We have found that {GcpVmInstance} is publicly accessible and has port 3389 (RDP) open. Access to this port could result in unauthorized access to the VM instance.
Recommended Mitigation
Make sure that public access through port 3389 (RDP) is restricted.