Compute Engine instances should have a single network interface
VM instances should be configured with only one network interface unless multiple interfaces are explicitly required for complex network configurations. Multiple network interfaces expand the attack surface and create additional network pathways.
Multiple network interfaces on a VM instance can expand attack surface by providing additional entry points for unauthorized access. They can create unintended network paths that bypass security controls. They can increase management complexity, leading to potential misconfigurations.
What this control checks
Compute Engine instances should have a single network interface
Common pitfalls
Multi-NIC allowed for appliance or routing
Review instances with multiple network interfaces and consolidate to a single interface unless multi-NIC configuration is explicitly required for network appliance or routing purposes.
Audit evidence
Evidence that deployed resources meet this control: Prowler check compute_instance_single_network_interface (prowler gcp --checks compute_instance_single_network_interface).
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
gcp_compute_instance_single_network_interface - Prowler Check:
compute_instance_single_network_interface
Last reviewed: 2026-10-09