disabled-kms-key Disabled KMS key versions still billing (core) empty-vpc-network VPC networks with nothing running in them (core) gke-idle-cluster GKE clusters running no nodes (gke) idle-cloud-nat Cloud NAT gateways serving no instances (core) idle-filestore Filestore instances nothing can mount (core) idle-forwarding-rule Load balancers with no backends (core) orphaned-snapshot Snapshots of deleted disks (core) stale-artifact-repository Artifact Registry repositories with no recent pushes (core) stale-secret Secrets nothing has updated in 90 days (core) stopped-instance Stopped instances still paying for disks (core) stopped-sql-instance Stopped Cloud SQL instances still paying for storage (core) unattached-disk Unattached Persistent Disks (core) unbounded-log-bucket Log buckets retaining logs indefinitely (core) unmanaged-gcs-bucket Versioned buckets with no lifecycle rule (core) unused-dns-zone Cloud DNS zones publishing nothing (core) unused-firewall-rule Firewall rules matching nothing (core) unused-image Custom images nothing boots from (core) unused-static-ip Unused static IP addresses (core) unused-subnet Subnets reserving ranges nothing uses (core) unused-uptime-check Uptime checks monitoring deleted resources (core)