IP range allowlists, mTLS, any number of conditions on your auth provider, take your choice.