Hi there - can this be used to secure access to a private GCS bucket?

I want to host some private static content, and I'm hoping to be able to IAP -> G-LB/CDN -> {thing} -> GCS bucket.