services / Google Cloud / Compute Engine instance templates

Templates used to create managed instance groups and individual VM instances with a consistent configuration.

compute.​instanceTemplates.​create

An attacker can use this for cryptojacking once an instance, or an instance group referencing the template, is actually created.

Risks

1. Resource hijacking (MEDIUM)
2. Spend (MEDIUM)

Scope: MEDIUM

This privilege may grant access to confidential data, or its exploit can incur operational cost.

Links