services / Google Cloud / Compute Engine addresses

Read and edit Compute Engine addresses

Allows discovering, reserving, and modifying IP addresses within Compute Engine. If IP ranges are narrowly constrained (e.g., from a /28 range), may allow an attacker to deny access to infrastructure.

compute.​addresses.​create

Risks

1. Infrastructure consumption (LOW)

Scope: LOW

This privilege allows access to data that are not meant to be public, but are otherwise not sensitive.

Links