services / Google Cloud / Compute Engine external VPN gateways

Manage external access points to Compute Engine VPNs (e.g., network gateways).

Multiple organizational functions may often reside within Compute Engine.

compute.​externalVpnGateways.​setLabels

Risks

1. Infrastructure destruction (HIGH)

Scope: CRITICAL

This privilege may grant access to sensitive data from a significant fraction of organizational functions, allow interruption of critical organizational services, or its exploit could lead to significant privilege escalation.

Links