Cloud Storage should be protected by VPC Service Controls
GCP Projects are evaluated to ensure they have VPC Service Controls enabled for Cloud Storage. VPC Service Controls establish security boundaries by restricting access to Cloud Storage resources to specific networks and trusted clients.
Projects without VPC Service Controls protection for Cloud Storage may be vulnerable to unauthorized data access and exfiltration, even with proper IAM policies in place. VPC Service Controls provide an additional layer of network-level security that restricts API access based on the context of the request.
What this control checks
Cloud Storage is protected by VPC Service Controls
Audit evidence
Evidence that deployed resources meet this control: Prowler check cloudstorage_uses_vpc_service_controls (prowler gcp --checks cloudstorage_uses_vpc_service_controls).
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
gcp_cloudstorage_uses_vpc_service_controls - Prowler Check:
cloudstorage_uses_vpc_service_controls
Last reviewed: 2026-10-09