Network protectionGoogle Cloud

Google Cloud expands VPC Service Controls: projects within folders can inherit security perimeters

Google Cloud announced VPC Service Controls updates allowing folders and their projects to inherit service perimeters, with dry-run mode available to assess impact first. The update is generally available according to Google; organisations should still test cross-project services and exception rules.

Anti-Ransomware · Compiled with SI agent assistanceOfficial article publication date:Checked 2026.10.26
Original scenario illustration of a cloud administrator organising project folders and access boundaries
Illustration · Source ↗ · About this image ↗

Source Facts

Google Cloud announced service perimeter management updates on 15 October. Administrators can add folders to a perimeter, with projects and subfolders inheriting policies through the organisational hierarchy, reducing omissions when new projects would otherwise require separate configuration.

The official announcement also describes finer-grained ingress and egress rules and access-denial troubleshooting. Dry-run mode supports folder membership, helping teams observe traffic before enforcement. This is an additional service-access defence, not a replacement for IAM or other data protection controls.

Next Steps for Businesses / Editorial Observations

Maintain cloud organisational structure and data boundaries together. Before moving a project, understand the new restrictions it may inherit.

Next steps you can take

  • Check project and folder membership, and observe critical service connections in dry-run mode.
  • For necessary exceptions, record the purpose, owner and review date to avoid permanently excessive access.

Original sources

Modernizing perimeter security: Scalable perimeters with VPC Service Controls

Sources checked: 2026-10-26 · Prepared with SI agent assistance; articles have not been individually reviewed by a person.

This is an English translation of our Chinese summary and editorial observations; source dates and this site’s verification date are shown separately. If an original advisory changes, refer to the source.

Back to news ←

KEEP READING

Recommended reading

Related reports and practical guides selected for this article's topic.

Original synthetic illustration of modular container equipment and a tray with a defined boundaryIllustrationSecurity updates · 2026.10.26

Amazon Linux updates its Docker security advisory: check container hosts and archive handling

Amazon LinuxIllustration of a female bakery owner checking online orders and receiptsIllustrationVulnerability advisories · 2026.10.25

PHP patches and configuration follow-up: Unit 42 corrects its assessment of one intrusion's cause

PHP / Palo Alto Networks Unit 42Original synthetic illustration of an archive system administrator checking a server maintenance checklistIllustrationThreat Advisories · 2026.10.24

Linux KSMBD file-sharing issue disclosed: first check whether the service is enabled

CSIRT.SK / Sysdig