Network misconfigurations

Cloud function without HTTPS Trigger

Risk Level

Hazardous (3)

Platform(s)
Compliance Frameworks
  • Orca Best Practices

Description

GCP cloud function {GcpCloudFunction} was detected running without HTTPS trigger, allowing unauthenticated invocation by default.
  • Recommend icon

    Recommended Mitigation

    Enable HTTPS trigger on the GCP cloud function.