A hardened Compute Engine VM on Debian 12 with Shielded VM (Secure Boot, vTPM, integrity monitoring), OS Login for IAM-managed SSH, no external IP by default, and deletion protection on.
This module was applied to a real Google Cloud account, verified, and destroyed on 2026-06-30 - not just terraform validated.
Check it yourself, no account needed:
curl -s https://www.iac-bazaar.com/api/artifacts/gcp-compute-instance/verification
The receipt names every check that ran, when it ran, and the SHA-256 of the archive it describes. Full detail: www.iac-bazaar.com/catalog/gcp-compute-instance
module "compute_instance" {
source = "registry.terraform.io/CyberCoreSystems/compute-instance/google"
version = "~> 1.0"
# See variables.tf for the full input contract.
}Every module we publish goes through the same checks before release:
| check | what it means |
|---|---|
tofu validate + tflint |
it parses and lints clean |
checkov |
scanned for insecure defaults |
| live test | really applied to a cloud account, outputs verified, then destroyed |
That last row is the one most module catalogues skip. A module that has never been applied has never been proven.
google >= 7.0, < 8.0
This is one of 673 Terraform modules across 19 cloud platforms on IaC Bazaar, 113 of them live-tested: AWS, Azure, GCP, Oracle OCI, Cloudflare, Akamai, DigitalOcean, Linode, Hetzner, Vultr, Scaleway, Alibaba, IBM, UpCloud, Civo, Exoscale, OVH, Tencent and Huawei.
Browse the full catalogue at www.iac-bazaar.com, including production landing zones for AWS, Azure and GCP that have each been live-tested as a single composed apply.
- Terraform module 1.0.0, live-tested on IaC Bazaar: Compute Engine VM (Shielded, private)
- How verification works: https://www.iac-bazaar.com/verified
See LICENSE.