Reputation:
Is it possible to secure my service on Compute engine so that only my Firebase functions can access it using vpc / firewall rules?
Upvotes: 8
Views: 533
Reputation: 9721
Rather than using VPC/Firewalls to secure your GCE instance, you could use Identity-Aware Proxy, and have the function authenticate as a service account using the default service account for Cloud Functions ([email protected]). This is very robust against network changes, and is very flexible..
Upvotes: 3