Is it possible to protect an App Engine application with IAP while having a few public URLs?

1
votes

I have an Google App Engine Standard (Python 3) application that I've secured behind Google IAP. This works great! But now I need a handful of web hook urls to be public, so other services can hit them, like SendGrid. Is there a solution to this that I am not seeing?

1
google-app-enginegoogle-app-engine-pythongoogle-iap
It seems it is not available to designate a "public" URL in an IAP-protected App Engine app now and there is no intent on supporting the feature. For App Engine apps, individual versions and services can have different access policies applied. If you have already set IAP as per this document, you can separate your App Engine app in different services and provide granular access. Also check out this link for more information about managing access to resources. – Ahmad P

1 Answers

2
votes

As Ahmad suggested, the solution is to have a separate App Engine service that is publicly accessible.