Hi. You can use 'X-Appengine-Inbound-Appid' http header for solving a problem "allow only local traffic to app engine services".
According documentation <https://cloud.google.com/appengine/docs/standard/python3/reference/request-response-headers> "Requests coming from other App Engine applications will include a header identifying the app making the request, if the requesting app is using the URL Fetch Service: X-Appengine-Inbound-Appid" WBR, Vitaly. -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To unsubscribe from this group and stop receiving emails from it, send an email to google-appengine+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/google-appengine/b35735ac-e9c4-457b-aad3-44e368f9817bn%40googlegroups.com.
