VPC Service Controls documentation

VPC Service Controls lets you mitigate data exfiltration risks by isolating resources of multi-tenant Google Cloud services. With VPC Service Controls, you can enforce adaptive access control based on IP range or device trust for accessing Google Cloud resources from outside privileged networks.

Go to the VPC Service Controls product page for more.

Guides

• Set up a service perimeter using Google Cloud console

• Add projects to a perimeter using Terraform

• Design and architect perimeters

• Manage dry run configurations

• Design access levels

• Configure ingress and egress rules

• Allow access to protected resources from outside a perimeter

• Create a scoped policy

• Set up private connectivity to Google APIs and services

Concepts

• List of supported products

• Service perimeters overview

• Dry run mode for testing the effect of perimeters

• Ingress and egress rules overview

• Scoped policies overview

• VPC networks management in perimeters

• Rules for including VPC networks in perimeters

• Private Google Access with VPC Service Controls

Reference and resources

• Google Cloud CLI reference

• Supported service method restrictions

• Release notes

• Pricing

• Quotas and limits

• Get support