VPC Service Controls feature (Status: Preview): Support for optimizing service perimeters using the VPC Service...

VPC Service Controls feature (Status: Preview): Support for optimizing service perimeters using the VPC Service Controls recommender is available.

The recommender detects architectural risks and perimeter misconfigurations, including the following:

• Critical resources at risk of exfiltration: Identifies active and sensitive services (such as BigQuery and Cloud Storage) operating outside service perimeters. • Unconfigured VPC accessible services: Identifies perimeters that leave APIs unrestricted from within the security boundary. • Misconfigured VPC accessible services: Identifies mismatches between allowed accessible APIs and restricted services inside a perimeter.

For more information, see Optimize perimeters with recommender.