When using Google Cloud, default configurations and policies are enabled by default that might lead to an increase in the attack surface. These configurations include, and not limited to, identity and access management (IAM) and network setup.