ended6월 10일· 1 sources

Why IP Restrictions Fail When Cloud Run Uses Private Google Access

Cloud Run PGA의 숨겨진 함정: IP 제한이 작동하지 않는 이유

Why it matters

When Cloud Run services use Private Google Access on a VPC subnet, traffic to Google APIs bypasses Cloud NAT and retains internal IP addresses, rendering source IP restrictions on API keys ineffective. This disconnect between configured security policies and actual network behavior can leave APIs vulnerable despite appearing secured. Understanding this routing behavior is critical for securing Google Cloud infrastructure.

1
Sources
+0
24h
—
Growth
3d
Active
Cloud RunPrivate Google AccessIP restrictionCloud NATVPC Egress

Sources

devto
When You Use a PGA Subnet on Cloud Run, Traffic to Google APIs Is Treated as Internal6월 10일

Activity

타임라인 →

Related Issues