Google Cloud IAP

The Google Cloud Identity-Aware Proxy (IAP) provides a free-to-use authentication and authorization layer for services running on Google Cloud. IAP integrates with identity management services to provide simple yet powerful methods for restricting access to a set of individuals. A common use case for IAP is to only allow access to services for members of an enterprise team in what is known as the BeyondCorp enterprise security model, which helps alleviate the need for a corporate VPN. The IAP applies to services at the project level, making it a good solution for App Engine applications that are internal-use only.