services / Google Cloud / Compute Engine global addresses

Manage global addresses used by cloud load balancers.

Limited attack compared to direct VM access; exploitation involves also exercising risks in load-balancer routing.


compute.​globalAddresses.​delete

An address can only be released if it is not in use.

Risks

Scope: LOW

This privilege allows access to data that are not meant to be public, but are otherwise not sensitive.

Links

  • https:​/​/​cloud.​google.​com/​compute/​docs/​ip-​addresses/​
  • https:​/​/​cloud.​google.​com/​load-​balancing/​docs/​choosing-​load-​balancer#​global-​regional
  • https:​/​/​cloud.​google.​com/​sdk/​gcloud/​reference/​compute/​addresses
  • https:​/​/​cloud.​google.​com/​compute/​docs/​reference/​rest/​v1/​globalAddresses
  • Contributed by P0 Security

    © 2023–present P0 Security and contributors to the IAM Privilege Catalog