compute.globalAddresses.setLabels – 1 risks

The IAM Privilege Catalog

services / Google Cloud / Compute Engine global addresses

Manage global addresses used by cloud load balancers.

Limited attack compared to direct VM access; exploitation involves also exercising risks in load-balancer routing.

compute.globalAddresses.setLabels

Risks

Infrastructure destruction (HIGH)

Scope: LOW

This privilege allows access to data that are not meant to be public, but are otherwise not sensitive.

Links

https://cloud.google.com/compute/docs/ip-addresses/

https://cloud.google.com/load-balancing/docs/choosing-load-balancer#global-regional

https://cloud.google.com/sdk/gcloud/reference/compute/addresses

https://cloud.google.com/compute/docs/reference/rest/v1/globalAddresses

Contributed by P0 Security

© 2023–present P0 Security and contributors to the IAM Privilege Catalog