title: Is GCP Pub/Sub supported by VPC Service Control?
body: <p>Google APIs and Services that are supported by VPC Service Controls based on Supported products and limitations available <a href="https://cloud.google.com/vpc-service-controls/docs/supported-products" rel="nofollow noreferrer">here</a> includes Pub/Sub, Cloud Monitoring and Cloud Logging.</p>
  
  <p>However a related documentation available here about configuring Private Google Access for on-premises hosts available <a href="https://cloud.google.com/vpc/docs/configure-private-google-access-hybrid" rel="nofollow noreferrer">here</a> has Pub/Sub, Monitoring and Logging listed under <em>Reached using Private Google Access</em> <strong><em>but not secured by VPC Service Controls</em></strong>.</p>
  
  <p>I am confused reading this. Can Pub/Sub access (as well as Monitoring and Logging) be secured by VPC Service Controls or not?</p>
  
  <p><strong>Edit</strong>
  Uploaded image<a href="https://i.stack.imgur.com/HIxIw.gif" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/HIxIw.gif" alt="enter image description here"></a> of new VPC Service Control creation screen that allows PubSub to be selected as one of the services to be restricted.</p>