Networking and security

A major concern for many developers when evaluating App Engine (or any platform) is application security. Developers need control over which services are available to which consumers. Minimizing access where possible reduces a system's overall attack surface. App Engine provides a number of mechanisms for restricting access to services. Many of these methods can be combined to quickly build a powerful security layer on top of your App Engine services.

The App Engine firewall

Perhaps the simplest method to secure App Engine services is through the use of firewall rules. The App Engine Firewall allows developers to define up to 1,000 unique firewall rules over which IP address ranges may or may not access services for a given application. These firewall rules may be configured within the Google Cloud Console under Navigation menu | App Engine | Firewall rules. Each rule definition includes the following components:

• Priority: A numerical value (1-2,147,483,646) denoting...