VPC Service Controls
E459735
VPC Service Controls is a Google Cloud security feature that creates a virtual security perimeter around services and data to reduce the risk of data exfiltration.
All labels observed (1)
| Label | Occurrences |
|---|---|
| VPC Service Controls canonical | 3 |
How this entity was disambiguated
This entity first appeared as the object of triple T4600214 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.
NED1
Entity disambiguation (via context triple)
gpt-5-mini-2025-08-07
Target entity: VPC Service Controls Context triple: [Google Cloud Dataproc, securityFeature, VPC Service Controls]
-
A.
Amazon VPC
Amazon VPC is a networking service that lets users provision logically isolated, customizable virtual networks within the AWS cloud to securely run and control their resources.
-
B.
VPC Flow Logs
VPC Flow Logs is an AWS feature that captures detailed information about IP traffic going to and from network interfaces in a Virtual Private Cloud for monitoring, troubleshooting, and security analysis.
-
C.
Cloud IAM
Cloud IAM is Google Cloud’s identity and access management service that lets administrators define and enforce who can access specific cloud resources and what actions they can perform.
-
D.
Cloud Armor
Cloud Armor is Google Cloud’s distributed web application firewall and DDoS protection service that helps secure applications and services from online attacks.
-
E.
Azure Security Center
Azure Security Center is a cloud security management and threat protection service that helps monitor, harden, and defend workloads running in Microsoft Azure and hybrid environments.
- F. None of above. chosen
- G. Unsure - the case is ambiguous/there is not enough information to decide.
NED2
Entity disambiguation (via description)
gpt-5-mini-2025-08-07
Target entity: VPC Service Controls Target entity description: VPC Service Controls is a Google Cloud security feature that creates a virtual security perimeter around services and data to reduce the risk of data exfiltration.
-
A.
Amazon VPC
Amazon VPC is a networking service that lets users provision logically isolated, customizable virtual networks within the AWS cloud to securely run and control their resources.
-
B.
VPC Flow Logs
VPC Flow Logs is an AWS feature that captures detailed information about IP traffic going to and from network interfaces in a Virtual Private Cloud for monitoring, troubleshooting, and security analysis.
-
C.
Cloud IAM
Cloud IAM is Google Cloud’s identity and access management service that lets administrators define and enforce who can access specific cloud resources and what actions they can perform.
-
D.
Cloud Armor
Cloud Armor is Google Cloud’s distributed web application firewall and DDoS protection service that helps secure applications and services from online attacks.
-
E.
Azure Security Center
Azure Security Center is a cloud security management and threat protection service that helps monitor, harden, and defend workloads running in Microsoft Azure and hybrid environments.
- F. None of above. chosen
Statements (52)
| Predicate | Object |
|---|---|
| instanceOf |
Google Cloud security feature
ⓘ
access control mechanism ⓘ |
| appliesTo |
Google Cloud projects
ⓘ
linked to:
Google Cloud project
Google Cloud services ⓘ
linked to:
Google Cloud
service resources ⓘ |
| category |
cloud data security
ⓘ
zero trust security control ⓘ |
| configurationScope |
folder level
ⓘ
organization level ⓘ project level ⓘ |
| controls | access to Google Cloud services ⓘ |
| developedBy | Google ⓘ |
| documentedAt | https://cloud.google.com/vpc-service-controls ⓘ |
| enforces |
restrictions based on device attributes
ⓘ
restrictions based on network ⓘ restrictions based on request origin ⓘ restrictions based on user identity ⓘ restrictions on API access ⓘ |
| hasPurpose |
protect data in Google Cloud services
ⓘ
reduce risk of data exfiltration ⓘ |
| integratesWith |
Access Context Manager
ⓘ
Cloud Audit Logs ⓘ
linked to:
Cloud Logging
Cloud Identity and Access Management ⓘ
linked to:
Cloud IAM
Cloud Interconnect ⓘ Cloud Logging ⓘ Cloud VPN ⓘ Private Google Access ⓘ |
| mitigates |
data exfiltration to unauthorized destinations
ⓘ
data exfiltration via compromised credentials ⓘ data exfiltration via misconfigured networks ⓘ |
| partOf |
Google Cloud Platform
ⓘ
linked to:
Google Cloud
|
| protects |
AI Platform services
ⓘ
linked to:
Vertex AI
BigQuery ⓘ
linked to:
Google BigQuery
Cloud Bigtable ⓘ
linked to:
Bigtable
Cloud Pub/Sub ⓘ
linked to:
Google Cloud Pub/Sub
Cloud SQL (via supported integrations) ⓘ
linked to:
Cloud SQL
Cloud Spanner ⓘ Cloud Storage ⓘ
linked to:
Google Cloud Storage
Secret Manager ⓘ |
| provides | virtual security perimeter ⓘ |
| requires | Access Context Manager for access levels ⓘ |
| supports |
context-aware access policies
ⓘ
multi-perimeter architectures ⓘ perimeter-based access control ⓘ service perimeter bridging ⓘ testing policies in dry run mode ⓘ |
| usesConcept |
access levels
ⓘ
bridge perimeter ⓘ dry run mode ⓘ egress rules ⓘ ingress rules ⓘ service perimeter ⓘ |
How these facts were elicited
The pipeline generated the facts above by prompting gpt-5.1 with this entity's name + description and the instruction below.
Instruction
You are a knowledge base construction expert. Given a subject entity and a description of it, return factual statements that you know for the subject as a JSON list of dictionaries(triples), where keys must be "subject", "predicate" and "object". The number of facts may be very high, between 25 to 50 or more, for very popular subjects. For less popular subjects, the number of facts can be very low, like 5 or 10. # Requirements - If you don't know the subject at all, return an empty list. - If the subject is not a named entity, return an empty list. - Include at least one triple where predicate is "instanceOf". - Do not get too wordy. - Separate several objects into multiple triples with one object.
Input
Subject: VPC Service Controls Description of subject: VPC Service Controls is a Google Cloud security feature that creates a virtual security perimeter around services and data to reduce the risk of data exfiltration.
Referenced by (3)
Full triples — surface form annotated when it differs from this entity's canonical label.