Private Google Access
Private Google Access addresses the challenge where you want your virtual machines (VMs)/Google Compute Engine (GCE) instances that do not have external IP addresses but private addresses to access Google APIs. Instances without public IP addresses can’t access Google Cloud’s public API endpoints – but the Private Google Access service enables that capability. Let’s look at some use cases on why Private Google Access is required before we learn how to configure the service.
VMs often have to communicate with managed services, for example, Google Cloud Storage, BigQuery, and GCE. Managed services have a public endpoint, for example, storage.googleapis.com. Assigning an external IP address to every VM that needs to communicate with a public API wouldn’t be a practical or secure approach due to the shortage of valid IPv4 addresses. Private Google Access allows communication with Google API public endpoints without requiring an...
