Google Cloud Compliance ControlsGoogle Cloud Run functions
Cloud Functions should not have ingress settings set to allow all
Cloudfunction functions ingress settings should not be set to allow all. The control reports an alarm when `ingress_settings` is `ALLOW_ALL`. Checkov CKV_GCP_124 flags overly permissive Ingress settings on Cloud Functions.
What this control checks
Fails when Cloud Function ingress_settings is ALLOW_ALL; passes otherwise.
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
cloudfunction_function_no_ingress_settings_allow_all - Checkov Check:
CKV_GCP_124 - Powerpipe Control:
gcp_compliance.control.cloudfunction_function_no_ingress_settings_allow_all
Last reviewed: 2026-10-09