diff --git a/network_services_authz_extension_iap/main.tf b/network_services_authz_extension_iap/main.tf
index ea0631f7..1db8b0cd 100644
--- a/network_services_authz_extension_iap/main.tf
+++ b/network_services_authz_extension_iap/main.tf
@@ -4,4 +4,7 @@ resource "google_network_services_authz_extension" "default" {
 
   service               = "iap.googleapis.com"
   timeout               = "0.1s"
+  metadata = {
+    "iapPolicyVersion" = "V1"
+  }
 }