VPC-SC scan (feature request)

[mcapts]

This is a feature request for having a scanner that checks VPC Service Controls to ensure the configuration is correct/appropriate.

Some basic checks like:

• only whitelisted services are included in the perimeter
• appropriate Access Levels are included in the perimeter
• only projects from our organization are included in the perimeter

It may make sense to have this scan work in conjunction with an Access Context Manager scan, since Access Levels and VPC-SC are tightly coupled (and their union defines the actual security controls on the organization).

[dekuhn]

@blueandgold @ryanismert Can you please review this feature request. I believe we need a high level 1 pager that describes the overall scanner behavior as to when to assert a match.

[dekuhn]

Draft 1 pager with details to scope this work: https://docs.google.com/document/d/14wYLG1IkLXUPf6t9txhdCFiVwXtDnVjN_8QOC9IPw_o/edit

[gkowalski-google]

Resolved by PR #238