Skip to content
Get packs

Google IAP Configuration

Guides an agent through setting up Google Cloud Identity-Aware Proxy access controls and auditing them.

Source Download skill
Repository
mukul975/Anthropic-Cybersecurity-Skills
Stars
35,430
Licence
Apache-2.0
Files
7 files

What it does

This skill gives an AI agent a detailed playbook for Google Cloud Identity-Aware Proxy (IAP), a service that checks who a user is and whether their device meets rules before letting them reach an internal app, instead of relying on a VPN. Once installed, the agent can produce gcloud commands to turn on IAP for App Engine, Cloud Run, Compute Engine and similar backends, set up user and group permissions with conditions such as device or time rules, and define access levels. Bundled Python scripts can also run gcloud and Google Cloud API calls to list and audit existing IAP settings.

Great for

  • Cloud engineers replacing VPN access to internal web apps with identity-based access
  • Security teams reviewing IAP configuration and IAM bindings on a Google Cloud project
  • Developers who need a starting set of gcloud commands for IAP on Cloud Run or App Engine

Skip it if

  • Public-facing apps that must stay open to anonymous users, since IAP blocks unauthenticated access by design
  • Production changes applied without review: the commands alter access control and a mistake can lock out users or expose resources
  • Teams not on Google Cloud, where the commands and concepts will not apply

Try asking

  • “Show me the gcloud commands to put my Cloud Run service behind IAP and restrict it to a Google group”
  • “Create an Access Context Manager level that requires encrypted, managed corporate devices”
  • “Audit my project's IAP-enabled backend services and list any bindings without conditions”
  • “Write a business-hours access condition for my admin console backend”
Step-by-step guide: how to use Google IAP ConfigurationInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 7 original files, the Apache-2.0 licence and an attribution note.

    configuring-identity-aware-proxy-with-google-iap.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip configuring-identity-aware-proxy-with-google-iap.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip configuring-identity-aware-proxy-with-google-iap.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Review every gcloud command before running it, especially IAM bindings and access level changes, and test in a non-production project first.
  • Keep OAuth client secrets out of commands and chat logs; use environment variables or Secret Manager instead.
  • Ask the agent to run the audit script in read-only mode first to understand the current configuration before making changes.

What's inside

  • assets/template.md
  • references/api-reference.md
  • references/standards.md
  • references/workflows.md
  • scripts/agent.py
  • scripts/process.py
  • SKILL.md

Redistributed unmodified from mukul975/Anthropic-Cybersecurity-Skills under the Apache-2.0 licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.