Wednesday, April 21, 2021

Use Virtual Private Cloud Service Controls to create security perimeters around Google Cloud Search data

What’s changing 

We’re introducing support for Virtual Private Cloud Service Controls (VPC-SC) for Google Cloud Search. You can use these controls to define a service perimeter around Google Cloud Search resources and create policies to grant access based on contextual attributes, such as: 
  • IP Address: You can grant an access level based on the IP address of the originating request 
  • Device type and operating system: You can grant an access level based on user devices, including operating system and version 
  • User Identity: You can grant an access level based on the user identity 
This ensures that:
  • Resources within a perimeter are accessed only from users with authorized VPC networks.
  • Clients with access to resources within a perimeter don't have access to resources outside that perimeter.
  • Data cannot be copied to unauthorized resources outside the perimeter.
  • Internet access to resources within a perimeter are restricted using allowlisted IPv4 and IPv6 ranges.
For more information, see this overview of the VPC Service Controls.


Who’s impacted

Admins and end users


Why you’d use it

Data security is paramount for every enterprise.. VPC Service Controls help you restrict public network access to your sensitive data while using Google Cloud Search’s fully managed document indexing and search capabilities. 

With this managed service, you can configure private communication between cloud resources and hybrid VPC networks. By expanding perimeter security from on-premise networks to data stored on Google Cloud Search, you can feel confident indexing and using sensitive data on Cloud Search. 


Getting started


Rollout pace


Availability

  • Available to Google Cloud Search customers and Google Workspace Enterprise Plus
  • Not available to Google Workspace Essentials, Business Starter, Business Standard, Business Plus, Enterprise Essentials, Enterprise Standard, Education Fundamentals, Education Plus, Frontline, and Nonprofits, as well as G Suite Basic and Business customers


Resources