How to Secure App Engine Using Identity-Aware Proxy

Identity-aware proxy lets you establish a central authorization layer for applications accessed by HTTPS, so you can use an application-level access control model instead of relying on network-level firewalls.  IAP policies scale across your organization. You can define access policies centrally and apply them to all your applications and resources. When you assign a dedicated team to create and enforce policies, you protect your project from incorrect policy definition or implementation in any application.  When to use IAP?  Use IAP when you want to enforce access control policies for applications and resources. IAP works with signed headers or the App Engine standard environment Users API to secure your app.   With IAP, you can set up group-based application access: a resource could be accessible for employees and inaccessible for contractors, or only accessible to a specific department.  How IAP works?  When an application or resource is protected by IAP, it can only be accessed through the proxy by members, also known as users, who have the correct Cloud Identity and Access Management role.  When you grant user access to an application or resource by IAP, they are subject to the fine-grained access controls implemented by the product in use without requiring a VPN.   When a user tries to access an IAP-secured resource, IAP performs authentication and authorization checks. 

Liked what you read !

Please leave a Feedback

0 0 votes
Article Rating
guest
0 Comments
Inline Feedbacks
View all comments

Related articles you may would like to read

How can organizations do End-of-the-year VDI Auditing & Planning?
0
Would love your thoughts, please comment.x
()
x
Proposals

Know the specific resource requirement for completing a specific project with us.

Blog

Keep yourself updated with the latest updates about Cloud technology, our latest offerings, security trends and much more.

Webinar

Gain insights into latest aspects of cloud productivity, security, advanced technologies and more via our Virtual events.

ISmile Technologies delivers business-specific Cloud Solutions and Managed IT Services across all major platforms maximizing your competitive advantage at an unparalleled value.

Request a Consultation