MobilityData / mobility-feed-api

Apache License 2.0
9 stars 3 forks source link

Investigate ingress setting on cloud functions #715

Open cka-y opened 2 months ago

cka-y commented 2 months ago

Context:
In the current implementation, many functions have ingress_settings set to ALLOW_ALL. This setting potentially introduces security and network-related concerns that need to be investigated.

Should we consider restricting the ingress_settings to a more secure configuration, such as ALLOW_INTERNAL_AND_GCLB? This change would limit access to only internal and Google Cloud Load Balancer traffic, reducing potential security risks.

Originally suggested by @davidgamez in PR #713 discussion.