Is it safe to create a ingress firewall rule to deploy app engine on custom vpc network

[Robinwilliam15]

I want to deploy an app engine application to my custom vpc network  while deploying i was getting an error which I am attaching the screenshot below

I Searched and found an article according to official documentation of google i have to create a new firewall rule to allow healthcheck without the rule my application is not deploying

https://cloud.google.com/appengine/docs/flexible/using-shared-vpc#allowing-traffic 

this is the link for that guide

My Question is  is it safe to create a ingress rule for app engine I don't want to expose my internal vpc network for others or there is any other alternate way to deploy without creating any rule.

• Source IP ranges: 35.191.0.0/16, 130.211.0.0/22
• port =  tcp: 8443, 10402

Kindly help me

[Marvin_Lucero · Accepted solution]

Hi @Robinwilliam15 ,

Yes, it is safe. Basically, the ingress rules are just created for specific ports and IP ranges but it doesn't mean it will expose your entire VPC network.