MEDIUM
Source
CloudSploit
ID
cloud-function-default-service-account

Cloud Function Default Service Account

Ensures that Cloud Functions are not using the default service account.

Using the default service account for Cloud Functions can lead to privilege escalation and overly permissive access. It is recommended to use a user-managed service account for each function in a project instead of the default service account. A managed service account allows more precise access control by granting only the necessary permissions through Identity and Access Management (IAM).

Ensure that no Cloud Functions are using the default service account.