Determine if “Define Allowed External IPs for VM Instances” constraint policy is enabled at the GCP organization level.
To reduce exposure to the internet, make sure that not all VM instances are allowed to use external IP addresses.
Ensure that “Define Allowed External IPs for VM Instances” constraint is enforced to allow you to define the VM instances that are allowed to use external IP addresses.