wustl-oncology / cloud-workflows

Infrastructure and tooling required to get genomic workflows running in the cloud
1 stars 7 forks source link

Prototype GCP Identity Aware Proxy to secure central-server endpoints #15

Open johnmaruska opened 2 years ago

johnmaruska commented 2 years ago

One of the things that should be handled before we're happy with central-server approach is securing the endpoints, so not anyone on WashU with the IP address is able to create workflows against projects they aren't allowed on. Google Cloud provides an approach called Identity Aware Proxy which will wrap around the server and block requests sent by people not authorized to create the resources needed to run a workflow.