CIS 4.6, https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/compute_instance#can_ip_forward should be false