I have GCP setup with external https load balancer and backend services with server less NEG. in front of the load balancer that has another cloud WAF ...

I'm configuring a GCloud Armor to restrict access to my API which is deployed in GKE behind and ingress. Some of the petitions come directly from de f ...

Is there any google API to check and count number of Armor Policies rules defined under a project. i have to count number of custom rules so that once ...

I recently setup a Storage Bucket to serve a static website within the Google Cloud Platform. Costs were rising for a few days so I looked into what w ...

Is there a way to deny https://mma.mydomain.com/ main domain and allow the below Web sevices in GCP Cloud armor. I have set the below rules in Goog ...

I want to know if the owasp core rule set are the rules that Google Cloud Armor use? If yes how can i test my payloads so it will be compliant to Goog ...

'in' operation I have a list of origin asns that I would like to block access using CloudArmor. I am using the match expression and trying something ...

How can we declare a gcp cloud armor advance mode rule options block in terraform we are trying to setup the cloud armor security for Load balancer V ...

thanks to Gabriel Hodoroaga and his tutorial we have config with this flow in GCP: Internet > HTTP Load Balancer > Network Endpoint Groups & ...

I am getting below error when trying to create GCP Cloud Armor from terraform or Console. I am using a Free Tier account. I checked in Quota , I co ...

I have a GKE cluster which uses Nginx Ingress Controller as its ingress engine. Currently, when I setup the Nginx Ingress Controller I define a servic ...

I'm trying to create a gcp cloud armor rate limiting "throttle" resource but i keep getting the error below. Here is what my resource block looks l ...

I have a Google Cloud Run services and i would need to allow traffic from certain machine only. I use Google cloud armor to allow IPs to access the Cl ...

CloudArmor appears to use OWASP CRS 3.0.1 rules which are now pretty dated (last update around 4 years ago). CRS is now on V3.3 and V3.4 is in develop ...

My (node.js) API is working properly in localhost but when i sending some special values in stage (server side) where Google-cloud-armor rules are def ...

I added a new rule for deny all the external requests to 'actuator' .(spring endpoints) as following: The rule works as expected until I am using pa ...

This is follow up question to another one about reCaptcha and GCA. I have GKE applications in following setup: front app works on example.com b ...

I have GKE applications in following setup: front app works on example.com backend app works on api.example.com I expose those loads via Ingr ...

I have one cloud function (firebase function) which is public accessible and I would like to rate limit this function with the help of Google Cloud Ar ...

I recently received a lot of traffic from bots. However they were using the same device on which my code was able to fingerprint and this info is sent ...