IAM Unified Access Policies are generally available (GA)

IAM Unified Access Policies are generally available (GA)

IAM Unified Access Policies (Access policies) for Gemini Enterprise Agent Platform are generally available (GA). Agent Gateway uses Identity-Aware Proxy and Access policies to govern agentic communication between agent principals and destination resources, such as Model Context Protocol (MCP) servers, other agents, and registered or unregistered endpoints.

Key capabilities include:

• Multiple allow and deny rules within a single Access policy to establish fine-grained behavioral guardrails.
• Common Expression Language (CEL) conditions in rules to enforce access criteria based on tool names, read-only constraints, HTTP methods, and URL path attributes.
• Dry-run and enforcement modes to validate and audit policy evaluation before blocking agent traffic.
• End-to-end agent identity authentication and authorization using mutual TLS (mTLS) and Context-Aware Access (CAA) with Demonstrating Proof of Possession (DPoP).

For more information, see IAM access policies overview.