title: Identity Aware Proxy(IAP) in GCP
body: <p>I was learning about IAP in GCP, which is used for authentication and authorization to GCP hosted apps.</p>
  
  <p><strong>Thoughts</strong></p>
  
  <p>Even before IAP was introduced in GCP, users could be authenticated and authorized using login credentials and google IAM policies.</p>
  
  <p>Okay, IAP replaces VPN, users can work from untrusted networks. </p>
  
  <p><strong>Query</strong></p>
  
  <p>Please correct me if i am thinking wrong.</p>
  
  <p>But if my app./resource is hosted in GCP, than it is accessible publicly with proper authentication and authorization, there is obviously no need of VPN. In this scenario, what is the significance of IAP.</p>
  
  <p>What is the new thing in IAP, as IAP also does the same thing for authentication and authorization?</p>