Identity-Aware Proxy
Identity-Aware Proxy (IAP) is a security service that controls access to applications and resources based on user identity and context, rather than just network location. It acts as a gatekeeper, intercepting requests to web apps, virtual machines, or APIs, and enforces authentication and authorization policies before allowing access. This enables zero-trust security models by ensuring only verified users can reach sensitive resources, regardless of their network environment.
Developers should use IAP when building or securing cloud-based applications that require granular access control without exposing them directly to the public internet. It is particularly valuable for protecting internal tools, admin panels, or legacy systems that lack built-in authentication, as it centralizes security enforcement and reduces the attack surface. For example, in Google Cloud, IAP can secure App Engine, Compute Engine, or GKE services by integrating with identity providers like Google Workspace or third-party SAML/OpenID Connect services.