domains / families / security / gcp-networking-audit

gcp-networking-audit

separate

GCP VPC Network audit covering global VPC design, firewall rule priority evaluation with hierarchical policies, Cloud NAT egress analysis, Cloud Interconnect and Shared VPC connectivity, Cloud Router BGP validation, and resource optimization using read-only gcloud CLI commands.

When to use

• VPC Network architecture review — evaluating auto-mode versus custom-mode selection, subnet IP ranges, and Private Google Access configuration
• Post-migration audit — verifying firewall rules, Cloud NAT egress, and Cloud Router routes after workload migration
• Security assessment — identifying permissive firewall rules using target tags, missing hierarchical firewall policies, or disabled VPC Flow Logs
• Connectivity troubleshooting — diagnosing Cloud Interconnect VLAN attachment failures, Cloud VPN tunnel errors, or Shared VPC permission issues
• Compliance preparation — documenting VPC Network segmentation, firewall rule justification, and VPC Flow Log retention
• Cost optimization — identifying unused external IPs, over-provisioned Cloud NAT gateways, and idle Cloud Interconnect attachments

When not to use

• Cloud CDN
• Cloud Armor WAF
• load balancer URL maps
• Cloud DNS
• generic cloud networking advice

Skill page

Source