Cloud Functions and IAM
As with other Google Cloud products and services, Cloud Functions support permissions through IAM policies. There are two Cloud Functions with specific IAM roles: Cloud Functions Developer and Cloud Functions Viewer. The Cloud Functions Developer role provides agents with full read and write access to all functions-related resources. The Cloud Functions Viewer role provides view-only access to these resources. In addition, the three project-level primitive IAM roles also apply to Cloud Functions: Project Owner, Project Editor, and Project Viewer.
As mentioned earlier, invoked functions have access to a managed service account with Project Editor rights: appspot.gserviceaccount.com. Note, however, that all Cloud Functions ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access