Vulnerability Scan Authorization for Google Compute

Question

What is the official and required process to perform our own independent vulnerability scans against virtual machines in the Google Compute Engine? These will be Penetration tests (our own) that will scan the public IP for open ports and report results back to us.

Microsoft Azure requires authorization and so does Amazon. Does Google?

Answer 1

No, Google does not need to be notified before you run a security scan on your Google Compute Engine projects. You will have to abide by Google Cloud Platform Acceptable Use Policy and the Terms of Service.

Please also be aware of Google's Vulnerability Rewards Program Rules.