#deployment-hardening

Serverless without a front door: Mandiant's hardening checklist for exposed Cloud Run functions

Google Cloud's Mandiant team published a hardening guide for teams shipping public serverless functions that carry no authentication. Its recommendations put a load balancer, per-function IAM, and pipeline-side security scanning between the internet and your code.