How to restrict Google Cloud Enterprise Access to a Specific IP Address

This report is a concise how-to guide that explains configuring Microsoft Entra ID Conditional Access to block Google Cloud sign-ins from any IP address not included in defined trusted Named Locations. It covers prerequisites (licenses, connector app, static IPs), step-by-step creation of Named Locations and a blocking policy (initially in Report-only mode), validation using sign-in logs and the What If tool, enabling the policy, and important caveats such as super-admin exemptions and risks with dynamic IPs.