About This Architecture
Defense-in-depth security architecture with Cloud Armor WAF and DDoS protection in front of Cloud Load Balancing, Identity-Aware Proxy for authentication, App Engine and GKE workloads inside VPC Service Controls, with Secret Manager and Cloud Audit Logging.