If you can use it, Cloudflare Access is great for these types of situations.

Maybe not perfect with hosted cloud servers (as opposed to your own origins), but a good start!