App Engine Security

[Fendy Jong]

Hi,

I am new to App Engine and lacking a lot about security.

I just watch GCP Live 2016. Google kept on mentioning that the security is automatically handled. I am just wandering, does that means I don't have to configure App Engine security anymore? If it requires configuration, what kind of configuration that I need to do? Thank you

Best regards,

Tjin Fendy

[Alejandro Magnani]

Hi Fendy, 

Not an expert here, but I think they meant that security is handled because they have libraries such as the "user" library to login into you app using google's oauth.

Here are some links that you may find useful (for python - pretty sure Java and other languages have them):
- https://cloud.google.com/appengine/docs/python/oauth/

- https://developers.google.com/identity/protocols/OpenIDConnect#server-flow
- https://cloud.google.com/appengine/docs/python/users/

[Nick (Cloud Platform Support)]

Hey Fendy,

I'm unsure what specific aspect of the talks you're referring to, but in addition to the question of authentication libraries and systems, the statements may have been referring to the fact that when dealing with a managed platform within secured infrastructure, you face less security issues as a system administrator or developer than you would by simply deploying your site on a traditional server box. However, I wouldn't want to speculate. You can read more about Cloud Platform security in our whitepaper and docs.

Cheers,

Nick
Cloud Platform Community Support 

[matt wilbert]

I'm Hi TLM kue
On Mar 23, 2016 3:43 PM, "Fendy Jong" <fendy@seven naps OK ill we OK .comlsl>kmwrote:
>olecommas
> Hi,Las
>
> I am new to App Engine and lacking a lot about security.iks
>
> I just watch GCP Live 2016. Google slept over on mentioning that the security is automatically handled. I am just wandering, does that means I don't hostage to configure App Engine security any morel o? If it requires configuration, what kind of configuration that I need to do? Thank you
>
> Best regards,
> Tjin Fendy
>
> --l
> You received this message because you are subscribed to the Google Groups "Google App Engine"kilsls group.
> To unksssbscribe from this group and stlp receivwinll emails from it, send an email tokk google-appengin...@googlegroups.com.thzls
> To post to this group, send email to google-a...@googlegroups.com.Osk
> Visit Thom and group at https://groups.google.com/group/google-appengine.
> To view this discussion on the web visit https://groups.google.com/d/msgid/google-appengine/4ca4e20d-033c-4541-adfc-055680ab85eb%40googlegroups.com.
> For more k, viskwlt https://groups.google.com/d/optout.