You have defined central security controls in your Google Cloud environment. For a specific folder in your organization, you set an organizational policy to deny the assignment of external IP addresses to VMs. Two days later, you receive an alert that a new VM with an external IP address was created in that folder.

What is the most likely reason this alert was generated?