services / Google Cloud / Compute Engine instance groups

Create and alter (unmanaged) instance groups.

Allows creation, modification, and destruction of manually managed instance groups. Generally requires exercise of multiple risks to exploit.

compute.​instanceGroups.​use

No known or documented application; may be necessary to assign the group to a load balancer.

Risks

1. Lateral movement (BOOST)

Scope: MEDIUM

This privilege may grant access to confidential data, or its exploit can incur operational cost.

Links