Something like CloudArmor from GCP to configure for LB / VPCs.

Its a all in one Service under GCP for securing and managing connections from and to the GCP

It works a WAF with the OWASP Risk rules, Logging and so on.

link for furter informations: https://cloud.google.com/armor#section-6