CODEWITHSUNDEEP
google-cloud-platformgoogle-cloud-functionsgoogle-iam
Eric101
Eric101

Reputation: 191

Cloud Functions IAM Roles: 403 Forbidden

I want to secure my cloud functions and by doing so, I removed the allUsers role for invoking the cloud functions. Instead, I assigned the cloud invoker role to a service account and I then use that service account to call my cloud functions. However, I am still getting a 403 forbidden error. I am not exactly sure whats the best way to ask this question, but I do not know if I am missing a step or if I am doing something completely wrong.

Upvotes: 0

Views: 710

Answers (1)

Nitiraj Shitole
Nitiraj Shitole

Reputation: 159

403 Forbidden: This error message happens when the user is not authorized due to missing permissions to invoke the function. Some developers may confuse this with a misconfiguration and you should ensure that allUsers has roles/cloudfunctions.invoker role in the function's IAM policy.

Upvotes: 1

Related Questions