[kpolls]

"On the other hand, the former might be just to expensive for smaller organisations."

GCP's Identity Aware Proxy (IAP) comes free with the load balancer