Manage access to your Google App Engine using Cloud Identity-Aware Proxy
Cloud Identity-Aware Proxy (Cloud IAP) controls access to your cloud applications like App Engine. Cloud IAP works by verifying user identity and context of the request to determine if a user should be allowed to access an App Engine application or a VM.