Collection of learning resources for securing serverless deployments on GCP.
OWASP Top 10 Serverless Interpretation. Security Foundations Blueprint. Secure Serverless Blueprint.
Cloud Run IAM Predefined roles
Cloud Functions Predefined IAM roles
App Engine Predefined IAM roles
IAM Recommender
Lab: Build a Serverless App with Cloud Run that Creates PDF Files
Lab: Securing Cloud Applications with Identity Aware Proxy (IAP) using Zero-Trust
Blog: Securing Cloud Run Deployments with Least Privilege Access
Restricting ingress for Cloud Run
Using VPC Service Controls for Cloud Run
Configuring private networking for Cloud Run
Configuring ingress and egress settings for Cloud Functions
Configuring ingress and egress settings for App Engine
Cloud Armor with Cloud Run, App Engine, or Cloud Functions
Lab: Securing Cloud Run Ingress Traffic
Lab: Cloud Armor Preconfigured WAF Rules
Using Secrets Manager with Cloud Run
Container Analysis and Vulnerability Scanning
Enable Binary Authorization for Cloud Run
Software Delivery Shield with Cloud Run services