Google Cloud made VPC Service Controls enhancements generally available at no additional cost, adding folder-based perimeter membership and inherited protection.

Google Cloud made the new Virtual Private Cloud Service Controls (VPC-SC) capabilities generally available at no additional cost. Administrators can now add folders to security-perimeter membership, automatically extending their policies to contained projects and nested subfolders.

Protection follows the resource hierarchy as projects move, and new workloads can inherit coverage without additional perimeter changes. Folder membership also works in dry-run mode, allowing administrators to assess a perimeter against live traffic before enforcing it.

Ingress and egress rules can now reference folders and organizations directly rather than listing their underlying projects individually. Google also announced granular exception management and guided, scoped remediation for access denials.

Google describes VPC-SC as an additional context-aware perimeter intended to protect against data theft, including scenarios involving compromised credentials, identity and access management misconfigurations, and insider threats. The announcement specifically frames autonomous agents as non-human identities requiring secure-by-default controls across service-to-service interactions.