GCP | Limit Access to App Engine Hosted Site

Mohammed Waseem
3 min readJul 26, 2023

What is GCP?

Google Cloud Platform

What are some other Similar Tools?

  1. Microsoft Azure
  2. Amazon Web Services

What is the App Engine tool in GCP?

A managed platform to host your applications, which can be developed using many frameworks.

Now, when you host your application in the app engine, you get a URL that can be accessed through the internet.

It looks like:

https://………………………..r.appspot.com/

I'm going to show how you can limit URL access to certain users of your choice using IAP.

Get into your console:

https://console.cloud.google.com

Find Identity-Aware Proxy in left panel

Click “go to identity-aware proxy”

Click the toggle option to enable IAP on the correct site. The site link is shown in Published column

Now click the check box on the list, and you will get a panel on the right.

Click on Add Principal. and you can see the same as below image👇

You get these options of users

Now add the user's Gmail account that will need access to the site URL, and grant the role: IAP-secured Web App User and click SAVE

Now open the URL in Google and try signing in with an account that has access and one that does not.

NOTE: It take approximately 5–10 minutes for the access to be implemented.

--

--