In the Google Cloud Platform Console, the Compute Engine API metrics indicate that on December 12, an anonymous-credentialed someone started making automated "list" API calls for resources on my GCP account.
Why are people allowed to anonymously hit resource "list" APIs on my GCP account? Is there a way to restrict them? Is there a way to find out who is making these calls?