Using Identity-Aware Proxy on App Engine

Cloud IAP verifies the identity of the person and controls access to our cloud applications hosted on GCP. Cloud IAP can be used with the App Engine and the Compute Engine. In our recipe, we'll use the application hosted on App Engine in our previous recipe and enable Cloud IAP. We'll see how, without any login page for the user, we are able to provide access to the application.

Getting ready

The following are the initial setup verification steps, which are required before the recipe can be executed:

1. Create or select a GCP project
2. Enable billing and enable the default APIs (some APIs like BigQuery, storage, monitoring, and a few others are enabled automatically)

How to do it...

With the lets-be-bad-guys application installed in our App Engine flexible environment, we will enable the IAP for this application:

1. Navigate to the IAM & Admin section and to the submenu Identity-Aware Proxy. You'll be able to see our App Engine application listed:

2. Configure...