By Ameet Jani, Product Manager
Many businesses are eager to move their internal applications to the cloud, but need to ensure their sensitive data is protected when doing so. While enterprise IT teams are skilled at building innovative apps, they may not be experts on identity and security models for cloud-hosted applications.
That’s why we developed Cloud Identity-Aware Proxy, which is now generally available. Cloud IAP provides granular access controls and is easy to use so that companies can quickly and more securely host their internal apps in the cloud.
Here’s an example of how it works. Say you’re a large consumer goods company with a global data science team that needs access to specific internal data. Your IT team might need to federate Active Directory users to an internal app to manage an ever-changing list of employees who need access. By moving these applications to Google Cloud Platform (GCP), admins can enable Cloud IAP and add groups to the access control lists, thereby making sure applications are only accessible to the users that need them. This means your enterprise IT team can spend its time doing what they do best — like building a world-class supply chain system — instead of focusing on complex security issues.
Here’s a little more on what Cloud IAP offers:
A zero trust security model for the cloud
Following the BeyondCorp security model that focuses on building zero trust networks, Cloud IAP shifts access controls from the network perimeter to individual users. This means you can evaluate all of an application’s access requests by taking into account who the user is and what they want to access, eliminating the need for setting up virtual private clouds and copying access control policies for each new application.
Better, more granular access controls
Using Cloud IAP for access control and auditing allows enterprises to ensure access is restricted to the right people. This makes it safer than ever to move your data to the cloud.
No more need for VPNs
With Cloud IAP, you can grant access to employees or vendors without worrying about unreliable VPNs that require client-side installs. Admins can now determine who should be able to access each application based on the app’s unique security considerations. Additionally, applications deployed behind Cloud IAP require no code changes — you can simply deploy and turn on Cloud IAP, and your application is protected.
Interested in giving it a try? Check out the step-by-step instructions on how to get started here.
We hope Cloud IAP makes it possible for more organizations to spend less time worrying about security and more time on the things that matter — like developing apps that grow their business.
Quelle: Google Cloud Platform
Published by