Google Cloud added a violation analyzer and dashboard to Virtual Private Cloud Service Controls for organization-wide perimeter monitoring.

Google Cloud added a violation analyzer and violation dashboard to Virtual Private Cloud Service Controls, or VPC Service Controls. VPC Service Controls establish service perimeters intended to reduce risks involving data exfiltration, compromised accounts and insider threats.

The violation analyzer uses the troubleshooting token or unique identifier from a failed VPC Service Controls request. It generates a report identifying the principals and target resources involved and explains how the request violated the applicable service perimeter, without requiring administrators to construct a Cloud Logging Structured Query Language query.

The violation dashboard aggregates service-perimeter violations across an entire Google Cloud organization into one console view. Administrators can identify trends and spikes in access denials and filter violations by perimeter, project or identity.

BlackLine, a financial-operations-management company, uses the capabilities to manage access levels and ingress and egress policies around its Google Cloud environment. BlackLine said the reports provide access context and support faster resolution of service-perimeter issues.