" track-type="navMenu" track-metadata-eventdetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip> Google Cloud Home </span> </a> </li> <li class="devsite-nav-item"> <a href="/web/20241124040939/https://cloud.google.com/free" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Free Trial and Free Tier" track-type="navMenu" track-metadata-eventdetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip> Free Trial and Free Tier </span> </a> </li> <li class="devsite-nav-item"> <a href="/web/20241124040939/https://cloud.google.com/architecture" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Architecture Center" track-type="navMenu" track-metadata-eventdetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip> Architecture Center </span> </a> </li> <li class="devsite-nav-item"> <a href="https://web.archive.org/web/20241124040939/https://cloud.google.com/blog" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Blog" track-type="navMenu" track-metadata-eventdetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip> Blog </span> </a> </li> <li class="devsite-nav-item"> <a href="/web/20241124040939/https://cloud.google.com/contact" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Contact Sales" track-type="navMenu" track-metadata-eventdetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip> Contact Sales </span> </a> </li> <li class="devsite-nav-item"> <a href="/web/20241124040939/https://cloud.google.com/developers" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Cloud Developer Center" track-type="navMenu" track-metadata-eventdetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip> Google Cloud Developer Center </span> </a> </li> <li class="devsite-nav-item"> <a href="https://web.archive.org/web/20241124040939/https://developers.google.com/" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Developer Center" track-type="navMenu" track-metadata-eventdetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip> Google Developer Center </span> </a> </li> <li class="devsite-nav-item"> <a href="https://web.archive.org/web/20241124040939/https://console.cloud.google.com/marketplace" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Cloud Marketplace" track-type="navMenu" track-metadata-eventdetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip> Google Cloud Marketplace </span> </a> </li> <li class="devsite-nav-item"> <a href="/web/20241124040939/https://cloud.google.com/marketplace/docs" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Cloud Marketplace Documentation" track-type="navMenu" track-metadata-eventdetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip> Google Cloud Marketplace Documentation </span> </a> </li> <li class="devsite-nav-item"> <a href="https://web.archive.org/web/20241124040939/https://www.cloudskillsboost.google/paths" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Cloud Skills Boost" track-type="navMenu" track-metadata-eventdetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip> Google Cloud Skills Boost </span> </a> </li> <li class="devsite-nav-item"> <a href="/web/20241124040939/https://cloud.google.com/solutions" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Cloud Solution Center" track-type="navMenu" track-metadata-eventdetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip> Google Cloud Solution Center </span> </a> </li> <li class="devsite-nav-item"> <a href="/web/20241124040939/https://cloud.google.com/support-hub" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Cloud Support" track-type="navMenu" track-metadata-eventdetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip> Google Cloud Support </span> </a> </li> <li class="devsite-nav-item"> <a href="https://web.archive.org/web/20241124040939/https://www.youtube.com/@googlecloudtech" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Cloud Tech Youtube Channel" track-type="navMenu" track-metadata-eventdetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip> Google Cloud Tech Youtube Channel </span> </a> </li> </ul> </div> </div> </nav> </devsite-book-nav> <section id="gc-wrapper"> <main role="main" class="devsite-main-content" has-book-nav has-sidebar> <div class="devsite-sidebar"> <div class="devsite-sidebar-content"> <devsite-toc class="devsite-nav" role="navigation" aria-label="On this page" depth="2" scrollbars></devsite-toc> <devsite-recommendations-sidebar class="nocontent devsite-nav"> </devsite-recommendations-sidebar> </div> </div> <devsite-content> <article class="devsite-article"> <div class="devsite-article-meta nocontent" role="navigation"> <ul class="devsite-breadcrumb-list" aria-label="Breadcrumb"> <li class="devsite-breadcrumb-item "> <a href="https://web.archive.org/web/20241124040939/https://cloud.google.com/" class="devsite-breadcrumb-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Breadcrumbs" data-value="1" track-type="globalNav" track-name="breadcrumb" track-metadata-position="1" track-metadata-eventdetail="Google Cloud"> Home </a> </li> <li class="devsite-breadcrumb-item "> <div class="devsite-breadcrumb-guillemet material-icons" aria-hidden="true"></div> <a href="https://web.archive.org/web/20241124040939/https://cloud.google.com/vpc-service-controls" class="devsite-breadcrumb-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Breadcrumbs" data-value="2" track-type="globalNav" track-name="breadcrumb" track-metadata-position="2" track-metadata-eventdetail="VPC Service Controls"> VPC Service Controls </a> </li> <li class="devsite-breadcrumb-item "> <div class="devsite-breadcrumb-guillemet material-icons" aria-hidden="true"></div> <a href="https://web.archive.org/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs" class="devsite-breadcrumb-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Breadcrumbs" data-value="3" track-type="globalNav" track-name="breadcrumb" track-metadata-position="3" track-metadata-eventdetail="VPC Service Controls"> Documentation </a> </li> <li class="devsite-breadcrumb-item "> <div class="devsite-breadcrumb-guillemet material-icons" aria-hidden="true"></div> <a href="https://web.archive.org/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/overview" class="devsite-breadcrumb-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Breadcrumbs" data-value="4" track-type="globalNav" track-name="breadcrumb" track-metadata-position="4" track-metadata-eventdetail=""> Guides </a> </li> </ul> <devsite-thumb-rating position="header"> </devsite-thumb-rating> </div> <devsite-feedback position="header" project-name="VPC Service Controls" product-id="5058704" bucket="documentation" context="" version="t-devsite-webserver-20241114-r00-rc02.464922260396498922" data-label="Send Feedback Button" track-type="feedback" track-name="sendFeedbackLink" track-metadata-position="header" class="nocontent" project-icon="https://www.gstatic.com/devrel-devsite/prod/v870e399c64f7c43c99a3043db4b3a74327bb93d0914e84a0c3dba90bbfd67625/cloud/images/favicons/onecloud/super_cloud.png"> <button> Send feedback </button> </devsite-feedback> <h1 class="devsite-page-title" tabindex="-1"> Overview of VPC Service Controls </h1> <devsite-feature-tooltip ack-key="AckCollectionsBookmarkTooltipDismiss" analytics-category="Site-Wide Custom Events" analytics-action-show="Callout Profile displayed" analytics-action-close="Callout Profile dismissed" analytics-label="Create Collection Callout" class="devsite-page-bookmark-tooltip nocontent" dismiss-button="true" id="devsite-collections-dropdown" dismiss-button-text="Dismiss" close-button-text="Got it"> <devsite-bookmark></devsite-bookmark> <span slot="popout-heading"> Stay organized with collections </span> <span slot="popout-contents"> Save and categorize content based on your preferences. </span> </devsite-feature-tooltip> <div class="devsite-page-title-meta"><devsite-view-release-notes></devsite-view-release-notes></div> <devsite-toc class="devsite-nav" depth="2" devsite-toc-embedded> </devsite-toc> <div class="devsite-article-body clearfix "> <p>This topic provides an overview of VPC Service Controls and describes its advantages and capabilities.</p> <h2 id="who-use-vpc-service-controls" data-text="Who should use VPC Service Controls" tabindex="-1">Who should use VPC Service Controls</h2> <p>Your organization might own intellectual property in the form of highly sensitive data, or your organization might handle sensitive data that is subject to additional data protection regulations, such as PCI DSS. Unintended loss or disclosure of sensitive data can lead to significant negative business implications.</p> <p>If you are migrating from on-premises to the cloud, one of your goals might be to replicate your on-premises network based security architecture as you move your data to Google Cloud. To protect your highly sensitive data, you might want to ensure that your resources can only be accessed from trusted networks. Some organizations might allow public access to resources as long as the request originates from a trusted network, which can be identified based on the IP address of the request.</p> <p>To mitigate data exfiltration risks, your organization might also want to ensure secure data exchange across organizational boundaries with fine-grained controls. As an administrator, you might want to ensure the following:</p> <ul> <li>Clients with privileged access don't also have access to partner resources.</li> <li>Clients with access to sensitive data can only read public data sets but not write to them.</li> </ul> <h2 id="how-vpc-service-controls-works" data-text="How VPC Service Controls reduces data exfiltration risks" tabindex="-1">How VPC Service Controls reduces data exfiltration risks</h2> <p>VPC Service Controls helps protect against accidental or targeted action by external entities or insider entities, which helps to minimize unwarranted data exfiltration risks from Google Cloud services such as Cloud Storage and BigQuery. You can use VPC Service Controls to create perimeters that protect the resources and data of services that you explicitly specify.</p> <p>VPC Service Controls secures your Google Cloud services by defining the following controls:</p> <ul> <li><p>Clients within a perimeter that have private access to resources do not have access to unauthorized (potentially public) resources outside the perimeter.</p></li> <li><p>Data cannot be copied to unauthorized resources outside the perimeter using service operations such as <a href="/web/20241124040939/https://cloud.google.com/sdk/gcloud/reference/storage/cp"><code translate="no" dir="ltr">gcloud storage cp</code></a> or <a href="/web/20241124040939/https://cloud.google.com/bigquery/docs/reference/bq-cli-reference#bq_mk"><code translate="no" dir="ltr">bq mk</code></a>.</p></li> <li><p>Data exchange between clients and resources separated by perimeters is secured by using <a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/ingress-egress-rules">ingress and egress rules</a>.</p></li> <li><p>Context-aware access to resources is based on client attributes, such as identity type (service account or user), identity, device data, and network origin (IP address or VPC network). The following are examples of context-aware access:</p> <ul> <li><p>Clients outside the perimeter that are on Google Cloud or on-premises are within authorized VPC resources and use Private Google Access to access resources within a perimeter.</p></li> <li><p>Internet access to resources within a perimeter is restricted to a range of IPv4 and IPv6 addresses.</p></li> </ul> <p>For more information, see <a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/context-aware-access">Context-aware access using ingress rules</a>.</p></li> </ul> <p>VPC Service Controls provides an extra layer of security defense for Google Cloud services that is independent of Identity and Access Management (IAM). While IAM enables granular <em>identity-based access control</em>, VPC Service Controls enables broader <em>context-based perimeter security</em>, including controlling data egress across the perimeter. We recommend using both VPC Service Controls and IAM for defense in depth.</p> <p>VPC Service Controls lets you monitor resource access patterns across your service perimeters using Cloud Audit Logs. For more information, see <a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/audit-logging">VPC Service Controls audit logging</a>.</p> <h2 id="benefits" data-text="Security benefits of VPC Service Controls" tabindex="-1">Security benefits of VPC Service Controls</h2> <p>VPC Service Controls helps mitigate the following security risks without sacrificing the performance advantages of direct private access to Google Cloud resources:</p> <ul> <li><p><strong>Access from unauthorized networks using stolen credentials</strong>: By allowing private access only from authorized VPC networks, VPC Service Controls helps protect against the risk of data exfiltration presented by clients using stolen OAuth or service account credentials.</p></li> <li><p><strong>Data exfiltration by malicious insiders or compromised code:</strong> VPC Service Controls complements network egress controls by preventing clients within those networks from accessing the resources of Google-managed services outside the perimeter.</p> <p>VPC Service Controls also prevents reading data from or copying data to a resource outside the perimeter. VPC Service Controls prevents service operations such as a <code translate="no" dir="ltr">gcloud storage cp</code> command copying to a public Cloud Storage bucket or a <code translate="no" dir="ltr">bq mk</code> command copying to a permanent external BigQuery table.</p> <p>Google Cloud also provides a restricted virtual IP that is integrated with VPC Service Controls. The restricted VIP also allows requests to be made to <a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/supported-products">services supported by VPC Service Controls</a> without exposing those requests to the internet.</p></li> <li><p><strong>Public exposure of private data caused by misconfigured IAM policies</strong>: VPC Service Controls provides an extra layer of security by denying access from unauthorized networks, even if the data is exposed by misconfigured IAM policies.</p></li> <li><p><strong>Monitoring access to services</strong>: Use VPC Service Controls in <a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/dry-run-mode">dry run mode</a> to monitor requests to protected services without preventing access and to understand traffic requests to your projects. You can also create honeypot perimeters to identify unexpected or malicious attempts to probe accessible services.</p></li> </ul> <p>You can use an organization access policy and configure VPC Service Controls for your entire Google Cloud organization, or use <a href="/web/20241124040939/https://cloud.google.com/access-context-manager/docs/scoped-policies">scoped policies</a> and configure VPC Service Controls for a folder or project in the organization. You retain the flexibility to process, transform, and copy data within the perimeter.</p> <p>VPC Service Controls configurations are managed at the organization level by default, but scoped access policies for folders or projects can be used to delegate administration of service perimeters further down the resource hierarchy.</p> <h3 id="metadata" data-text="VPC Service Controls and metadata" tabindex="-1">VPC Service Controls and metadata</h3> <p>VPC Service Controls is not designed to enforce comprehensive controls on metadata movement.</p> <p>In this context, <em>data</em> is defined as content stored in a Google Cloud resource. For example, the contents of a Cloud Storage object. <em>Metadata</em> is defined as the attributes of the resource or its parent. For example, Cloud Storage bucket names.</p> <p>The primary goal of VPC Service Controls is to control the movement of data, rather than metadata, across a service perimeter through supported services. VPC Service Controls also manages access to metadata, but there might be scenarios in which metadata can be copied and accessed without VPC Service Controls policy checks.</p> <p>We recommend that you rely on IAM, including the use of <a href="/web/20241124040939/https://cloud.google.com/iam/docs/understanding-custom-roles">custom roles</a>, to ensure appropriate control over access to metadata.</p> <h2 id="capabilities" data-text="Capabilities" tabindex="-1">Capabilities</h2> <p>VPC Service Controls lets you define security policies that prevent access to Google-managed services outside of a trusted perimeter, block access to data from untrusted locations, and mitigate data exfiltration risks.</p> <p>You can use VPC Service Controls for the following use cases:</p> <ul> <li><p><a href="#isolate">Isolate Google Cloud resources and VPC networks</a> into service perimeters</p></li> <li><p><a href="#hybrid_access">Extend perimeters to on-premises networks</a> using authorized VPN or Cloud Interconnect landing zone VPC networks.</p></li> <li><p><a href="#internet">Control access to Google Cloud resources</a> from the internet</p></li> <li><p><a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/secure-data-exchange">Protect data exchange across perimeters and organizations</a> by using ingress and egress rules</p></li> <li><p><a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/context-aware-access">Allow context-aware access to resources</a> based on client attributes by using ingress rules</p></li> </ul> <h3 id="isolate" data-text="Isolate Google Cloud resources into service perimeters" tabindex="-1">Isolate Google Cloud resources into service perimeters</h3> <p>A <strong>service perimeter</strong> creates a security boundary around Google Cloud resources. A service perimeter allows free communication within the perimeter but, by default, blocks communication to Google Cloud services across the perimeter.</p> <p>The perimeter works specifically with Google Cloud managed services. The perimeter doesn't block access to any third-party APIs or services on the internet.</p> <p>You can configure a perimeter to control the following types of communications:</p> <ul> <li>From public internet to customer resources within managed services</li> <li>From virtual machines (VMs) to a Google Cloud service (API)</li> <li>Between Google Cloud services</li> </ul> <p>VPC Service Controls doesn't require you to have a Virtual Private Cloud (VPC) network. To use VPC Service Controls without having any resources on a VPC network, you can allow traffic from external IP ranges or certain <a href="/web/20241124040939/https://cloud.google.com/iam/docs">IAM</a> principals. For more information, see <a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/use-access-levels#create_and_manage_access_levels">Create and manage access levels</a>.</p> <p>Here are some examples of VPC Service Controls creating a security boundary:</p> <ul> <li><p>A VM within a <a href="/web/20241124040939/https://cloud.google.com/vpc/docs/vpc">VPC network</a> that is part of a service perimeter can read from or write to a Cloud Storage bucket in the same perimeter. However, VPC Service Controls doesn't allow VMs within VPC networks that are outside the perimeter to access Cloud Storage buckets that are inside the perimeter. You must specify an ingress policy to allow VMs within VPC networks that are outside the perimeter to access Cloud Storage buckets that are inside the perimeter.</p></li> <li><p>A host project that contains multiple VPC networks has a different perimeter policy for each VPC network in the host project.</p></li> <li><p>A copy operation between two Cloud Storage buckets succeeds if both buckets are in the same service perimeter, but if one of the buckets is outside the perimeter, the copy operation fails.</p></li> <li><p>VPC Service Controls doesn't allow a VM within a VPC network that is inside a service perimeter to access Cloud Storage buckets that are outside the perimeter.</p></li> </ul> <p>The following diagram shows a service perimeter that allows communication between a VPC project and Cloud Storage bucket inside the perimeter but blocks all communication across the perimeter:</p> <figure aria-hidden="true"> <img src="/web/20241124040939im_/https://cloud.google.com/static/vpc-service-controls/images/service_perimeter.png" alt=""> </figure> <h3 id="hybrid_access" data-text="Extend perimeters to an authorized VPN or Cloud Interconnect" tabindex="-1">Extend perimeters to an authorized VPN or Cloud Interconnect</h3> <p>You can configure private communication to Google Cloud resources from VPC networks that span hybrid environments with Private Google Access <a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/private-connectivity">on-premises extensions</a>. To privately access Google Cloud resources within a perimeter, the VPC network that contains the landing zone from on-premises must be a part of the perimeter for resources in the on-premises network.</p> <p>VMs with private IP addresses in a VPC network secured by a service perimeter cannot access managed resources outside the service perimeter. If necessary, you can continue to enable inspected and audited access to all Google APIs (for example, Gmail) over the internet.</p> <p>The following diagram shows a service perimeter that extends to hybrid environments with Private Google Access:</p> <figure aria-hidden="true"> <img src="/web/20241124040939im_/https://cloud.google.com/static/vpc-service-controls/images/service_perimeter_private.png" alt=""> </figure> <h3 id="internet" data-text="Control access to Google Cloud resources from the internet" tabindex="-1">Control access to Google Cloud resources from the internet</h3> <p>Access from the internet to managed resources within a service perimeter is denied by default. Optionally, you can enable access based on the context of the request. To do so, you can create ingress rules or access levels to permit access based on various attributes, such as the source IP address, identity, or source Google Cloud project. If requests made from the internet don't meet the criteria defined in the ingress rule or access level, the requests are denied.</p> <p>To use the Google Cloud console to access resources within a perimeter, you must configure an access level that allows access from one or more IPv4 and IPv6 ranges, or to specific user accounts.</p> <p>The following diagram shows a service perimeter that allows access from the internet to protected resources based on the configured access levels, such as IP address or device policy:</p> <figure aria-hidden="true"> <img src="/web/20241124040939im_/https://cloud.google.com/static/vpc-service-controls/images/service_perimeter_internet.png" alt=""> </figure> <h2 id="other-controls" data-text="Other controls to mitigate data exfiltration risks" tabindex="-1">Other controls to mitigate data exfiltration risks</h2> <ul> <li><p><strong>Domain restricted sharing</strong>: You can consider setting up an organizational policy to limit resource sharing to identities that belong to a particular organization resource. For more information, see <a href="/web/20241124040939/https://cloud.google.com/resource-manager/docs/organization-policy/restricting-domains">Restricting identities by domain</a>.</p></li> <li><p><strong>Uniform bucket-level access</strong>: To uniformly control access to your Cloud Storage buckets, consider setting up bucket-level IAM permissions. Using uniform bucket-level access lets you use other Google Cloud security features such as domain restricted sharing, <a href="/web/20241124040939/https://cloud.google.com/iam/docs/workforce-identity-federation">workforce identity federation</a>, and <a href="/web/20241124040939/https://cloud.google.com/iam/docs/conditions-overview">IAM conditions</a>.</p></li> <li><p><strong>Multi-factor authentication</strong>: We recommend using <a href="/web/20241124040939/https://cloud.google.com/identity/solutions/enforce-mfa">multi-factor authentication to access your Google Cloud resources</a>.</p></li> <li><p><strong>Automation using infrastructure-as-code tools</strong>: We recommend that you deploy Cloud Storage buckets using an automation tool to control access to the buckets. Pass the infrastructure-as-code through human or automated reviews before deployment.</p></li> <li><p><strong>Post-deployment scans</strong>: You can consider using the following post-deployment scanning tools to scan for open Cloud Storage buckets:</p> <ul> <li><a href="/web/20241124040939/https://cloud.google.com/security-command-center/docs/concepts-security-command-center-overview">Security Command Center</a></li> <li><a href="/web/20241124040939/https://cloud.google.com/asset-inventory/docs/overview">Cloud Asset Inventory</a> to search asset metadata history and analyse IAM policy to understand who has access to what.</li> <li>Third-party tools like Palo Alto PrismaCloud</li> </ul></li> <li><p><strong>De-identification of sensitive data</strong>: You can consider using <a href="/web/20241124040939/https://cloud.google.com/sensitive-data-protection/docs/sensitive-data-protection-overview">Sensitive Data Protection</a> to discover, classify, and de-identify sensitive data inside and outside Google Cloud. De-identification of sensitive data can be done by redaction, tokenization, or encryption.</p></li> </ul> <h2 id="services" data-text="Unsupported Services" tabindex="-1">Unsupported Services</h2> <p> For more information on products and services that are supported by VPC Service Controls, refer to the <a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/supported-products">Supported products</a> page. </p> <aside class="warning"> <p> <b>Warning:</b> While it may be possible to enable unsupported services to access the data of supported products and services, we recommend that you do not. Unexpected issues might occur when attempting to access a supported service using an unsupported service, especially within the same project. </p> <p> Unsupported services may not function at all when enabled in a project protected by VPC Service Controls, especially when low-level storage services like Cloud Storage or Pub/Sub are restricted. We recommend deploying unsupported services in projects outside perimeters. To allow these services to access data in resources within a perimeter, <a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/use-access-levels">create an access level</a> that includes the service account for that service and <a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/manage-service-perimeters#add-access-level">apply it to perimeters as needed</a>. </p> </aside> <p> Attempting to restrict an unsupported service using the <code translate="no" dir="ltr">gcloud</code> command-line tool or the Access Context Manager API will result in an error. </p> <p> Cross-project access to data of supported services will be blocked by VPC Service Controls. Additionally, the restricted VIP can be used to block the ability of workloads to call unsupported services. </p> <h2 id="limitations" data-text="Known limitations" tabindex="-1">Known limitations</h2> <p>There are some known limitations with certain Google Cloud services, products, and interfaces when you use VPC Service Controls. For example, VPC Service Controls doesn't support all Google Cloud services. Therefore, don't enable unsupported Google Cloud services in the perimeter. For more information, see the <a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/supported-products#supported_products" track-type="solution" track-name="internalLink" track-metadata-position="body">VPC Service Controls supported products list</a>. If you need to use a service that VPC Service Controls doesn't support, enable the service in a project that is outside the perimeter.</p> <p>We recommend that you review known limitations before you include Google Cloud services in the perimeter. For more information, see the <a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/supported-products#service-limitations" track-type="solution" track-name="internalLink" track-metadata-position="body">VPC Service Controls service limitations</a>.</p> <h2 id="glossary" data-text="Glossary" tabindex="-1">Glossary</h2> <p>In this topic, you have learned about several new concepts introduced by VPC Service Controls:</p> <dl> <dt>VPC Service Controls</dt> <dd>Technology that enables you to define a service perimeter around resources of Google-managed services to control communication to and between those services.</dd> <dt>service perimeter</dt> <dd>A service perimeter around Google-managed resources. Allows free communication within the perimeter but, by default, blocks all communication across the perimeter.</dd> <dt>ingress rule</dt> <dd>A rule that allows an API client that is outside the perimeter to access resources within a perimeter. For more information, see <a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/ingress-egress-rules">Ingress and egress rules</a>.</dd> <dt>egress rule</dt> <dd>A rule that allows an API client or resource that is inside the perimeter to access Google Cloud resources outside the perimeter. The perimeter does not block access to any third-party API or services on the internet.</dd> <dt>service perimeter bridge</dt> <dd><p>A perimeter bridge allows projects in different service perimeters to communicate. Perimeter bridges are bidirectional, allowing projects from each service perimeter equal access within the scope of the bridge.</p> <aside class="note"><strong>Note:</strong><span> Instead of using a perimeter bridge, we recommend using ingress and egress rules that provide more granular controls.</span></aside></dd> <dt>Access Context Manager</dt> <dd><p>A context-aware request classification service that can map a request to an access level based on specified attributes of the client, such as the source IP address. For more information, see <a href="/web/20241124040939/https://cloud.google.com/access-context-manager/docs/overview">Overview of Access Context Manager</a>.</p></dd> <dt>access level</dt> <dd><p>A classification of requests over the internet based on several attributes, such as source IP range, client device, geolocation, and others. Just like an ingress rule, you can use an access level to configure a service perimeter to grant access from the internet based on the access level associated with a request. You can <a href="/web/20241124040939/https://cloud.google.com/access-context-manager/docs/create-basic-access-level">create an access level using Access Context Manager</a>.</p></dd> <dt>access policy</dt> <dd><p>A Google Cloud resource object that defines service perimeters. You can create access policies that are scoped to specific folders or projects alongside an access policy that can apply to the entire organization. An organization can have only one organization-level access policy.</p></dd> <dt>scoped policy</dt> <dd><p>A scoped policy is an access policy that is scoped to specific folders or projects alongside an access policy that applies to the entire organization. For more information, see <a href="/web/20241124040939/https://cloud.google.com/access-context-manager/docs/scoped-policies">Overview of scoped policies</a>.</p></dd> <dt>restricted VIP</dt> <dd><p>The restricted VIP provides a private network route for products and APIs supported by VPC Service Controls in order to make data and resources used by those products inaccessible from the internet. <code translate="no" dir="ltr">restricted.googleapis.com</code> resolves to <code translate="no" dir="ltr">199.36.153.4/30</code>. This IP address range is not announced to the internet.</p></dd> </dl> <h2 id="whats_next" data-text="What's next" tabindex="-1">What's next</h2> <ul> <li>Learn about <a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/service-perimeters">service perimeter configuration</a>.</li> <li>Understand how to manage <a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/vpc-perimeters-management">VPC networks in service perimeters</a></li> <li>Review the <a href="/web/20241124040939/https://cloud.google.com/vpc-service-controls/docs/supported-products#service-limitations">known service limitations</a>.</li> </ul> <devsite-hats-survey class="nocontent" hats-id="Nd7nTix2o0eU5NUYprb0ThtUc5jf" listnr-id="83405"></devsite-hats-survey> </div> <devsite-thumb-rating position="footer"> </devsite-thumb-rating> <devsite-feedback position="footer" project-name="VPC Service Controls" product-id="5058704" bucket="documentation" context="" version="t-devsite-webserver-20241114-r00-rc02.464922260396498922" data-label="Send Feedback Button" track-type="feedback" track-name="sendFeedbackLink" track-metadata-position="footer" class="nocontent" project-icon="https://www.gstatic.com/devrel-devsite/prod/v870e399c64f7c43c99a3043db4b3a74327bb93d0914e84a0c3dba90bbfd67625/cloud/images/favicons/onecloud/super_cloud.png"> <button> Send feedback </button> </devsite-feedback> <div class="devsite-floating-action-buttons"> </div> </article> <devsite-content-footer class="nocontent"> <p>Except as otherwise noted, the content of this page is licensed under the <a href="https://web.archive.org/web/20241124040939/https://creativecommons.org/licenses/by/4.0/">Creative Commons Attribution 4.0 License</a>, and code samples are licensed under the <a href="https://web.archive.org/web/20241124040939/https://www.apache.org/licenses/LICENSE-2.0">Apache 2.0 License</a>. For details, see the <a href="https://web.archive.org/web/20241124040939/https://developers.google.com/site-policies">Google Developers Site Policies</a>. Java is a registered trademark of Oracle and/or its affiliates.</p> <p>Last updated 2024-11-19 UTC.</p> </devsite-content-footer> <devsite-notification> </devsite-notification> <div class="devsite-content-data"> <template class="devsite-thumb-rating-feedback"> <devsite-feedback position="thumb-rating" project-name="VPC Service Controls" product-id="5058704" bucket="documentation" context="" version="t-devsite-webserver-20241114-r00-rc02.464922260396498922" data-label="Send Feedback Button" track-type="feedback" track-name="sendFeedbackLink" track-metadata-position="thumb-rating" class="nocontent" project-icon="https://www.gstatic.com/devrel-devsite/prod/v870e399c64f7c43c99a3043db4b3a74327bb93d0914e84a0c3dba90bbfd67625/cloud/images/favicons/onecloud/super_cloud.png"> <button> Need to tell us more? </button> </devsite-feedback> </template> <template class="devsite-content-data-template"> [[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2024-11-19 UTC."],[],[]] </template> </div> </devsite-content> </main> <devsite-footer-promos class="devsite-footer"> </devsite-footer-promos> <devsite-footer-linkboxes class="devsite-footer"> <nav class="devsite-footer-linkboxes nocontent" aria-label="Footer links"> <ul class="devsite-footer-linkboxes-list"> <li class="devsite-footer-linkbox "> <h3 class="devsite-footer-linkbox-heading no-link">Why Google</h3> <ul class="devsite-footer-linkbox-list"> <li class="devsite-footer-linkbox-item"> <a href="/web/20241124040939/https://cloud.google.com/why-google-cloud/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 1)" track-name="choosing google cloud" track-metadata-eventdetail="cloud.google.com/why-google-cloud/" track-metadata-position="footer" track-type="footer link" track-metadata-child_headline="why google" track-metadata-module="footer"> Choosing Google Cloud </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/web/20241124040939/https://cloud.google.com/trust-center/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 2)" track-metadata-position="footer" track-type="footer link" track-metadata-module="footer" track-metadata-eventdetail="cloud.google.com/security/" track-metadata-child_headline="why google" track-name="trust and security"> Trust and security </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/web/20241124040939/https://cloud.google.com/solutions/modern-infrastructure/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 3)" track-metadata-position="footer" track-metadata-module="footer" track-type="footer link" track-metadata-child_headline="why google" track-metadata-eventdetail="cloud.google.com/solutions/modern-infrastructure/" track-name="modern infrastructure cloud"> Modern Infrastructure Cloud </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/web/20241124040939/https://cloud.google.com/multicloud/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 4)" track-metadata-position="footer" track-metadata-module="footer" track-type="footer link" track-name="multicloud" track-metadata-child_headline="why google" track-metadata-eventdetail="cloud.google.com/multicloud/"> Multicloud </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/web/20241124040939/https://cloud.google.com/infrastructure/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 5)" track-metadata-position="footer" track-metadata-child_headline="why google" track-metadata-module="footer" track-name="global infrastructure" track-metadata-eventdetail="cloud.google.com/infrastructure/" track-type="footer link"> Global infrastructure </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/web/20241124040939/https://cloud.google.com/customers/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 6)" track-metadata-child_headline="why google" track-metadata-module="footer" track-metadata-position="footer" track-metadata-eventdetail="cloud.google.com/customers/" track-type="footer link" track-name="customers and case studies"> Customers and case studies </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/web/20241124040939/https://cloud.google.com/analyst-reports/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 7)" track-metadata-child_headline="why google" track-metadata-module="footer" track-name="analyst reports" track-type="footer link" track-metadata-position="footer" track-metadata-eventdetail="cloud.google.com/analyst-reports/"> Analyst reports </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/web/20241124040939/https://cloud.google.com/whitepapers/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 8)" track-type="footer link" track-metadata-position="footer" track-metadata-child_headline="why google" track-metadata-eventdetail="cloud.google.com/whitepapers/" track-metadata-module="footer" track-name="whitepapers"> Whitepapers </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//web.archive.org/web/20241124040939/https://cloud.google.com/blog/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 9)" track-metadata-module="footer" track-metadata-position="footer" track-type="footer link" track-name="blog" track-metadata-child_headline="engage" track-metadata-eventdetail="cloud.google.com/blog/"> Blog </a> </li> </ul> </li> <li class="devsite-footer-linkbox "> <h3 class="devsite-footer-linkbox-heading no-link">Products and pricing</h3> <ul class="devsite-footer-linkbox-list"> <li class="devsite-footer-linkbox-item"> <a href="/web/20241124040939/https://cloud.google.com/pricing/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 1)" track-type="footer link" track-metadata-child_headline="products and pricing" track-metadata-position="footer" track-metadata-module="footer" track-name="google cloud pricing" track-metadata-eventdetail="cloud.google.com/pricing/"> Google Cloud pricing </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//web.archive.org/web/20241124040939/https://workspace.google.com/pricing.html" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 2)" track-metadata-child_headline="products and pricing" track-metadata-module="footer" track-type="footer link" track-metadata-eventdetail="workspace.google.com/pricing.html" track-metadata-position="footer" target="_blank" track-name="google workspace pricing"> Google Workspace pricing </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/web/20241124040939/https://cloud.google.com/products/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 3)" track-metadata-position="footer" track-metadata-eventdetail="cloud.google.com/products/" track-metadata-child_headline="products and pricing" track-name="see all products" track-type="footer link" track-metadata-module="footer"> See all products </a> </li> </ul> </li> <li class="devsite-footer-linkbox "> <h3 class="devsite-footer-linkbox-heading no-link">Solutions</h3> <ul class="devsite-footer-linkbox-list"> <li class="devsite-footer-linkbox-item"> <a href="/web/20241124040939/https://cloud.google.com/solutions/infrastructure-modernization/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 1)" track-type="footer link" track-name="infrastructure modernization" track-metadata-eventdetail="cloud.google.com/solutions/infrastructure-modernization/" track-metadata-module="footer" track-metadata-position="footer" track-metadata-child_headline="solutions"> Infrastructure modernization </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/web/20241124040939/https://cloud.google.com/solutions/databases/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 2)" track-metadata-module="footer" track-metadata-position="footer" track-type="footer link" track-metadata-child_headline="solutions" track-metadata-eventdetail="cloud.google.com/solutions/databases" track-name="databases"> Databases </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/web/20241124040939/https://cloud.google.com/solutions/application-modernization/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 3)" track-metadata-child_headline="solutions" track-metadata-position="footer" track-metadata-eventdetail="cloud.google.com/solutions/application-modernization/" track-name="application development" track-type="footer link" track-metadata-module="footer"> Application modernization </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/web/20241124040939/https://cloud.google.com/solutions/smart-analytics/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 4)" track-metadata-eventdetail="cloud.google.com/solutions/smart-analytics/" track-type="footer link" track-metadata-child_headline="solutions" track-metadata-module="footer" track-metadata-position="footer" track-name="smart analytics"> Smart analytics </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/web/20241124040939/https://cloud.google.com/solutions/ai/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 5)" track-metadata-child_headline="solutions" track-metadata-module="footer" track-metadata-eventdetail="cloud.google.com/solutions/ai/" track-metadata-position="footer" track-name="artificial intelligence" track-type="footer link"> Artificial Intelligence </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/web/20241124040939/https://cloud.google.com/solutions/security/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 6)" track-type="footer link" track-metadata-child_headline="solutions" track-name="security" track-metadata-eventdetail="cloud.google.com/solutions/security/" track-metadata-module="footer" track-metadata-position="footer"> Security </a> </li> <li class="devsite-footer-linkbox-item"> <a href="https://web.archive.org/web/20241124040939/https://workspace.google.com/enterprise/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 7)" track-metadata-child_headline="solutions" target="_blank" track-type="footer link" track-metadata-position="footer" track-metadata-eventdetail="workspace.google.com/enterprise/" track-metadata-module="footer" track-name="productivity and work transformation"> Productivity & work transformation </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/web/20241124040939/https://cloud.google.com/solutions/#industry-solutions" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 8)" track-metadata-child_headline="solutions" track-metadata-eventdetail="cloud.google.com/solutions/#industry-solutions" track-type="footer link" track-metadata-module="footer" track-name="industry solutions" track-metadata-position="footer"> Industry solutions </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/web/20241124040939/https://cloud.google.com/solutions/devops/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 9)" track-name="devops solutions" track-metadata-module="footer" track-type="footer link" track-metadata-eventdetail="cloud.google.com/solutions/devops/" track-metadata-position="footer" track-metadata-child_headline="solutions"> DevOps solutions </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/web/20241124040939/https://cloud.google.com/solutions/#section-14" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 10)" track-metadata-module="footer" track-name="small business solutions" track-type="footer link" track-metadata-eventdetail="cloud.google.com/solutions/#section-14" track-metadata-child_headline="solutions" track-metadata-position="footer"> Small business solutions </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/web/20241124040939/https://cloud.google.com/solutions/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 11)" track-metadata-child_headline="solutions" track-type="footer link" track-metadata-eventdetail="cloud.google.com/solutions/" track-metadata-position="footer" track-metadata-module="footer" track-name="see all solutions"> See all solutions </a> </li> </ul> </li> <li class="devsite-footer-linkbox "> <h3 class="devsite-footer-linkbox-heading no-link">Resources</h3> <ul class="devsite-footer-linkbox-list"> <li class="devsite-footer-linkbox-item"> <a href="/web/20241124040939/https://cloud.google.com/affiliate-program/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 1)" track-metadata-eventdetail="cloud.google.com/affiliate-program/" track-name="google cloud affiliate program" track-metadata-child_headline="resources" track-metadata-position="footer" track-type="footer link" track-metadata-module="footer"> Google Cloud Affiliate Program </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/web/20241124040939/https://cloud.google.com/docs/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 2)" track-metadata-child_headline="resources" track-metadata-module="footer" track-name="google cloud documentation" track-type="footer link" track-metadata-eventdetail="cloud.google.com/docs/" track-metadata-position="footer"> Google Cloud documentation </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/web/20241124040939/https://cloud.google.com/docs/get-started/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 3)" track-metadata-child_headline="resources" track-name="google cloud quickstarts" track-metadata-module="footer" track-metadata-position="footer" track-metadata-eventdetail="cloud.google.com/docs/get-started/" track-type="footer link"> Google Cloud quickstarts </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/web/20241124040939/https://cloud.google.com/marketplace/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 4)" track-type="footer link" track-metadata-eventdetail="cloud.google.com/marketplace/" track-metadata-child_headline="resources" track-metadata-module="footer" track-name="google cloud marketplace" track-metadata-position="footer"> Google Cloud Marketplace </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/web/20241124040939/https://cloud.google.com/discover/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 5)" track-metadata-position="footer" track-metadata-module="footer" track-metadata-child_headline="resources" track-type="footer link" track-name="learn about cloud computing" track-metadata-eventdetail="learn/"> Learn about cloud computing </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/web/20241124040939/https://cloud.google.com/support-hub/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 6)" track-metadata-module="footer" track-metadata-child_headline="resources" track-type="footer link" track-metadata-eventdetail="cloud.google.com/support-hub/" track-name="support" track-metadata-position="footer"> Support </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/web/20241124040939/https://cloud.google.com/docs/samples" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 7)" track-metadata-eventdetail="cloud.google.com/docs/samples" track-name="code samples" track-metadata-child_headline="resources" track-type="footer link" track-metadata-module="footer" track-metadata-position="footer"> Code samples </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/web/20241124040939/https://cloud.google.com/architecture/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 8)" track-type="footer link" track-metadata-position="footer" track-metadata-eventdetail="cloud.google.com/architecture/" track-name="cloud architecture center" track-metadata-child_headline="resources" track-metadata-module="footer"> Cloud Architecture Center </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/web/20241124040939/https://cloud.google.com/learn/training/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 9)" track-metadata-eventdetail="cloud.google.com/training/" track-metadata-module="footer" track-name="training" track-metadata-child_headline="resources" track-metadata-position="footer" track-type="footer link"> Training </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/web/20241124040939/https://cloud.google.com/learn/certification/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 10)" track-name="certifications" track-type="footer link" track-metadata-eventdetail="cloud.google.com/certification" track-metadata-position="footer" track-metadata-module="footer" track-metadata-child_headline="resources"> Certifications </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//web.archive.org/web/20241124040939/https://developers.google.com/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 11)" track-metadata-child_headline="resources" target="_blank" track-metadata-eventdetail="developers.google.com" track-metadata-position="footer" track-name="google developers" track-metadata-module="footer" track-type="footer link"> Google for Developers </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/web/20241124040939/https://cloud.google.com/startup/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 12)" track-name="google cloud for startups" track-metadata-module="footer" track-type="footer link" track-metadata-eventdetail="cloud.google.com/startup/" track-metadata-position="footer" track-metadata-child_headline="resources"> Google Cloud for Startups </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//web.archive.org/web/20241124040939/https://status.cloud.google.com/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 13)" target="_blank" track-metadata-module="footer" track-metadata-position="footer" track-metadata-eventdetail="status.cloud.google.com" track-name="system status" track-type="footer link" track-metadata-child_headline="resources"> System status </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/web/20241124040939/https://cloud.google.com/release-notes" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 14)" track-metadata-child_headline="resources" track-type="footer link" track-name="release notes" track-metadata-position="footer" track-metadata-eventdetail="cloud.google.com/release-notes/" track-metadata-module="footer"> Release Notes </a> </li> </ul> </li> <li class="devsite-footer-linkbox "> <h3 class="devsite-footer-linkbox-heading no-link">Engage</h3> <ul class="devsite-footer-linkbox-list"> <li class="devsite-footer-linkbox-item"> <a href="/web/20241124040939/https://cloud.google.com/contact/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 1)" track-metadata-position="footer" track-name="contact sales" track-metadata-eventdetail="cloud.google.com/contact/" track-metadata-child_headline="engage" track-metadata-module="footer" track-type="footer link"> Contact sales </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//web.archive.org/web/20241124040939/https://cloud.google.com/find-a-partner" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 2)" track-metadata-position="footer" track-metadata-child_headline="engage" track-metadata-eventdetail="cloud.google.com/find-a-partner" track-metadata-module="footer" track-name="find a partner" track-type="footer link" target="_blank"> Find a Partner </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/web/20241124040939/https://cloud.google.com/partners/become-a-partner/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 3)" track-metadata-module="footer" track-name="become a partner" track-metadata-eventdetail="cloud.google.com/partners/become-a-partner/" track-type="footer link" track-metadata-position="footer" track-metadata-child_headline="engage"> Become a Partner </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/web/20241124040939/https://cloud.google.com/events/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 4)" track-metadata-position="footer" track-metadata-child_headline="engage" track-type="footer link" track-metadata-eventdetail="cloud.withgoogle.com/events" track-metadata-module="footer" track-name="events"> Events </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/web/20241124040939/https://cloud.google.com/podcasts/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 5)" track-metadata-child_headline="engage" track-metadata-module="footer" track-metadata-eventdetail="cloud.google.com/podcasts/" target="_blank" rel="noopener" track-metadata-position="footer" track-type="footer link" track-name="podcasts"> Podcasts </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/web/20241124040939/https://cloud.google.com/developers/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 6)" track-metadata-position="footer" track-metadata-module="footer" track-name="developer center" track-metadata-eventdetail="cloud.google.com/developers/" track-type="footer link" track-metadata-child_headline="engage"> Developer Center </a> </li> <li class="devsite-footer-linkbox-item"> <a href="https://web.archive.org/web/20241124040939/https://www.googlecloudpresscorner.com/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 7)" track-metadata-position="footer" target="_blank" track-name="press corner" track-metadata-child_headline="engage" rel="noopener" track-type="footer link" track-metadata-module="footer" track-metadata-eventdetail="www.googlecloudpresscorner.com"> Press Corner </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//web.archive.org/web/20241124040939/https://www.youtube.com/googlecloud" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 8)" track-metadata-position="footer" target="_blank" track-name="google cloud on youtube" track-metadata-eventdetail="www.youtube.com/googlecloud" track-metadata-child_headline="engage" track-metadata-module="footer" track-type="footer link" rel="noopener"> Google Cloud on YouTube </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//web.archive.org/web/20241124040939/https://www.youtube.com/googlecloudplatform" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 9)" target="_blank" track-name="google cloud tech on youtube" track-metadata-child_headline="engage" track-metadata-module="footer" track-metadata-eventdetail="www.youtube.com/googlecloudplatform" track-metadata-position="footer" rel="noopener" track-type="footer link"> Google Cloud Tech on YouTube </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//web.archive.org/web/20241124040939/https://x.com/googlecloud" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 10)" target="_blank" track-metadata-eventdetail="x.com/googlecloud" track-type="footer link" track-metadata-child_headline="engage" track-name="follow on x" track-metadata-position="footer" rel="noopener" track-metadata-module="footer"> Follow on X </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//web.archive.org/web/20241124040939/https://userresearch.google.com/?reserved=1&utm_source=website&Q_Language=en&utm_medium=own_srch&utm_campaign=CloudWebFooter&utm_term=0&utm_content=0&productTag=clou&campaignDate=jul19&pType=devel&referral_code=jk212693" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 11)" track-name="join user research" target="_blank" track-metadata-eventdetail="userresearch.google.com/?reserved=1&utm_source=website&Q_Language=en&utm_medium=own_srch&utm_campaign=CloudWebFooter&utm_term=0&utm_content=0&productTag=clou&campaignDate=jul19&pType=devel&referral_code=jk212693" track-type="footer link" track-metadata-module="footer" track-metadata-child_headline="engage" track-metadata-position="footer"> Join User Research </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//web.archive.org/web/20241124040939/https://careers.google.com/cloud" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 12)" track-metadata-module="footer" track-metadata-position="footer" track-metadata-child_headline="engage" target="_blank" track-name="we are hiring join google cloud" track-type="footer link" track-metadata-eventdetail="careers.google.com/cloud"> We're hiring. Join Google Cloud! </a> </li> <li class="devsite-footer-linkbox-item"> <a href="https://web.archive.org/web/20241124040939/https://www.googlecloudcommunity.com/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 13)" track-metadata-module="footer" target="_blank" rel="noopener" track-metadata-child_headline="engage" track-metadata-eventdetail="www.googlecloudcommunity.com" track-name="google cloud community" track-type="footer link" track-metadata-position="footer"> Google Cloud Community </a> </li> </ul> </li> </ul> </nav> </devsite-footer-linkboxes> <devsite-footer-utility class="devsite-footer"> <div class="devsite-footer-utility nocontent"> <nav class="devsite-footer-utility-links" aria-label="Utility links"> <ul class="devsite-footer-utility-list"> <li class="devsite-footer-utility-item "> <a class="devsite-footer-utility-link gc-analytics-event" href="//web.archive.org/web/20241124040939/https://about.google/" data-category="Site-Wide Custom Events" data-label="Footer About Google link" target="_blank" track-type="footer link" track-metadata-module="utility footer" track-metadata-position="footer" track-metadata-eventdetail="//about.google/" track-name="about google"> About Google </a> </li> <li class="devsite-footer-utility-item devsite-footer-privacy-link"> <a class="devsite-footer-utility-link gc-analytics-event" href="//web.archive.org/web/20241124040939/https://policies.google.com/privacy" data-category="Site-Wide Custom Events" data-label="Footer Privacy link" track-metadata-position="footer" track-name="privacy" track-metadata-module="utility footer" track-metadata-eventdetail="//policies.google.com/privacy" track-type="footer link" target="_blank"> Privacy </a> </li> <li class="devsite-footer-utility-item "> <a class="devsite-footer-utility-link gc-analytics-event" href="//web.archive.org/web/20241124040939/https://www.google.com/intl/en/policies/terms/regional.html" data-category="Site-Wide Custom Events" data-label="Footer Site terms link" target="_blank" track-metadata-position="footer" track-type="footer link" track-metadata-eventdetail="//www.google.com/intl/en/policies/terms/regional.html" track-metadata-module="utility footer" track-name="site terms"> Site terms </a> </li> <li class="devsite-footer-utility-item "> <a class="devsite-footer-utility-link gc-analytics-event" href="/web/20241124040939/https://cloud.google.com/product-terms/" data-category="Site-Wide Custom Events" data-label="Footer Google Cloud terms link" track-type="footer link" track-metadata-module="utility footer" track-metadata-eventdetail="/product-terms/" track-name="google cloud terms" track-metadata-position="footer"> Google Cloud terms </a> </li> <li class="devsite-footer-utility-item glue-cookie-notification-bar-control"> <a class="devsite-footer-utility-link gc-analytics-event" href="#" data-category="Site-Wide Custom Events" data-label="Footer Manage cookies link" track-metadata-module="utility footer" aria-hidden="true" track-metadata-eventdetail="#" track-name="Manage cookies" track-type="footer link" track-metadata-position="footer"> Manage cookies </a> </li> <li class="devsite-footer-utility-item devsite-footer-carbon-button"> <a class="devsite-footer-utility-link gc-analytics-event" href="/web/20241124040939/https://cloud.google.com/sustainability" data-category="Site-Wide Custom Events" data-label="Footer Our third decade of climate action: join us link" track-metadata-position="footer" track-type="footer link" track-metadata-eventdetail="/sustainability/" track-metadata-module="utility footer" track-name="Our third decade of climate action: join us"> Our third decade of climate action: join us </a> </li> <li class="devsite-footer-utility-item devsite-footer-utility-button"> <span class="devsite-footer-utility-description">Sign up for the Google Cloud newsletter</span> <a class="devsite-footer-utility-link gc-analytics-event" href="/web/20241124040939/https://cloud.google.com/newsletter/" data-category="Site-Wide Custom Events" data-label="Footer Subscribe link" track-type="footer link" track-name="subscribe" track-metadata-position="footer" track-metadata-eventdetail="/newsletter/" track-metadata-module="utility footer"> Subscribe </a> </li> </ul> <devsite-language-selector> <ul role="presentation"> <li role="presentation"> <a role="menuitem" lang="en">English</a> </li> <li role="presentation"> <a role="menuitem" lang="de">Deutsch</a> </li> <li role="presentation"> <a role="menuitem" lang="es_419">Español – América Latina</a> </li> <li role="presentation"> <a role="menuitem" lang="fr">Français</a> </li> <li role="presentation"> <a role="menuitem" lang="id">Indonesia</a> </li> <li role="presentation"> <a role="menuitem" lang="it">Italiano</a> </li> <li role="presentation"> <a role="menuitem" lang="pt_br">Português – Brasil</a> </li> <li role="presentation"> <a role="menuitem" lang="zh_cn">中文 – 简体</a> </li> <li role="presentation"> <a role="menuitem" lang="ja">日本語</a> </li> <li role="presentation"> <a role="menuitem" lang="ko">한국어</a> </li> </ul> </devsite-language-selector> </nav> </div> </devsite-footer-utility> <devsite-panel></devsite-panel> </section></section> <devsite-sitemask></devsite-sitemask> <devsite-snackbar></devsite-snackbar> <devsite-tooltip></devsite-tooltip> <devsite-heading-link></devsite-heading-link> <devsite-analytics> <script type="application/json" analytics>[]</script> <script type="application/json" tag-management>{"at": "True", "ga4": [], "ga4p": [], "gtm": [{"id": "GTM-5CVQBG", "purpose": 1}], "parameters": {"internalUser": "False", "language": {"machineTranslated": "False", "requested": "en", "served": "en"}, "pageType": "article", "projectName": "VPC Service Controls", "signedIn": "False", "tenant": "cloud", "recommendations": {"sourcePage": "", "sourceType": 0, "sourceRank": 0, "sourceIdenticalDescriptions": 0, "sourceTitleWords": 0, "sourceDescriptionWords": 0, "experiment": ""}, "experiment": {"ids": ""}}}</script> </devsite-analytics> <devsite-badger></devsite-badger> <cloudx-user></cloudx-user> <cloudx-free-trial-eligible-store freetrialeligible="true"></cloudx-free-trial-eligible-store> <cloudx-pricing-socket></cloudx-pricing-socket> <cloudx-experiments type="TestAACodivertedExperiment" path="/virtual/TestAACodivertedExperiment/configureExperiment" location="FR" variant="variant3"></cloudx-experiments> <cloudx-experiment-ids usercountry="FR" devsiteexperimentidlist="[39300012, 39300022, 39300118, 39300196, 39300241, 39300318, 39300320, 39300327, 39300346, 39300354, 39300364, 39300374, 39300412, 39300422, 39300437, 39300472, 39300488, 39300496, 39300498]"> </cloudx-experiment-ids> <script nonce="0V9pO8rpuBxo5BuU5lrjn3EPfsNFLy"> (function(d,e,v,s,i,t,E){d['GoogleDevelopersObject']=i; t=e.createElement(v);t.async=1;t.src=s;E=e.getElementsByTagName(v)[0]; E.parentNode.insertBefore(t,E);})(window, document, 'script', 'https://web.archive.org/web/20241124040939/https://www.gstatic.com/devrel-devsite/prod/v870e399c64f7c43c99a3043db4b3a74327bb93d0914e84a0c3dba90bbfd67625/cloud/js/app_loader.js', '[2,"en",null,"/js/devsite_app_module.js","https://web.archive.org/web/20241124040939/https://www.gstatic.com/devrel-devsite/prod/v870e399c64f7c43c99a3043db4b3a74327bb93d0914e84a0c3dba90bbfd67625","https://web.archive.org/web/20241124040939/https://www.gstatic.com/devrel-devsite/prod/v870e399c64f7c43c99a3043db4b3a74327bb93d0914e84a0c3dba90bbfd67625/cloud","https://web.archive.org/web/20241124040939/https://cloud-dot-devsite-v2-prod.appspot.com",null,null,["/_pwa/cloud/manifest.json","https://web.archive.org/web/20241124040939/https://www.gstatic.com/devrel-devsite/prod/v870e399c64f7c43c99a3043db4b3a74327bb93d0914e84a0c3dba90bbfd67625/images/video-placeholder.svg","https://web.archive.org/web/20241124040939/https://www.gstatic.com/devrel-devsite/prod/v870e399c64f7c43c99a3043db4b3a74327bb93d0914e84a0c3dba90bbfd67625/cloud/images/favicons/onecloud/favicon.ico","https://web.archive.org/web/20241124040939/https://www.gstatic.com/devrel-devsite/prod/v870e399c64f7c43c99a3043db4b3a74327bb93d0914e84a0c3dba90bbfd67625/cloud/images/cloud-logo.svg","https://web.archive.org/web/20241124040939/https://fonts.googleapis.com/css?family=Google+Sans:400,500,700|Google+Sans+Text:400,400italic,500,500italic,700,700italic|Roboto:400,400italic,500,500italic,700,700italic|Roboto+Mono:400,500,700&display=swap"],1,null,[1,6,8,12,14,17,21,25,50,52,63,70,75,76,80,87,91,92,93,97,98,100,101,102,103,104,105,107,108,109,110,112,113,117,118,120,122,124,125,126,127,129,130,131,132,133,134,135,136,138,140,141,147,148,149,151,152,156,157,158,159,161,163,164,168,169,170,179,180,182,183,186,191,193,196],"AIzaSyAP-jjEJBzmIyKR4F-3XITp8yM9T1gEEI8","AIzaSyB6xiKGDR5O3Ak2okS4rLkauxGUG7XP0hg","cloud.google.com","AIzaSyAQk0fBONSGUqCNznf6Krs82Ap1-NV6J4o","AIzaSyCCxcqdrZ_7QMeLCRY20bh_SXdAYqy70KY",null,null,null,["Profiles__enable_release_notes_notifications","CloudShell__cloud_shell_button","Cloud__enable_cloud_shell","Experiments__reqs_query_experiments","Search__enable_page_map","Cloud__enable_llm_concierge_chat","MiscFeatureFlags__developers_footer_dark_image","Cloud__enable_free_trial_server_call","MiscFeatureFlags__enable_view_transitions","BookNav__enable_tenant_cache_key","Search__enable_ai_search_summaries_restricted","MiscFeatureFlags__enable_explain_this_code","Profiles__enable_complete_playlist_endpoint","Cloud__enable_cloud_dlp_service","Profiles__enable_dashboard_curated_recommendations","Concierge__enable_pushui","Profiles__enable_page_saving","Profiles__enable_awarding_url","Cloud__enable_legacy_calculator_redirect","MiscFeatureFlags__enable_project_variables","Profiles__enable_developer_profiles_callout","Profiles__enable_profile_collections","Search__enable_dynamic_content_confidential_banner","Profiles__enable_completecodelab_endpoint","Analytics__enable_clearcut_logging","EngEduTelemetry__enable_engedu_telemetry","CloudShell__cloud_code_overflow_menu","Cloud__enable_cloud_facet_chat","MiscFeatureFlags__enable_firebase_utm","Search__enable_ai_eligibility_checks","MiscFeatureFlags__developers_footer_image","Search__enable_suggestions_from_borg","Search__scope_to_project_tenant","DevPro__enable_developer_subscriptions","Cloud__enable_cloud_shell_fte_user_flow","TpcFeatures__enable_required_headers","Cloud__enable_cloudx_experiment_ids","Profiles__enable_recognition_badges","Profiles__enable_public_developer_profiles","Search__enable_ai_search_summaries","MiscFeatureFlags__enable_variable_operator","Profiles__require_profile_eligibility_for_signin","DevPro__enable_cloud_innovators_plus","Concierge__enable_concierge_restricted","TpcFeatures__enable_mirror_tenant_redirects","Cloud__enable_cloudx_ping","MiscFeatureFlags__emergency_css"],null,null,"AIzaSyBLEMok-5suZ67qRPzx0qUtbnLmyT_kCVE","https://web.archive.org/web/20241124040939/https://developerscontentserving-pa.clients6.google.com","AIzaSyCM4QpTRSqP5qI4Dvjt4OAScIN8sOUlO-k","https://web.archive.org/web/20241124040939/https://developerscontentsearch-pa.clients6.google.com",1,4,1,"https://web.archive.org/web/20241124040939/https://developerprofiles-pa.clients6.google.com",[2,"cloud","Google Cloud","cloud.google.com",null,"cloud-dot-devsite-v2-prod.appspot.com",null,null,[1,1,null,null,null,null,null,null,null,null,null,[1],null,null,null,null,null,1,[1],[null,null,null,[1,20],"/terms/recommendations"],[1],null,[1],[1,null,1],[1,1,null,null,1,null,["/vertex-ai/"]]],null,[22,null,null,null,null,null,"/images/cloud-logo.svg","/images/favicons/onecloud/apple-icon.png",null,null,null,null,1,1,1,[6,5],[],null,null,[[],[],[],[],[],[],[],[]],null,1,null,null,null,null,[]],[],null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,[6,1,14,15,22,23,29,37],null,[[null,null,null,null,null,null,[1,[["docType","Choose a content type",[["ApiReference",null,null,null,null,null,null,null,null,"API reference"],["Sample",null,null,null,null,null,null,null,null,"Code sample"],["ReferenceArchitecture",null,null,null,null,null,null,null,null,"Reference architecture"],["Tutorial",null,null,null,null,null,null,null,null,"Tutorial"]]],["category","Choose a topic",[["AiAndMachineLearning",null,null,null,null,null,null,null,null,"Artificial intelligence and machine learning (AI/ML)"],["ApplicationDevelopment",null,null,null,null,null,null,null,null,"Application development"],["BigDataAndAnalytics",null,null,null,null,null,null,null,null,"Big data and analytics"],["Compute",null,null,null,null,null,null,null,null,"Compute"],["Containers",null,null,null,null,null,null,null,null,"Containers"],["Databases",null,null,null,null,null,null,null,null,"Databases"],["HybridCloud",null,null,null,null,null,null,null,null,"Hybrid and multicloud"],["LoggingAndMonitoring",null,null,null,null,null,null,null,null,"Logging and monitoring"],["Migrations",null,null,null,null,null,null,null,null,"Migrations"],["Networking",null,null,null,null,null,null,null,null,"Networking"],["SecurityAndCompliance",null,null,null,null,null,null,null,null,"Security and compliance"],["Serverless",null,null,null,null,null,null,null,null,"Serverless"],["Storage",null,null,null,null,null,null,null,null,"Storage"]]]]]],[1],null,1],[[null,null,null,null,null,["GTM-5CVQBG"],null,null,null,null,null,[["GTM-5CVQBG",2]],1],null,null,null,null,null,1],"mwETRvWii0eU5NUYprb0Y9z5GVbc",4,null,null,null,null,null,null,null,null,null,null,null,null,null,"cloud.devsite.google"],1,"pk_live_5170syrHvgGVmSx9sBrnWtA5luvk9BwnVcvIi7HizpwauFG96WedXsuXh790rtij9AmGllqPtMLfhe2RSwD6Pn38V00uBCydV4m"]') </script> <devsite-a11y-announce></devsite-a11y-announce> </body> </html>

CINXE.COM

Overview of VPC Service Controls | Google Cloud