Get Started with Google Cloud — selected guide
Securing App Engine apps with IAP
Twelve practical entries spanning docs, networking, storage, IAM, cost, data, workflows, and APIs
Twelve 2018–2022 introductions use small tasks to explain networking, persistent storage, access control, BigQuery queries and cost limits, object versions, sensitive-data inspection, workflow orchestration, and speech transcription.
Google Cloud Tech 5 of 12
In this collection Browse 12 summaries 5 of 12
Identity-Aware Proxy (IAP) restricts entry to an application according to who is signed in. This walkthrough protects an App Engine sample, then compares an authorized account's successful visit with another account's access-denied response. 00:01–01:43(opens in a new tab)
Key Points Covered
- The presenter deploys a sample with the gcloud CLI and first confirms that the unprotected app responds. 00:01–01:06(opens in a new tab)
- The presenter grants a person or group the IAP-secured Web App User role, then enables IAP for the application. The role specifies who is allowed through that access check. 00:01–01:43(opens in a new tab)
- The authorized account still sees the welcome page; another account receives an access-denied error. Testing both accounts demonstrates that the app is reachable but no longer equally accessible to everyone. 01:06–01:43(opens in a new tab)
Full video: https://www.youtube.com/watch?v=_tw3md6k8aw(opens in a new tab)