Compute Engine networks should have automatic subnetwork creation enabled
This control ensures that auto create subnetwork is enabled for Compute Network. Legacy network is not recommended, subnetworks cannot be created in a legacy network.
Legacy network is not recommended, subnetworks cannot be created in a legacy network.
What this control checks
Compute Networks should have auto create subnetwork enabled
Audit evidence
Evidence that deployed resources meet this control: PowerPipe control gcp_compliance.control.compute_network_auto_create_subnetwork_enabled.
Framework-specific interpretation
NIST Cybersecurity Framework v2.0: Mapped to PR.IR-01 (Networks and environments are protected from unauthorized logical access and usage.).
Framework mappings
The clauses this control is mapped to in each framework.
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
compute_network_auto_create_subnetwork_enabled - Powerpipe Control:
gcp_compliance.control.compute_network_auto_create_subnetwork_enabled
Last reviewed: 2026-10-09