services / Google Cloud / Compute Engine external VPN gateways

Manage external access points to Compute Engine VPNs (e.g., network gateways).

Multiple organizational functions may often reside within Compute Engine.

compute.​externalVpnGateways.​list

Risks

1. Network discovery (LOW)

Scope: CRITICAL

This privilege may grant access to sensitive data from a significant fraction of organizational functions, allow interruption of critical organizational services, or its exploit could lead to significant privilege escalation.

Links