VPC-SC Ingress/Egress policy controls

[lbg-avass]

**VPC-SC new Ingress/Egress feature is to replace perimeter bridges, to simplify the the connection between projects from different environments or even outside the organisation.
This allow for misconfigurations:

• Unauthorised cross environments
• Unauthorised All Services
• Unauthorised All Method
• Unauthorised All Rules
  **

Detailed Description

https://cloud.google.com/vpc-service-controls/docs/ingress-egress-rules
Requirements:
Controls for the following:

• Unauthorised cross environments
• Unauthorised All Services
• Unauthorised All Method
• Unauthorised All Rules

Context

This is critical, to prevent data exfiltration, due to malicious or misconfigurations

Possible Implementation

[lbg-avass]

Primary contact email: [email protected]