All Cloud Run services are deployed privately by default, which means that they can't be accessed without providing authentication credentials in the request. These services are secured by IAM. By default, services are only callable by project owners, editors, and Cloud Run admins and developers. You can configure IAM on Cloud Run services to grant access to additional users.
Common use cases for authentication include: