Google Cloud Compliance ControlsGoogle Cloud Compute Engine
Compute Engine instances should have Deployment Manager permissions restricted
This control ensures that Compute Instance does not allow deployments manager permissions. The mapped powerpipe check is titled "Compute Instances should restrict deployments manager permission".
What this control checks
Compute Instances should restrict deployments manager permission
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
compute_instance_no_deployments_manager_permission - Powerpipe Control:
gcp_compliance.control.compute_instance_no_deployments_manager_permission
Last reviewed: 2026-10-09