StudyToCert

All certifications / Associate Cloud Engineer / Lessons

Google Cloud Associate Cloud Engineer Associate Cloud Engineer · Domain 4: Configuring access and security

Identity-Aware Proxy and OS Login for secure administrative access

▶ Watch the overview video

Last reviewed September 25, 2026 · Leer en español

Identity-Aware Proxy (IAP) implements a zero-trust access model: instead of trusting anyone on the right network, it checks who the user is (and optionally their device and context) on every request, and only then lets the request through to the application or VM. It removes the need for VPNs and bastion hosts for many access patterns.

Free account

Keep reading for free

Create a free StudyToCert account to read the rest of this lesson: 4 more sections, 4 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.

Sign up free Log in

Study Associate Cloud Engineer for free
A week-by-week plan with every lesson, quizzes, checkpoint tests, a practice exam and hands-on labs.
Open the Associate Cloud Engineer study plan