title: Authentication in HTTP Google Cloud Functions
body: <p><a href="https://cloud.google.com/solutions/authentication-in-http-cloud-functions" rel="noreferrer">https://cloud.google.com/solutions/authentication-in-http-cloud-functions</a></p>
  
  <p>The document suggest set up a Google Cloud Storage bucket. And then set up the service accounts' permission, "storage.buckets.get", to the bucket.</p>
  
  <p>Then use this permission to authenticate access to the http Google Cloud Functions.</p>
  
  <p>We are talking about authenticating the http cloud functions, but we are borrowing the permission from a Google Cloud Storage. It seems to me this is a hack solution.</p>
  
  <p>If we can just set up permissions right at each Cloud Function through the Google Cloud Console, that will be great. </p>
  
  <p>Are you guys using the authentication solution suggested by Google in the above document? Or you have better approaches?</p>
  
  <p>To set up the ""storage.buckets.get", does it mean I grant the service account "Storage Object Viewer" permission?</p>
  
  <p><a href="https://i.stack.imgur.com/jYFz4.png" rel="noreferrer"><img src="https://i.stack.imgur.com/jYFz4.png" alt="enter image description here"></a></p>