Compute Engine instances should have attached disk auto-delete disabled
This check verifies whether GCP Compute Engine VM instances have **auto-delete** disabled for their attached persistent disks. When auto-delete is enabled, persistent disks are automatically removed when the associated VM instance is deleted.
With auto-delete enabled, persistent disks are automatically deleted when the associated VM instance is terminated. This could result in permanent data loss if the instance is accidentally or intentionally deleted. It could also cause recovery challenges for mission-critical workloads and compliance violations where data retention is required.
What this control checks
Checks the auto_delete setting on disks attached to Compute Engine instances
Audit evidence
Evidence that deployed resources meet this control: Prowler check compute_instance_disk_auto_delete_disabled (prowler gcp --checks compute_instance_disk_auto_delete_disabled).
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
gcp_compute_instance_disk_auto_delete_disabled - Prowler Check:
compute_instance_disk_auto_delete_disabled
Last reviewed: 2026-10-09