HIGH
Source
CloudSploit
ID
cloud-function-all-users-policy

Cloud Function All Users Policy

Ensure cloud functions are not anonymously or publicly accessible.

Using Cloud Identity and Access Management (IAM), you can control access to the cloud functions. As a security best practice, ensure the access is not allowed to “allUsers” or “allAuthentictaedUsers” to avoid data leaks and other security risks.

Ensure that each cloud function is configured so that no member is set to allUsers or allAuthenticatedUsers.