Skip to content

Cloud Functions

Anna edited this page Jun 25, 2026 · 1 revision

Module: Cloud Functions

Module flag: functions Enabled by default: yes


Overview

The Cloud Functions module lists and inspects both Gen 1 and Gen 2 Cloud Functions. Use it to audit function configuration, runtime versions, service accounts, VPC connectivity, and resource allocation.


Enable This Module

GCP_PROJECT_ID=my-project ./aura-tracker-gcp --modules functions

Required GCP APIs

gcloud services enable cloudfunctions.googleapis.com

Required IAM Permissions

Role Tools that need it
roles/cloudfunctions.viewer All tools

Tools

gcp_functions_list

Lists Cloud Functions in the project.

Parameters:

Name Required Description
project_id yes GCP project ID
region no Filter by region; - or omit for all regions
generation no 1, 2, or both (default: both)

Returns: Function name, region, generation, runtime, trigger type (HTTP/Pub/Sub/Event), state, service account.


gcp_functions_get_details

Gets full configuration for a single Cloud Function.

Parameters:

Name Required Description
project_id yes GCP project ID
region yes Region
function_name yes Function name

Returns: Entry point, runtime, memory (MB), CPU, timeout, min/max instances, service account, VPC connector, ingress settings, environment variable names, trigger details, build config.


Prompt Examples

Inventory

"List all Cloud Functions in project my-project and group them by generation (Gen 1 vs Gen 2)."

Runtime audit

"Which Cloud Functions are still using deprecated runtimes like nodejs10 or python37?"

Security audit

"Which Cloud Functions have their ingress set to ALLOW_ALL (publicly accessible)?"

Resource check

"Which Cloud Functions in project my-project are using more than 1 GB of memory?"


Related Modules

Module flag Why you'd combine it
eventarc See which Eventarc triggers invoke these functions
pubsub Find the Pub/Sub topics that trigger these functions
serverlessgraph Map functions in the full event-driven service graph
iam Audit service account permissions for function identities

Clone this wiki locally