How to authenticate google cloud functions for access to secure app engine endpoints -
google cloud platform has introduced identity aware proxy protecting app engine flexible environment instances public access.
however, not entirely clear if can or should used google cloud functions accessing gae hosted api endpoints.
the documentation (with python , java examples) indicates iap authentication workflow consisting of 1) generating jwt token, 2) creating openid token, 3) submitting requests google app engine authorization: bearer token
header.
this seems quite convoluted running cloud functions if authorisation has happen each time function called.
is there way google cloud functions access secured gae endpoints?
as discussed in doc, can authenticate google cloud platform (gcp) api using:
1- service accounts (preferred method) - use of google account associated gcp project, opposed specific user.
2- user accounts - used when app needs access resources on behalf of end user.
3- api keys - used when calling apis don’t need access private data.
Comments
Post a Comment