Google Cloud Compliance ControlsGoogle Cloud Compute Engine
Compute Engine instances should have deletion protection enabled
This check verifies whether GCP Compute Engine VM instances have deletion protection enabled. Deletion protection prevents accidental termination of production or critical workloads.
What this control checks
Compute Engine instances should have deletion protection enabled
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
gcp_compute_instance_deletion_protection_enabled - Prowler Check:
compute_instance_deletion_protection_enabled
Last reviewed: 2026-10-09