Description
A Persistent Disk inventory helps identify block-storage attachments and ownership. The existence of a disk is not itself a vulnerability.
Potential impact
Unlisted disks may be missed in snapshot reviews or continue to incur costs after they are no longer needed.
Remediation
Record each disk’s owner and attached workloads, then check snapshots, encryption keys, attachment status, and retention needs.
Examples
The examples add service and environment labels without changing encryption or snapshot settings.
Before
hcl
resource "google_compute_disk" "data" {
name = "data-disk"
type = "pd-ssd"
zone = "us-central1-a"
}
After
hcl
resource "google_compute_disk" "data" {
name = "data-disk"
type = "pd-ssd"
zone = "us-central1-a"
labels = {
service = "billing"
env = "prod"
}
}