Action: GCP > Compute Engine > Instance > Delete External IP Addresses

Remove the external IP addresses from GCP > Compute Engine > Instance by deleting the access config of every network interface that has one — the same remediation the Instance > External IP Addresses control applies under enforcement. The instance keeps its internal IPs and stays running, but is no longer reachable from the internet; an ephemeral external IP is released and cannot be recovered.