Top / Google Cloud Platform / Google Compute Engine

Compute Engine

213 examples and best practices for Google Compute Engine, including Google Compute Engine Address and Google Compute Engine Attached Disk.

Review your .tf file for Google best practices

Shisho Cloud, our free checker to make sure your Terraform configuration follows best practices, is available (beta).

google_compute_address (2 example cases)

google_compute_attached_disk (0 example case)

google_compute_autoscaler (5 example cases)

google_compute_backend_bucket (2 example cases)

Backend Bucket Signed URL Key

google_compute_backend_bucket_signed_url_key (1 example case)

Backend Service

google_compute_backend_service (2 example cases)

Backend Service Signed URL Key

google_compute_backend_service_signed_url_key (0 example case)

google_compute_disk (1 example case)

2 best security practices

Ensure the encryption key for your GCE disk is stored securely
Ensure your GCE disk is encrypted

google_compute_disk_iam (0 example case)

Disk Resource Policy Attachment

google_compute_disk_resource_policy_attachment (4 example cases)

External VPN Gateway

google_compute_external_vpn_gateway (2 example cases)

google_compute_firewall (0 example case)

2 best security practices

Ensure your VPC firewall blocks unwanted outbound traffic
Ensure your VPC firewall blocks unwanted inbound traffic

Firewall Policy

google_compute_firewall_policy (0 example case)

Firewall Policy Association

google_compute_firewall_policy_association (0 example case)

Firewall Policy Rule

google_compute_firewall_policy_rule (0 example case)

Forwarding Rule

google_compute_forwarding_rule (2 example cases)

google_compute_global_address (5 example cases)

Global Forwarding Rule

google_compute_global_forwarding_rule (3 example cases)

Global Network Endpoint

google_compute_global_network_endpoint (2 example cases)

Global Network Endpoint Group

google_compute_global_network_endpoint_group (2 example cases)

google_compute_ha_vpn_gateway (3 example cases)

google_compute_health_check (0 example case)

HTTP Health Check

google_compute_http_health_check (0 example case)

HTTPS Health Check

google_compute_https_health_check (1 example case)

google_compute_image (3 example cases)

google_compute_image_iam (0 example case)

google_compute_instance (4 example cases)

8 best security practices

Ensure appropriate service account is assigned to your GCE instance
Ensure IP forwarding on your GCE instances is disabled
Ensure OS login for your GCE instance is enabled
Ensure serial port access for your GCE instance is disabled
Ensure the use of project-wide SSH keys is disabled
Ensure the boot disk for your GCE instance is encrypted
Ensure your GCP instance does not have unnecessary public IPs
Ensure vTPM of your GCE instance is enabled

Instance From Machine Image

google_compute_instance_from_machine_image (4 example cases)

Instance From Template

google_compute_instance_from_template (2 example cases)

google_compute_instance_group (2 example cases)

Instance Group Manager

google_compute_instance_group_manager (1 example case)

Instance Group Named Port

google_compute_instance_group_named_port (5 example cases)

google_compute_instance_iam (0 example case)

Instance Template

google_compute_instance_template (4 example cases)

Interconnect Attachment

google_compute_interconnect_attachment (2 example cases)

google_compute_machine_image (2 example cases)

Machine Image IAM

google_compute_machine_image_iam (0 example case)

Managed SSL Certificate

google_compute_managed_ssl_certificate (1 example case)

google_compute_network (2 example cases)

Network Endpoint

google_compute_network_endpoint (5 example cases)

Network Endpoint Group

google_compute_network_endpoint_group (4 example cases)

Network Peering

google_compute_network_peering (3 example cases)

Network Peering Routes Config

google_compute_network_peering_routes_config (2 example cases)

google_compute_node_group (2 example cases)

google_compute_node_template (2 example cases)

Organization Security Policy

google_compute_organization_security_policy (1 example case)

Organization Security Policy Association

google_compute_organization_security_policy_association (0 example case)

Organization Security Policy Rule

google_compute_organization_security_policy_rule (0 example case)

Packet Mirroring

google_compute_packet_mirroring (5 example cases)

Per Instance Config

google_compute_per_instance_config (0 example case)

Project Default Network Tier

google_compute_project_default_network_tier (5 example cases)

Project Metadata

google_compute_project_metadata (3 example cases)

1 best security practice

Ensure OS login for your GCE instances is enabled at project level

Project Metadata Item

google_compute_project_metadata_item (2 example cases)

Project Usage Export Bucket

google_project_usage_export_bucket (1 example case)

Region Autoscaler

google_compute_region_autoscaler (3 example cases)

Region Backend Service

google_compute_region_backend_service (3 example cases)

google_compute_region_disk (1 example case)

Region Disk IAM

google_compute_region_disk_iam (0 example case)

Region Disk Resource Policy Attachment

google_compute_region_disk_resource_policy_attachment (2 example cases)

Region Health Check

google_compute_region_health_check (5 example cases)

Region Instance Group Manager

google_compute_region_instance_group_manager (3 example cases)

Region Network Endpoint Group

google_compute_region_network_endpoint_group (5 example cases)

Region Per Instance Config

google_compute_region_per_instance_config (0 example case)

Region SSL Certificate

google_compute_region_ssl_certificate (5 example cases)

Region Target HTTP Proxy

google_compute_region_target_http_proxy (3 example cases)

Region Target HTTPS Proxy

google_compute_region_target_https_proxy (3 example cases)

google_compute_region_url_map (1 example case)

google_compute_reservation (0 example case)

Resource Policy

google_compute_resource_policy (5 example cases)

google_compute_route (0 example case)

google_compute_router (3 example cases)

Router Interface

google_compute_router_interface (3 example cases)

google_compute_router_nat (4 example cases)

google_compute_router_peer (3 example cases)

Security Policy

google_compute_security_policy (5 example cases)

Service Attachment

google_compute_service_attachment (0 example case)

Shared VPC Host Project

google_compute_shared_vpc_host_project (5 example cases)

Shared VPC Service Project

google_compute_shared_vpc_service_project (2 example cases)

google_compute_snapshot (5 example cases)

SSL Certificate

google_compute_ssl_certificate (0 example case)

google_compute_ssl_policy (4 example cases)

1 best security practice

Ensure to use modern TLS protocols

google_compute_subnetwork (3 example cases)

1 best security practice

Ensure VPC flow logging is enabled

google_compute_subnetwork_iam (0 example case)

Target gRPC Proxy

google_compute_target_grpc_proxy (2 example cases)

Target HTTP Proxy

google_compute_target_http_proxy (5 example cases)

Target HTTPS Proxy

google_compute_target_https_proxy (5 example cases)

Target Instance

google_compute_target_instance (3 example cases)

google_compute_target_pool (0 example case)

Target SSL Proxy

google_compute_target_ssl_proxy (5 example cases)

Target TCP Proxy

google_compute_target_tcp_proxy (5 example cases)

google_compute_url_map (4 example cases)

google_compute_vpn_gateway (2 example cases)

google_compute_vpn_tunnel (2 example cases)