Context-Aware Access

Related topics

• Context-Aware Access is part of Chrome Enterprise Premium From the official documentation: “Defend against real-time phishing and malware, prevent data exfiltration with granular Data Loss Prevention (DLP) policies, and enforce Context-Aware Access to any app (SaaS, cloud, or on-prem) from any device, directly in Chrome.”
• Context-Aware Access depends on Identity-Aware Proxy From the official documentation: “**Caution:** To enable context-aware access control for workstations, you must first enable [IAP](/workstations/docs/enable-iap) on your workstation cluster.”
• Context-Aware Access works with Identity-Aware Proxy From the official documentation: “To help secure agents accessing the Agent Gateway, Context-Aware Access and IAP enforce that agents use [mTLS](#mtls) by verifying certificate-based token binding.”
• Identity-Aware Proxy configures Context-Aware Access From the official documentation: “Set up IAP to grant conditional access based on request context.”
• VPC Service Controls is part of Context-Aware Access From the official documentation: “This feature builds on top of the existing Context-aware access suite (Endpoint Verification, Access Context Manager, and VPC Service Controls) and ensures that only users on trusted devices with a Google-generated certificate are able to access Google Cloud APIs.”
• Cloud Run works with Cloud Service Mesh From the official documentation: “This section shows you how to troubleshoot common errors with Cloud Service Mesh and Cloud Run.”
• Cloud Service Mesh works with VPC Service Controls From the official documentation: “You can now use VPC Service Controls with Cloud Service Mesh.”
• Identity-Aware Proxy secures Cloud Run From the official documentation: “IAP provides a central authorization layer for HTTPS applications deployed to Cloud Run.”
• Cloud Audit Logs works with VPC Service Controls From the official documentation: “VPC Service Controls integrate with Cloud Audit Logs to monitor access to the control plane.”
• Cloud Service Mesh works with Identity-Aware Proxy From the official documentation: “Integrate Identity-Aware Proxy with Cloud Service Mesh”
• VPC Service Controls secures Cloud Service Mesh From the official documentation: “[VPC and VPC Service Controls](/vpc-service-controls) protect the mesh edge through the private network access controls.”
• Cloud Run works with Identity and Access Management From the official documentation: “For example, a remote backend deployed on Cloud Run can use Identity and Access Management (IAM) to:”
• Cloud Run works with Workflows From the official documentation: “Use Workflows with Cloud Run and Cloud Run functions tutorial”
• Identity and Access Management works with Identity-Aware Proxy From the official documentation: “IAP re-checks Identity and Access Management (IAM) authorization for all requests during valid sessions.”
• Cloud Audit Logs works with Identity-Aware Proxy From the official documentation: “Enabling Cloud Audit Logs](/iap/docs/audit-log-howto) for your IAP-secured project lets you see authorized and unauthorized access requests.”
• Cloud Service Mesh works with Compute Engine From the official documentation: “Cloud Service Mesh supports a variety of infrastructures (GKE/Kubernetes, Compute Engine) and environments (on-premises, other clouds).”
• Compute Engine works with Identity-Aware Proxy From the official documentation: “Set up a Compute Engine instance with IAP.”
• Identity and Access Management secures Compute Engine From the official documentation: “Compute Engine uses Identity and Access Management (IAM) for authorization.”
• Identity and Access Management works with VPC Service Controls From the official documentation: “VPC Service Controls perimeters and Identity and Access Management (IAM) roles work together.”
• Identity-Aware Proxy works with Workflows From the official documentation: “You can use Workflows to invoke an endpoint for which Identity-Aware Proxy (IAP) has been enabled.”
• VPC Service Controls secures Compute Engine From the official documentation: “To further protect your Compute Engine resources, you can protect them using [VPC Service Controls](/vpc-service-controls/docs/overview).”
• VPC Service Controls works with Workflows From the official documentation: “You can use VPC Service Controls with Workflows to help protect your services.”
• Chrome Enterprise Premium depends on Identity-Aware Proxy From the official documentation: “IAP is the base of Chrome Enterprise Premium, letting you grant access to your HTTPS apps and resources.”
• Cloud Audit Logs works with Cloud Run From the official documentation: “The sample code shows you how to read Cloud Storage events using Cloud Audit Logs in a service deployed to Cloud Run.”
• Cloud Audit Logs works with Cloud Service Mesh From the official documentation: “This document describes the audit logs created by Cloud Service Mesh as part of [Cloud Audit Logs](/logging/docs/audit).”
• Cloud Audit Logs secures Cloud Service Mesh From the official documentation: “Cloud Audit Logs audits mesh operations.”
• Cloud Audit Logs works with Workflows From the official documentation: “Cloud Audit Logs for Workflows let you track administrative and data-access operations on your resources to help you monitor access and configuration changes.”
• Cloud Run works with Compute Engine From the official documentation: “This lets Cloud Run clients use this backend service route to send requests directly to Compute Engine instances.”
• Cloud Run works with Identity-Aware Proxy From the official documentation: “Enable IAP on the Cloud Run service.”
• Cloud Service Mesh works with Identity and Access Management From the official documentation: “For information about how and which permissions are evaluated for each method, see the Identity and Access Management documentation for Cloud Service Mesh.”
• Identity and Access Management secures Cloud Audit Logs From the official documentation: “IAM permissions and roles determine your ability to access audit logs data in the [Logging API](/logging/docs/reference/v2/rest), the [Logs Explorer](/logging/docs/view/logs-explorer-interface), and the [Google Cloud CLI](/logging/docs/reference/tools/gcloud-logging).”
• Identity and Access Management secures Cloud Run From the official documentation: “Cloud Run services are secured by IAM.”
• Identity and Access Management secures Cloud Service Mesh From the official documentation: “Access to Cloud Service Mesh in the Google Cloud console is controlled by [Identity and Access Management (IAM)](/iam/docs/overview).”
• Identity and Access Management works with Workflows From the official documentation: “Workflows manages access and authentication using Identity and Access Management (IAM) roles and permissions.”
• Identity and Access Management secures Workflows From the official documentation: “Workflows uses Identity and Access Management (IAM) to control which authenticated users and service accounts can perform which actions.”
• Identity-Aware Proxy is part of Chrome Enterprise Premium From the official documentation: “IAP is a building block of [Chrome Enterprise Premium](/chrome-enterprise-premium/docs), an enterprise security solution that enables employees to work from untrusted networks without using a VPN.”
• Identity-Aware Proxy secures Cloud Service Mesh From the official documentation: “The IAP integration with Cloud Service Mesh enables you to safely access services based on Google's [BeyondCorp principles](/beyondcorp).”
• Identity-Aware Proxy secures Compute Engine From the official documentation: “Securing Compute Engine apps Enable IAP for Compute Engine apps.”
• VPC Service Controls secures Cloud Run From the official documentation: “To learn more about the security features that Cloud Run provides, use the following resources: - [Access control with Identity and Access Management (IAM)](/run/docs/securing/managing-access) - [Per-service identity](/run/docs/securing/service-identity) - [Google Cloud Armor…”