By default, the Cloud Function will have used the default service account for the project service-ACCOUNT_ID@PROJECT_ID.iam.gserviceaccount.com. This is not a great idea, as it gives broad access to all resources in the project. You can create a new service account that has the minimum permissions required for the function to work and no more. Specifically, […]