domains / families / security / configuring-identity-aware-proxy-with-google-iap

configuring-identity-aware-proxy-with-google-iap

separate

'Configures Google Cloud Identity-Aware Proxy (IAP) via gcloud to enforce

When to use

• When protecting Google Cloud applications (App Engine, Cloud Run, GKE, Compute Engine) with identity-based access
• When implementing context-aware access requiring device posture and location verification
• When providing secure access to internal tools without VPN or public IP exposure
• When needing per-request authentication and authorization for web applications and TCP services
• When configuring programmatic access to IAP-protected resources using service accounts

When not to use

• non-HTTP applications that cannot be placed behind an HTTPS load balancer
• public-facing applications that need unauthenticated access
• applications that handle their own authentication where IAP would conflict with existing auth flows

Skill page

Source