services / Google Cloud / Cloud functions

Cloud functions is a serverless computing service. Functions are triggered in response to events and the code runs in an environment fully managed by Google.

cloudfunctions.​functions.​update

Allows for updating ingress and egress network traffic settings as well as updating encryption keys

Risks

1. Data encryption (CRITICAL)
2. Denial-of-service (HIGH)
3. Spend (MEDIUM)

Scope: CRITICAL

This privilege may grant access to sensitive data from a significant fraction of organizational functions, allow interruption of critical organizational services, or its exploit could lead to significant privilege escalation.

Links