Supported Services

Access Google Cloud APIs from Cloud Functions by using a service account to act on your behalf. The service account provides Application Default Credentials for your functions.

Note: All communication between Cloud Functions and these services using Google Client Libraries is encrypted in transit and transmitted entirely within Google's network.

Supported APIs

Cloud Functions can access most major Google Cloud services using language-specific API client libraries and/or REST APIs, including the following:

• Cloud BigQuery

• Cloud Bigtable

• Cloud Data Loss Prevention

• Cloud Datastore

• Cloud DNS

• Cloud Firestore

• Cloud Machine Learning Engine

• Cloud Natural Language API

• Cloud Pub/Sub

• Cloud Resource Manager

• Cloud Spanner

• Cloud Speech-to-Text API

• Cloud SQL

• Cloud Storage

• Cloud Translation API

• Cloud Vision API

• Cloud Video Intelligence API

• Firebase (DB, Storage, Analytics, Auth)

• Error Reporting Client Libraries

• Logging Client Libraries

• Monitoring Client Libraries

• Cloud Trace

• Google Compute Engine

Supported event providers

Cloud Functions can be triggered by events provided by the following services:

• HTTP—invoke functions directly using HTTP requests

• Cloud Storage

• Cloud Pub/Sub

• Firebase (DB, Storage, Analytics, Auth)

• Cloud Logging

Using services with Cloud Functions

API client libraries that use application default credentials automatically obtain the built-in service account credentials from the Cloud Functions host at runtime. By default, the client authenticates using the [e-mail] service account.

Note: To learn more about the API client libraries provided by Google for the Node.js runtime, see GitHub.

Routing with Cloud Load Balancing

Cloud Load Balancing is a separate product that enables advanced network configurations for all of your applications running on Google Cloud.

When HTTP(S) Load Balancing is enabled for serverless apps, you can:

• Configure your serverless app to serve from a dedicated IPv4 and/or IPv6 IP address that is not shared with other services.

• Reuse the same SSL certificates and private keys that you use for Compute Engine, Google Kubernetes Engine, and Cloud Storage. This eliminates the need to manage separate certificates for serverless apps.

• Use additional services that integrate with Cloud Load Balancing such as Cloud CDN, Google Cloud Armor, or security policies.

Note the following limitation and recommendations:

• To use Cloud Load Balancing-enabled security capabilities such as Google Cloud Armor or security policies, you must change the ingress settings to be internal_and_gclb. Users who already have the Cloud Functions's default URL can otherwise bypass the load balancer and go directly to the function's URL.

• Support for Identity-Aware Proxy integrated with Cloud Load Balancing for Cloud Functions is not available.