I am working on setting up the JIT Access application as IaC using KCC and Config Sync. I currently have this set up, which is completely functional:
However, I am trying to make the switch from a global external application load balancer to a regional external application load balancer. My target infrastructure is the following:
When I make the switch to the regional LB, I get an IAP assertion error (Invalid IAP assertion (HTTP 403: error)) when I access the application. I've been told that IAP was not compatible with regional external application load balancers. Is this true?
If not, why would I be getting the IAP assertion error when I switch to the regional load balancer?
Thank you in advance!
**Edit
Wanted to add that I've done my own research on this and I'm not simply going on hearsay. I've found this documentation, and this one, that seem to confirm that IAP is not supported for regional LB's. But then there is this one that says they are compatible. Quite confusing!