So it looks similar to AWS Systems Manager, but only for Windows and Linux in GCP. In their Youtube video at https://www.youtube.com/watch?v=LeaA66WUaaM&feature=youtu.be they're saying however you're doing "patch compliance" whether it's orchestration or by-hand it is still essentially being done incrementally by hand possibly one package at a time. So instead of using Terraform/Ansible/Vagrant to connect to GCP you can use their VM manager to perform bulk updating of OS packages. Their VM manager relies on agent software to connect directly to your VM to issue system commands via your OS native console.