gcf/Default Service Account Check
Check if cloud run function default service account and agent exists and is enabled.
Product: Cloud Functions
Step Type: AUTOMATED STEP
Description
None
Failure Reason
The Cloud Functions service agent or the default runtime service account does not exist or is not enabled: https://cloud.google.com/functions/docs/concepts/iam#access_control_for_service_accounts
Failure Remediation
Refer to the IAM roles guide for providing default roles to the Cloud Run function default service account and the service agent: https://cloud.google.com/functions/docs/concepts/iam#serviceaccount
Success Reason
The service agent and default service account exist and are enabled.