Set up a service perimeter using VPC Service Controls

Beta

This feature is covered by the Pre-GA Offerings Terms of the Google Cloud Terms of Service. Pre-GA features might have limited support, and changes to pre-GA features might not be compatible with other pre-GA versions. For more information, see the launch stage descriptions.

VPC Service Controls is a Google Cloud feature that allows you to set up a service perimeter and create a data transfer boundary. You can use VPC Service Controls with Workflows to help protect your services.

HTTP requests from a Workflows execution are supported as follows:

• Authenticated requests to VPC Service Controls-compliant Google Cloud endpoints are allowed.
• Requests to Cloud Functions and Cloud Run service endpoints are allowed.
• Requests to third-party endpoints are blocked.
• Requests to non-VPC Service Controls-compliant Google Cloud endpoints are blocked.

What's next

• To learn more about VPC Service Controls, see the overview and supported products and limitations.

• To set up a service perimeter, see Create a service perimeter.