Identity-Aware Proxy includes a number of features that can be used to protect access to Google Cloud-hosted resources and applications hosted on Google Cloud at no charge. Networking and compute charges apply for required load balancing. Information about load balancing pricing can be found in the Compute Engine documentation.
However, the following capabilities of IAP are paid features of BeyondCorp Enterprise:
- To use IAP with internal HTTP load balancing
- To proxy non-Google Cloud resources
- To customize IAP
- To use device attributes in access levels
- To define custom access levels
You can read more about BeyondCorp Enterprise pricing and features.