Never used GCP but you should take look CSF security stuff like port scan blocking, Login failure blocking etc… What are quite good functions to secure your server.
This is true, but it’s really conflicting with gcp, I’ll check the options I have and maybe use api integration. I’m migrating my structure to google cloud by being more robust and possibility of upgrade almost infinite.