Google iconGoogleSep 15, 2026 ~1 min source read

Introducing new session management tools with native, granular controls

Google Cloud session management provides flexible options for setting up session controls based on your organization's security policy needs. To help you improve your security posture and mitigate credential theft and account takeover (ATO) risks, we have rolled out a 16-hour default session length for Google Cloud customers.

Introducing new session management tools with native, granular controls

Share this story

Send the public story page.

Useful takeaways from this story.

Google Cloud session management provides flexible options for setting up session controls based on your organization's security policy needs.

To help you improve your security posture and mitigate credential theft and account takeover (ATO) risks, we have rolled out a 16-hour default session length for Google Cloud customers.

We've now completed extending this security standard to all customers who had not already self-configured session lengths, but today's cloud environments require even more precision.

Building the complete brief

The page is ready to read now. The fuller skim-friendly version will appear here automatically.

The useful part

Google Cloud session management provides flexible options for setting up session controls based on your organization's security policy needs. To help you improve your security posture and mitigate credential theft and account takeover (ATO) risks, we have rolled out a 16-hour default session length for Google Cloud customers. We've now completed extending this security standard to all customers who had not already self-configured session lengths, but today's cloud environments require even more precision.

How it works

  • This update gives administrators more flexibility, better automation, and a more natural security workflow.
  • To support DevSecOps workflows, the Session Controls policy configuration is no longer limited to manual UI configuration.
  • Terraform, gcloud, and API support Modern infrastructure is managed as code.

Details worth keeping

Integrates session controls directly into your infrastructure manifests.

Keep reading in the app

Open the app view to save this story, compare related coverage, and continue from the same source.

Open in app