Protect web with Identity Aware Proxy
IAP how it works
source: https://cloud.google.com/iap/docs/concepts-overview#how_iap_works
IAP benefits
- Control access to app on Google Cloud
- Verify user identity and grant/deny access to app
- Access control in a central place
- Work from untrusted networks without the use of a VPN
- Implement a zero-trust access model
- Combine with Load Balancer and WAF (firewall) for added security
https://cloud.google.com/iap
Web app benefits
- avoid managing user authentication and session management
- receive information about the authenticated users, including the email address and a persistent identifier to the app in the form of new HTTP headers
- lots of security out of the box
Web app architecture
Tutorials
- auth(e) python with IAP = https://cloud.google.com/python/docs/getting-started/authenticate-users
- IAP and App Engine = https://cloud.google.com/iap/docs/app-engine-quickstart
-
multiple dbs on django = https://docs.djangoproject.com/en/3.2/topics/db/multi-db/