- Lab
-
Libraries: If you want this lab, consider one of these libraries.
- Cloud
Securing Cloud Run Service to Service Calls with OIDC and IAM
This hands-on lab explores how misconfigurations in Cloud Run services, such as missing authentication and incorrect environment configuration, can lead to failed internal service communication and 403 errors. Learners investigate these failures by analyzing service behavior and logs to identify issues in identity token generation and request flow. By implementing OIDC-based authentication and proper service access configuration, secure service-to-service communication is established and validated through a successful response.
Lab Info
Table of Contents
-
Challenge
Deploy a secured Cloud Run service that enforces authenticated access
- Enforce access control at the application layer by validating incoming requests and explicitly rejecting those without proper authentication signals.
- Design the service to simulate a private API boundary, ensuring only trusted, authenticated calls are processed while all others are denied.
-
Challenge
Implement OIDC-based identity token generation for service-to-service communication
- Implement identity-based communication by leveraging platform-native token providers to generate short-lived OIDC tokens tied to the service identity.
- Ensure secure request propagation by attaching the token to outbound calls, enabling the receiving service to validate the caller’s identity and trust boundary.
-
Challenge
Configure Cloud Run IAM permissions and validate secure backend access
- Establish a controlled trust boundary by allowing only authorized identities to invoke the service, ensuring access is explicitly granted rather than implicitly open.
- Verify end-to-end security by confirming that authenticated requests succeed while unauthorized access is consistently rejected, reinforcing correct policy enforcement.
Real skill practice before real-world application
Hands-on Labs are real environments created by industry experts to help you learn. These environments help you gain knowledge and experience, practice without compromising your system, test without risk, destroy without fear, and let you learn from your mistakes. Hands-on Labs: practice your skills before delivering in the real world.
Learn by doing
Engage hands-on with the tools and technologies you’re learning. You pick the skill, we provide the credentials and environment.
Follow your guide
All labs have detailed instructions and objectives, guiding you through the learning process and ensuring you understand every step.
Turn time into mastery
On average, you retain 75% more of your learning if you take time to practice. Hands-on labs set you up for success to make those skills stick.