Compute Engine instances should have on host maintenance set to MIGRATE
Compute Engine VM instances should have their On Host Maintenance setting configured to `MIGRATE` for live migration during host maintenance events. This ensures continuous availability without downtime.
VM instances configured with On Host Maintenance set to TERMINATE will be shut down during host maintenance events, causing service interruptions and unplanned downtime. This can impact application availability and may require manual intervention to restart services.
What this control checks
VM instance has On Host Maintenance set to MIGRATE
Audit evidence
Evidence that deployed resources meet this control: Prowler check compute_instance_on_host_maintenance_migrate (prowler gcp --checks compute_instance_on_host_maintenance_migrate).
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
gcp_compute_instance_on_host_maintenance_migrate - Prowler Check:
compute_instance_on_host_maintenance_migrate
Last reviewed: 2026-10-09