Serverless VPC Access

Module: Serverless VPC Access

Module flag: vpcaccess Enabled by default: yes

---

Overview

The Serverless VPC Access module lists VPC Access connectors. Connectors enable Cloud Run services, Cloud Functions, and App Engine to reach resources inside a VPC (e.g. Cloud SQL via private IP, Memorystore Redis, on-premises via VPN).

---

Enable This Module

GCP_PROJECT_ID=my-project ./aura-tracker-gcp --modules vpcaccess

---

Required GCP APIs

gcloud services enable vpcaccess.googleapis.com

---

Required IAM Permissions

Role	Tools that need it
roles/vpcaccess.viewer	All tools

---

Tools

gcp_vpc_list_connectors

Lists Serverless VPC Access connectors in the project.

Parameters:

Name	Required	Description
project_id	yes	GCP project ID
region	no	Filter by region; - or omit for all regions

Returns: Connector name, region, network, IP CIDR range, state (READY / CREATING / DELETING / ERROR), min/max instances, throughput.

---

Prompt Examples

Inventory

"List all VPC Access connectors in project my-project."

Unused connector check

"Which VPC Access connectors in project my-project are not referenced by any Cloud Run service?"

Network topology

"Show me which VPCs the VPC Access connectors in project my-project are attached to."

---

Related Modules

Module flag	Why you'd combine it
cloudrun	Find Cloud Run services that use these connectors
functions	Find Cloud Functions that use these connectors
networking	Inspect the VPC networks and subnets the connectors are on
cloudsql	Private IP Cloud SQL instances typically require a VPC connector