简体繁体 English

如何授予对 App Engine 创建的另一个 VM 的访问权限？

[英]How to give access to another one of the VM created by App Engine?

原文 2022-05-02 07:21:16 1 1 reactjs/ google-app-engine/ google-cloud-platform/ websecurity

I have an web app (ReactJS) deployed in Google App Engine.我在 Google App Engine 中部署了一个 web 应用程序 (ReactJS)。

Problem: The web app needs to be passed to security audit.问题： web app需要通过安全审计。 Now they are asking for the internal.network configuration of the VM where the app is deployed so that they can access the VM and perform greybox testing.现在他们要求提供部署应用程序的虚拟机的内部网络配置，以便他们可以访问虚拟机并执行灰盒测试。

Note: Greybox testing is the combination of whitebox and blackbox testing where some of the internal structure of the application is known.注意：灰盒测试是白盒和黑盒测试的组合，其中应用程序的某些内部结构是已知的。

1 个解决方案

With GAE flexible, you can ssh to a deployed instance.借助 GAE flexible，您可以 ssh 部署实例。 You can provide them with access credentials and instructions to ssh to deployed instances.您可以向他们提供访问凭证和 ssh 部署实例的说明。

With GAE standard, you cannot ssh to a deployed instance.使用 GAE 标准，您不能 ssh 部署实例。

For both, the VMs are maintained and updated by Google.对于这两者，虚拟机均由谷歌维护和更新。 The testers should be able to review GAE documentation to address their security concerns.测试人员应该能够查看 GAE 文档以解决他们的安全问题。