Search code examples
apigoogle-app-enginesslapigee

How to restrict external access to Google App Engine and only allow Apigee Edge?


I am fairly new to GCP and Apigee both. I currently have a Node.js application on App Engine that has one simple GET endpoint.

For my use case I want people to access the endpoint through an Apigee Edge proxy and make the App Engine endpoint not accessible to anybody else.

I’ve read that one-way or two-way SSL might be the solution, but I’m fairly new to this and was wondering if you you could provide me with some directions. Thank you greatly! 😃


Solution

  • Searching about it, it seems that using mTLS is the best option for you to secure your App Engine with Apigee - as per the Apigee Community on this post.

    I would recommend you to take a look at the mTLS documentation and you can check the documentation API Management Platform for more information about Apigee as well.

    Let me know if the information helped you!