Google Cloud Compliance ControlsGoogle Cloud Compute Engine
Compute Engine disk images should not be publicly shared
Custom disk images should not be shared publicly with `allAuthenticatedUsers`. Per Google Cloud API restrictions, `allUsers` cannot be assigned to Compute Engine images. `allAuthenticatedUsers` grants access to anyone with a Google account.
What this control checks
Compute Engine disk images are not shared publicly
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
gcp_compute_image_not_publicly_shared - Prowler Check:
compute_image_not_publicly_shared
Last reviewed: 2026-10-09