Along this line, every Google Compute Engine VM instance comes with 2 “implied” rules: allow all egress and deny all ingress.