疑似Oday
Ensure that "Define Allowed External IPs for VM Instances" constraint policy is enforced at the GCP organization level in order to enable you to define the set of virtual machine (VM) instances that are allowed to use external IP addresses. This constraint helps you to minimize your instance's exposure to the Internet.
id: gcloud-org-allowed-external-ips
info:
name: Organization Policy for Allowed External IPs Not
...