Tetap teratur dengan koleksi
Simpan dan kategorikan konten berdasarkan preferensi Anda.
Identitas Fungsi
Halaman ini memberikan informasi tambahan untuk mengonfigurasi identitas fungsi untuk fungsi yang dibuat menggunakan perintah gcloud functions atau Cloud Functions v2 API.
Jika Anda telah membuat atau men-deploy fungsi menggunakan Cloud Run, lihat
Pengantar identitas layanan dan
Mengonfigurasi identitas layanan untuk layanan
untuk mengetahui deskripsi mendetail tentang cara mengonfigurasi identitas layanan. Cloud Run
merujuk pada identitas fungsi sebagai identitas layanan.
[[["Mudah dipahami","easyToUnderstand","thumb-up"],["Memecahkan masalah saya","solvedMyProblem","thumb-up"],["Lainnya","otherUp","thumb-up"]],[["Sulit dipahami","hardToUnderstand","thumb-down"],["Informasi atau kode contoh salah","incorrectInformationOrSampleCode","thumb-down"],["Informasi/contoh yang saya butuhkan tidak ada","missingTheInformationSamplesINeed","thumb-down"],["Masalah terjemahan","translationIssue","thumb-down"],["Lainnya","otherDown","thumb-down"]],["Terakhir diperbarui pada 2025-05-30 UTC."],[[["Cloud Run functions utilize service accounts as their identity to access other Google Cloud resources, and each function should preferably be assigned a dedicated, user-managed service account."],["By default, Cloud Run functions use the project's default compute service account, which may have the Editor role unless an organization policy constraint is enforced to disable the automatic grant."],["For enhanced security, it's advised to either change the permissions of the default service account to less permissive roles, or create and use individual user-managed service accounts for each function, granting them the least privilege necessary."],["You can manage access by changing the default runtime service account permissions or create individual service accounts, and can connect a user-managed service account with your function during deployment or by updating an existing function."],["The Compute Metadata Server allows Cloud Run functions to fetch OpenID Connect ID tokens or OAuth 2.0 access tokens, which are necessary for interacting with services that require specific authentication methods."]]],[]]
