-
Notifications
You must be signed in to change notification settings - Fork 0
Cloud Functions
Module flag: functions
Enabled by default: yes
The Cloud Functions module lists and inspects both Gen 1 and Gen 2 Cloud Functions. Use it to audit function configuration, runtime versions, service accounts, VPC connectivity, and resource allocation.
GCP_PROJECT_ID=my-project ./aura-tracker-gcp --modules functionsgcloud services enable cloudfunctions.googleapis.com| Role | Tools that need it |
|---|---|
roles/cloudfunctions.viewer |
All tools |
Lists Cloud Functions in the project.
Parameters:
| Name | Required | Description |
|---|---|---|
project_id |
yes | GCP project ID |
region |
no | Filter by region; - or omit for all regions |
generation |
no |
1, 2, or both (default: both) |
Returns: Function name, region, generation, runtime, trigger type (HTTP/Pub/Sub/Event), state, service account.
Gets full configuration for a single Cloud Function.
Parameters:
| Name | Required | Description |
|---|---|---|
project_id |
yes | GCP project ID |
region |
yes | Region |
function_name |
yes | Function name |
Returns: Entry point, runtime, memory (MB), CPU, timeout, min/max instances, service account, VPC connector, ingress settings, environment variable names, trigger details, build config.
Inventory
"List all Cloud Functions in project my-project and group them by generation (Gen 1 vs Gen 2)."
Runtime audit
"Which Cloud Functions are still using deprecated runtimes like
nodejs10orpython37?"
Security audit
"Which Cloud Functions have their ingress set to
ALLOW_ALL(publicly accessible)?"
Resource check
"Which Cloud Functions in project my-project are using more than 1 GB of memory?"
| Module flag | Why you'd combine it |
|---|---|
eventarc |
See which Eventarc triggers invoke these functions |
pubsub |
Find the Pub/Sub topics that trigger these functions |
serverlessgraph |
Map functions in the full event-driven service graph |
iam |
Audit service account permissions for function identities |