> For the complete documentation index, see [llms.txt](https://docs.forestall.io/forestall/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.forestall.io/forestall/unified-identities/gcp-identities/vms.md).

# VMs

The **`Virtual Machines`** page provides a list of enumerated Compute Engine VM instances in GCP.

<figure><img src="https://3408039743-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FObpV44hoVkNmo5bFuVVL%2Fuploads%2Fgit-blob-c176bed3723b7cb844c01ee8f68456407436df95%2FGCPVMListPage.png?alt=media" alt=""><figcaption><p>VMs</p></figcaption></figure>

### Virtual Machines Details

The Details page includes the **`Details`**, **`Security`**, and **`Service Accounts`** tabs, and a **Graph »** button for enhanced navigation and analysis. A badge (e.g., **Default SA**) may appear in the header when the VM uses the default Compute Engine service account.

{% hint style="info" %}
You can analyze objects in the `Graph module` by clicking the **`Graph »`** button on the upper right side.
{% endhint %}

<figure><img src="https://3408039743-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FObpV44hoVkNmo5bFuVVL%2Fuploads%2Fgit-blob-7e09ae9b03fab744eea9f6f32db5ea3d1251403e%2FGCPVMDetailPage.png?alt=media" alt="GCP VM Detail Page"><figcaption><p>GCP VM Details</p></figcaption></figure>

The Details tab contains attributes about the GCP Virtual Machine. The page also includes an **Issues** panel that lists any security findings related to the VM, along with a Risk score and Exposure Point.

### Information

| Attribute          | Description                                                                                          |
| ------------------ | ---------------------------------------------------------------------------------------------------- |
| Name               | The internal name of the VM instance.                                                                |
| Instance ID        | The unique numeric identifier of the VM instance.                                                    |
| Display Name       | The human-readable name of the VM.                                                                   |
| Status             | The current power/lifecycle status of the VM (e.g., `TERMINATED`).                                   |
| Machine Type       | The machine type/size of the VM (e.g., `e2-micro`).                                                  |
| Zone               | The GCP zone the VM is deployed in (e.g., `europe-north2-a`).                                        |
| Full Resource Name | The fully-qualified resource name, including the API service (e.g., `//compute.googleapis.com/...`). |
| Update Time        | The timestamp of the last update to the VM.                                                          |
| Description        | A free-text description of the VM, if configured.                                                    |
| Parent Project     | A link to the parent project the VM belongs to.                                                      |

### **Security**

Displays security-related configuration for the VM (e.g., OS Login, shielded VM settings).

### **Service Accounts**

Lists the service account(s) attached to the VM.

### **Issues**

Lists security findings associated with the VM (e.g., *OS Login Not Enabled for VM*, *VM Uses Default Service Account*, *Block Project-Wide SSH Keys Not Enabled for VM*), each tagged with relevant categories such as Privilege Escalation, Credential Security, or Least Privilege, and a severity rating (e.g., High, Medium).