Check ID: gemini_api_disabled
Provider: GCP
Service: gemini
Severity: MEDIUM
Categories: gen-ai, identity-access
Resource type: serviceusage.googleapis.com/Service

​
What this check verifies

The Gemini API (a.k.a. Generative Language API, generativelanguage.googleapis.com) should not be used. It does not adhere to GCP’s general security & compliance standards.

​
Risk

The API does not support GCP IAM for authentication, impacting confidentiality of uploaded files and cached content. It provides no SLA, reducing availability guarantees. It is not covered by compliance certifications such as ISO 27001, SOC 2, C5, and HIPAA, which can diminish your compliance posture.

​
Recommendation

Do not use the Gemini API. Instead, consider using Gemini through the Vertex AI API, which does not have the described issues.

​
Remediation

gcloud services disable generativelanguage.googleapis.com

​
References

​
Where this check fires

This check runs on every scheduled scan against your GCP account. Findings appear at Cloud Security → Findings filterable by Check ID = gemini_api_disabled. To re-evaluate after a fix, hit Run now on the account’s schedule under Cloud Security → Schedules — the next scan re-checks this control and marks the finding fixed or keeps it persistent.
← Back to GCP checks