Identity-Aware Proxy

gcp Bastion hostgoogle-identity-aware-proxy

Identity and context checks in front of applications, SSH and RDP.

Provider: gcp
Kind: Bastion host
Category: Security
Official docs: https://cloud.google.com/iap/docs/concepts-overview
Also known as: IAP

Properties · 2 set by this component

property	type	values	required	kind default	this component
accessType · component property	enum	web-app \| tcp-forwarding	no	—	inherited
contextAwareAccess · component property	boolean	—	no	false	inherited
justInTimeAccess	boolean	—	no	false	inherited
managed	boolean	—	no	false	▸ true
mfaRequired	boolean	—	no	—	inherited
oauthCredentialsAutoCreated · component property	boolean	—	no	true	inherited
protocols	enum	ssh \| rdp \| both	no	—	▸ both
publicIp	boolean	—	no	—	inherited
sessionRecording	boolean	—	no	—	inherited

Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.

Use it in a design

nodes:
  - { id: "identity-aware-proxy", component: "google-identity-aware-proxy" }

Other Bastion host products · 17

Bastionhostalibaba-bastionhostalibabacloudbastion-host EC2 Instance Connect Endpointaws-ec2-instance-connect-endpointawsbastion-host AWS Systems Manager Session Manageraws-ssm-session-managerawsbastion-host AWS Verified Accessaws-verified-accessawsbastion-host Azure Bastionazure-bastionazurebastion-host Microsoft Entra Private Accessazure-entra-private-accessazurebastion-host Cloudflare Accesscloudflare-accesscloudflarebastion-host Cloudflare One RDPcloudflare-rdpcloudflarebastion-host Generic bastion hostbastion-hostbastion-host HashiCorp Boundaryboundarybastion-host ContainerSSHcontainersshbastion-host Paralusparalusbastion-host Pomeriumpomeriumbastion-host OpenSSH jump hostssh-jump-hostbastion-host Teleportteleportbastion-host Chrome Enterprise Premiumgoogle-chrome-enterprise-premiumgcpbastion-host Bastionoci-bastionocibastion-host

Source

1# yaml-language-server: $schema=../../schema/component.schema.json
2# Identity-Aware Proxy: a global Google Cloud service that authorises requests to applications and forwards SSH and RDP to VMs without a VPN.
3# Defaults from "IAP overview": IAP is a managed global service that creates OAuth 2.0 credentials automatically and applies authentication and authorisation before a request reaches the application.
4schemaVersion: "1"
5type: "component"
6id: "google-identity-aware-proxy"
7kind: "bastion-host"
8provider: "gcp"
9docs: "https://cloud.google.com/iap/docs/concepts-overview"
10aliases: ["IAP"]
11defaults:
12  managed: true
13  protocols: "both"
14properties:
15  accessType:
16    type: "enum"
17    values: ["web-app", "tcp-forwarding"]
18  contextAwareAccess:
19    type: "boolean"
20    default: false
21  oauthCredentialsAutoCreated:
22    type: "boolean"
23    default: true

The same page as markdown, for an agent: /catalogue/components/google-identity-aware-proxy.md