services / Google Cloud / Cloud functions operations

Operations represent long-running cloud functions API calls. They are used for create, delete, and update operations on cloud functions.

The operation includes the data returned from the API call the operation is associated with. This means that viewing an operation includes access to view function metadata, and contains the same risks as get and list operations directly on functions.

cloudfunctions.​operations.​list

See notes for functions.get

Risks

1. Data discovery (LOW)
2. Infrastructure discovery (LOW)
3. Network discovery (LOW)
4. Policy discovery (LOW)

Scope: CRITICAL

This privilege may grant access to sensitive data from a significant fraction of organizational functions, allow interruption of critical organizational services, or its exploit could lead to significant privilege escalation.

Links