��GCP with IAP SECURITY

Presentation By:

Anjali Shukla

IAM in GCP

What is IAP(Identity Aware Proxy)

• It is a google managed security service for authentication and authorization.
• It provides us to have fine grained access control over a web application or resources deployed in Google cloud.
• It sits between user and web application and verifies the user’s identity to check their permission on application.

IAP in Terms of Security | App Engine

Ref: https://cloud.google.com/iap/docs/concepts-overview

Why do we need IAP

• Securing the application using Signed jwt Headers
• Application layer access control
• Reduce dependency on Network level controls. Eg: VPN
• Easy integration with GCP Services
• Direct access to Employees & Contractors.

Demo

Thank You !!