Note that, IAP provides a proxy <https://cloud.google.com/iap/docs/concepts-overview> in which the service can be accessed by authenticated users who have the correct Cloud Identity and Access Management (Cloud IAM) role, not per IP. As Olu previously noted, App Engine does not currently provide a way to map static IP addresses to an application <https://cloud.google.com/appengine/kb/#static-ip>.However you may take a look at Serverless VPC Access <https://cloud.google.com/vpc/docs/configure-serverless-vpc-access> which makes it possible for your serverless environment to access other resources with an internal IP address.
Otherwise, you may consider using Compute Engine instances so that you can reserve a static external IP address <https://cloud.google.com/compute/docs/ip-addresses> and enforce your firewall rules <https://cloud.google.com/vpc/docs/firewalls> as per your usecase or create a Compute Engine instance and a proxy as discussed on this Stack Overflow thread <https://stackoverflow.com/questions/47745439/using-google-compute-engine-as-a-proxy-for-a-google-app-engine-web-app> . -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To unsubscribe from this group and stop receiving emails from it, send an email to google-appengine+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/google-appengine/402858c5-5656-4248-9038-7f5bd74f9a31%40googlegroups.com.
