Ensure that Virtual Machines instances have OS logic feature enabled and configured with Two-Factor Authentication.
Enable OS login Two-Factor Authentication (2FA) to add an additional security layer to your VM instances. The risk of your VM instances getting attcked is reduced significantly if 2FA is enabled.
Set enable-oslogin-2fa to true in custom metadata for the instance.