GCP API gateway - Private access only (Not published on the net)

[vliautaud]

Hi all,

i would like to protect a backend API using an API Key + "GCP API gateway" but i don't want this API to be publicly accessible on the net (it should remain private to my "backbone" and my VPC).

Can anyone tell me what kind of component / configuration i should use to reach this objective.

Thanks for your help

[micael]

Any updates about that ? I have the same problem, I guess with Apigee is possible, but is more complicated if you are starting with gke microservices.

I did'nt understand why GCP don't let to link a vpc in API Gateway like aws API Gateway service

[dchiesa1]

Correct, with Apigee it is possible to expose an API endpoint that is private to a GCP VPC. 

With GCP API Gateway, it is not possible. In this case, the URI is not published nor is it discoverable, but it is publicly-resolvable. An application that knows the URI can reach the endpoint from the internet.