All news with #secret manager tag

Wed, September 17, 2025

Securing Remote MCP Servers on Google Cloud Platform

#Google Cloud #AI Security #Model Armor #Prompt Injection #Cloud Run #Secret Manager #Artifact Registry #Security Command Center #GCP IAM

🔒 A centralized proxy architecture on Google Cloud can secure remote Model Context Protocol (MCP) servers by intercepting tool calls and enforcing consistent policies across deployments. Author Lanre Ogunmola outlines five core MCP risks — unauthorized tool exposure, session hijacking, tool shadowing, token/theft and authentication bypass — and recommends an MCP proxy (Cloud Run, GKE, or Apigee) integrated with Cloud Armor, Secret Manager, and identity services for access control, secret scanning, and monitoring. The post emphasizes layered defenses including Model Armor for prompt/response screening and centralized logging to reduce blind spots and operational overhead.