Ensure CloudFunctions are allowed to access only VPC resources.
Cloud Functions may require to connect directly to Compute Engine VM instances, Memorystore instances, Cloud SQL instances, and any other resources. It is a best practice to send requests to these resources using an internal IP address by connecting to VPC network using “Serverless VPC Access” configuration.
Ensure all cloud functions are using serverless VPC connectors.