VPC Service Controls release notes

Preview stage support for the following integration:

• Service Usage

VPC Service Controls feature (Status: Preview): The VPC Service Controls violation analyzer lets you diagnose access denial events for services in your perimeters using an encrypted troubleshooting token generated by VPC Service Controls. The violation analyzer also provides troubleshooting results that can help you understand and resolve the access denial events. This feature is available in Preview.

For more information, see Diagnose an access denial event using the VPC Service Controls violation analyzer.

Preview stage support for the following integration:

• Google Agentspace Enterprise

General availability support for the following integration:

• Google Agentspace - NotebookLM Enterprise

VPC Service Controls feature (Status: Preview): The VPC Service Controls violation dashboard provides an aggregated view of all access denials by service perimeters in your organization. This feature is available in Preview.

For more information, see Set up and view the violation dashboard.

VPC Service Controls feature: Support for using third-party identities (both single identities and groups) in the ingress and egress rules to allow access to resources protected by a service perimeter is generally available.

For more information, see Configure identity groups and third-party identities in ingress and egress rules.

VPC Service Controls feature: Support for adding projects as a source in the egress rules of a service perimeter is generally available.

For more information, see Ingress and egress rules.

VPC Service Controls feature: Support for adding titles in the ingress and egress rules of a service perimeter is generally available.

For more information, see Ingress and egress rules.

Preview stage support for the following integration:

• Database Insights API

General availability support for the following integration:

• Memorystore for Valkey

VPC Service Controls feature: Support for using identity groups in the ingress and egress rules to allow access to resources protected by a service perimeter is generally available.

For more information, see Configure identity groups and third-party identities in ingress and egress rules.

VPC Service Controls feature: VPC Service Controls extends support for etags in the service perimeter resources. For example, you can use the --etag flag with the gcloud CLI commands such as gcloud access-context-manager perimeters update and gcloud access-context-manager perimeters describe. This feature is generally available.

VPC Service Controls feature (Status: Preview): VPC Service Controls adds support for using groups of third-party identities in ingress and egress rules to allow access to resources protected by service perimeters. This feature is available in Preview.

For more information, see Configure identity groups and third-party identities in ingress and egress rules.

General availability support for the following integration:

• Vertex AI in Firebase

Preview stage support for the following integration:

• Audit Manager

Preview stage support for the following integration:

• Privileged Access Manager

Preview stage support for the following integration:

• Contact Center AI Platform

VPC Service Controls feature: VPC Service Controls supports using identity groups and third-party identities (only single identities) in ingress and egress rules to allow access to resources protected by service perimeters. This feature is available in Preview.

For more information, see Configure identity groups and third-party identities in ingress and egress rules. You can also learn an example of using identity groups and third-party identities in ingress and egress rules.

Preview stage support for the following integration:

• Commerce Org Governance API

VPC Service Controls feature: Support to programmatically retrieve the list of services that are supported by VPC Service Controls is generally available. Using this feature, you also can retrieve the list of methods and permissions supported by VPC Service Controls for a service.

• The following changes are made in the output of the gcloud access-context-manager supported-services list command:
  • The field name SUPPORT_STAGE is changed into SERVICE_SUPPORT_STAGE.
  • The status BETA is changed into PREVIEW in the SERVICE_SUPPORT_STAGE field.
  • A new status DEPRECATED is added in the SERVICE_SUPPORT_STAGE field.
• The field name supportStage is changed into serviceSupportStage in the output of the gcloud access-context-manager supported-services describe command.