thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Cloud Computing · Advanced

VPC Service Controls (VPC SC)

Google Cloud feature creating service perimeters around Google-managed services to mitigate data exfiltration.

Definition

VPC Service Controls define perimeters around projects and services such as Cloud Storage and BigQuery, blocking API access from outside the perimeter even with valid credentials. Access levels (via Access Context Manager), ingress/egress rules and perimeter bridges permit approved paths, and dry-run mode tests policies before enforcement.

Example

A perimeter prevents copying BigQuery data from a regulated project to a personal project, even by an authorized user.

Exam tip

IAM controls who; VPC SC controls from where and to where data can move. It is the main data exfiltration control on Google exams.

Related terms