Cloud IAM Deep -- Cloud Functions, Storage, IAM Exploitation

When to Use

• After finding Firebase API keys, Supabase keys, or GCP SA keys
• When a target uses serverless (Cloud Functions, Cloud Run)
• After finding S3 bucket names or MinIO instances
• One SA key can escalate to full cloud access

Cloud Functions URL Patterns (GCP)

https://{REGION}-{PROJECT_ID}.cloudfunctions.net/{FUNCTION_NAME}
https://us-central1-{PROJECT_ID}.cloudfunctions.net/api/feed

PROJECT_ID Discovery