Skip to content

Networking

Anna edited this page Jun 25, 2026 · 1 revision

Module: Networking

Module flag: networking Enabled by default: yes


Overview

The Networking module provides visibility into GCP network infrastructure: load balancers, URL maps, Network Endpoint Groups (NEGs), API Gateways, VPC networks, subnets, and Private Service Connect consumer endpoints.


Enable This Module

GCP_PROJECT_ID=my-project ./aura-tracker-gcp --modules networking

Required GCP APIs

gcloud services enable compute.googleapis.com apigateway.googleapis.com

Required IAM Permissions

Role Tools that need it
roles/compute.networkViewer All Compute networking tools
roles/apigateway.viewer gcp_apigateway_list

Tools

gcp_compute_list_loadbalancers

Lists global and regional forwarding rules (load balancers).

Parameters:

Name Required Description
project_id yes GCP project ID
region no Filter by region; omit for global + all regions

Returns: Forwarding rule name, IP address, protocol, ports, load balancing scheme, target, region.


gcp_compute_list_url_maps

Lists URL maps (routing rules for HTTP(S) load balancers).

Parameters:

Name Required Description
project_id yes GCP project ID
region no Filter by region; omit for global + all regions

Returns: URL map name, default backend service, host rules (host → path matchers), path matchers.


gcp_compute_list_negs

Lists Network Endpoint Groups.

Parameters:

Name Required Description
project_id yes GCP project ID
region no Filter by region

Returns: NEG name, type (SERVERLESS / GCE_VM_IP_PORT / INTERNET / PRIVATE_SERVICE_CONNECT), size, region, linked Cloud Run service (for SERVERLESS NEGs).


gcp_apigateway_list

Lists API Gateway instances.

Parameters:

Name Required Description
project_id yes GCP project ID

Returns: Gateway name, state (RUNNING / CREATING / FAILED), API config ID, hostname, labels.


gcp_vpc_list_networks

Lists VPC networks in the project.

Parameters:

Name Required Description
project_id yes GCP project ID

Returns: Network name, auto-create subnets mode, subnet count, peering count, routing mode, labels.


gcp_vpc_list_subnets

Lists subnets across regions.

Parameters:

Name Required Description
project_id yes GCP project ID
network no Filter to subnets in a specific VPC
region no Filter by region

Returns: Subnet name, region, network, IP CIDR range, secondary ranges, private Google access, flow logs enabled.


gcp_psc_list_endpoints

Lists Private Service Connect consumer endpoints.

Parameters:

Name Required Description
project_id yes GCP project ID

Returns: Endpoint name, target service, IP address, network, subnetwork, connection status.


Prompt Examples

Load balancer inventory

"List all load balancers in project my-project and their IP addresses."

NEG audit

"Which Cloud Run services in project my-project have a SERVERLESS NEG configured?"

Subnet IP space check

"Show me all subnets in the default VPC of project my-project and their CIDR ranges."

Private connectivity

"List all Private Service Connect endpoints in project my-project."


Related Modules

Module flag Why you'd combine it
cloudrun Match SERVERLESS NEGs to their Cloud Run services
gke Find GKE cluster network and subnetwork configuration
vpcaccess Find Serverless VPC Access connectors on the same networks
archgraph Include networking in the full architecture graph

Clone this wiki locally