VPC Service Controls
E459735
VPC Service Controls is a Google Cloud security feature that creates a virtual security perimeter around services and data to reduce the risk of data exfiltration.
All labels observed (1)
| Label | Occurrences |
|---|---|
| VPC Service Controls canonical | 3 |
How this entity was disambiguated
This entity first appeared as the object of triple T4600214 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.
NED1
Entity disambiguation (via context triple)
gpt-5-mini-2025-08-07
Target entity: VPC Service Controls Context triple: [Google Cloud Dataproc, securityFeature, VPC Service Controls]
-
A.
Amazon VPC
Amazon VPC is a networking service that lets users provision logically isolated, customizable virtual networks within the AWS cloud to securely run and control their resources.
-
B.
VPC Flow Logs
VPC Flow Logs is an AWS feature that captures detailed information about IP traffic going to and from network interfaces in a Virtual Private Cloud for monitoring, troubleshooting, and security analysis.
-
C.
Cloud IAM
Cloud IAM is Google Cloud’s identity and access management service that lets administrators define and enforce who can access specific cloud resources and what actions they can perform.
-
D.
Cloud Armor
Cloud Armor is Google Cloud’s distributed web application firewall and DDoS protection service that helps secure applications and services from online attacks.
-
E.
Azure Security Center
Azure Security Center is a cloud security management and threat protection service that helps monitor, harden, and defend workloads running in Microsoft Azure and hybrid environments.
- F. None of above. chosen
- G. Unsure - the case is ambiguous/there is not enough information to decide.
NED2
Entity disambiguation (via description)
gpt-5-mini-2025-08-07
Target entity: VPC Service Controls Target entity description: VPC Service Controls is a Google Cloud security feature that creates a virtual security perimeter around services and data to reduce the risk of data exfiltration.
-
A.
Amazon VPC
Amazon VPC is a networking service that lets users provision logically isolated, customizable virtual networks within the AWS cloud to securely run and control their resources.
-
B.
VPC Flow Logs
VPC Flow Logs is an AWS feature that captures detailed information about IP traffic going to and from network interfaces in a Virtual Private Cloud for monitoring, troubleshooting, and security analysis.
-
C.
Cloud IAM
Cloud IAM is Google Cloud’s identity and access management service that lets administrators define and enforce who can access specific cloud resources and what actions they can perform.
-
D.
Cloud Armor
Cloud Armor is Google Cloud’s distributed web application firewall and DDoS protection service that helps secure applications and services from online attacks.
-
E.
Azure Security Center
Azure Security Center is a cloud security management and threat protection service that helps monitor, harden, and defend workloads running in Microsoft Azure and hybrid environments.
- F. None of above. chosen
Statements (52)
| Predicate | Object |
|---|---|
| instanceOf |
Google Cloud security feature
ⓘ
access control mechanism ⓘ |
| appliesTo |
Google Cloud projects
NERFINISHED
ⓘ
Google Cloud services NERFINISHED ⓘ service resources ⓘ |
| category |
cloud data security
ⓘ
zero trust security control ⓘ |
| configurationScope |
folder level
ⓘ
organization level ⓘ project level ⓘ |
| controls | access to Google Cloud services ⓘ |
| developedBy | Google NERFINISHED ⓘ |
| documentedAt | https://cloud.google.com/vpc-service-controls ⓘ |
| enforces |
restrictions based on device attributes
ⓘ
restrictions based on network ⓘ restrictions based on request origin ⓘ restrictions based on user identity ⓘ restrictions on API access ⓘ |
| hasPurpose |
protect data in Google Cloud services
ⓘ
reduce risk of data exfiltration ⓘ |
| integratesWith |
Access Context Manager
NERFINISHED
ⓘ
Cloud Audit Logs NERFINISHED ⓘ Cloud Identity and Access Management NERFINISHED ⓘ Cloud Interconnect NERFINISHED ⓘ Cloud Logging NERFINISHED ⓘ Cloud VPN NERFINISHED ⓘ Private Google Access ⓘ |
| mitigates |
data exfiltration to unauthorized destinations
ⓘ
data exfiltration via compromised credentials ⓘ data exfiltration via misconfigured networks ⓘ |
| partOf | Google Cloud Platform NERFINISHED ⓘ |
| protects |
AI Platform services
NERFINISHED
ⓘ
BigQuery NERFINISHED ⓘ Cloud Bigtable NERFINISHED ⓘ Cloud Pub/Sub NERFINISHED ⓘ Cloud SQL (via supported integrations) NERFINISHED ⓘ Cloud Spanner NERFINISHED ⓘ Cloud Storage NERFINISHED ⓘ Secret Manager NERFINISHED ⓘ |
| provides | virtual security perimeter ⓘ |
| requires | Access Context Manager for access levels NERFINISHED ⓘ |
| supports |
context-aware access policies
ⓘ
multi-perimeter architectures ⓘ perimeter-based access control ⓘ service perimeter bridging ⓘ testing policies in dry run mode ⓘ |
| usesConcept |
access levels
ⓘ
bridge perimeter ⓘ dry run mode ⓘ egress rules ⓘ ingress rules ⓘ service perimeter ⓘ |
How these facts were elicited
The pipeline generated the facts above by prompting gpt-5.1 with this entity's name + description and the instruction below.
Instruction
You are a knowledge base construction expert. Given a subject entity and a description of it, return factual statements that you know for the subject as a JSON list of dictionaries(triples), where keys must be "subject", "predicate" and "object". The number of facts may be very high, between 25 to 50 or more, for very popular subjects. For less popular subjects, the number of facts can be very low, like 5 or 10. # Requirements - If you don't know the subject at all, return an empty list. - If the subject is not a named entity, return an empty list. - Include at least one triple where predicate is "instanceOf". - Do not get too wordy. - Separate several objects into multiple triples with one object.
Input
Subject: VPC Service Controls Description of subject: VPC Service Controls is a Google Cloud security feature that creates a virtual security perimeter around services and data to reduce the risk of data exfiltration.
Referenced by (3)
Full triples — surface form annotated when it differs from this entity's canonical label.