Does this support programmatic access for APIs?

Yes, it provides implementation patterns and Python code snippets for service-to-service communication through IAP using service account tokens.

What is the primary benefit of using this Google IAP skill?

It allows you to enforce per-request identity verification for your cloud applications, effectively replacing legacy VPNs with a modern zero-trust security model.

Which Google Cloud services can be protected using this skill?

This skill provides configuration steps for App Engine, Cloud Run, Google Kubernetes Engine (GKE), and Compute Engine instances behind HTTPS load balancers.

Can I restrict access based on specific device requirements?

Yes, the skill includes guidance on creating Access Levels via Access Context Manager to require specific OS versions, encryption statuses, or corporate-managed device signatures.

How does this handle non-HTTP traffic like SSH?

It includes specific workflows for IAP TCP Forwarding, which allows you to tunnel SSH and RDP traffic through IAP, removing the need for bastion hosts or public IP addresses.

Google IAP Configuration

Name: Google IAP Configuration
Author: mukul975

bymukul975

•

4,121

•

云基础设施

Configures Google Cloud Identity-Aware Proxy (IAP) to enforce zero-trust security and identity-based access across GCP services.

This skill provides a comprehensive framework for implementing zero-trust security using Google Cloud Identity-Aware Proxy (IAP). It enables Claude to guide users through the end-to-end setup of per-request identity verification for App Engine, Cloud Run, GKE, and Compute Engine. It specifically focuses on replacing legacy VPNs with context-aware access policies that evaluate device posture, geographic location, and network conditions, while also providing implementation patterns for programmatic service-to-service authentication and secure TCP tunneling for SSH/RDP access.

主要功能

01Secure IAP TCP forwarding for SSH and RDP without public IP exposure

024,121 GitHub stars

03Security auditing setup via Cloud Audit Logs and custom logging metrics

04Context-aware policy configuration based on device posture and location

05Programmatic authentication patterns for service account access

06Zero-trust access enforcement for GCP native services and backend load balancers

使用场景

01Securing internal administrative dashboards and developer tools with corporate identity

02Replacing legacy VPN infrastructure with identity-based, per-request access control

03Enforcing device-specific security requirements for accessing sensitive cloud resources

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add mukul975/anthropic-cybersecurity-skills configuring-identity-aware-proxy-with-google-iap

For use in Claude.ai and ChatGPT

主要功能

01Secure IAP TCP forwarding for SSH and RDP without public IP exposure

024,121 GitHub stars

03Security auditing setup via Cloud Audit Logs and custom logging metrics

04Context-aware policy configuration based on device posture and location

05Programmatic authentication patterns for service account access

06Zero-trust access enforcement for GCP native services and backend load balancers

使用场景

01Securing internal administrative dashboards and developer tools with corporate identity

02Replacing legacy VPN infrastructure with identity-based, per-request access control

03Enforcing device-specific security requirements for accessing sensitive cloud resources

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add mukul975/anthropic-cybersecurity-skills configuring-identity-aware-proxy-with-google-iap

For use in Claude.ai and ChatGPT