data-for-good-concepts / serverless-scraping-service

A concept implementation of a serverless scraping web service
Creative Commons Zero v1.0 Universal
7 stars 0 forks source link

Setup domain restricted sharing (DRS) for public web service #2

Open Jeniffen opened 2 years ago

Jeniffen commented 2 years ago

Summary

Deploy public web service without unintentionally granting permissions to Google Cloud projects to external users.

Intended Outcome

Only services with tag allUserIngress:True are allowed unauthenticated requests.

How will it work?

Using Resource Manager tags and a conditional DRS policy in order to manage invocations. Example can be found here.

Jeniffen commented 2 years ago