Google Cloud Compliance ControlsGoogle Cloud VPC
VPC subnets should have Private Google Access enabled
Google Compute Subnetwork should have Private Google Access enabled. Set `private_ip_google_access` to `true`. Private Google Access allows instances in a subnet to reach Google APIs and services via internal IP.
What this control checks
google_compute_subnetwork must set private_ip_google_access to true
Framework mappings
The clauses this control is mapped to in each framework.
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
enable_network_private_google_access - Checkov Check:
CKV_GCP_74 - Powerpipe Control:
gcp_compliance.control.enable_network_private_google_access - KICS Query:
ee7b93c1-b3f8-4a3b-9588-146d481814f5 - Trivy Check:
GCP-0075
Last reviewed: 2026-10-09