As I understand it, my Google cloud features are available globally. If I want to control access to them, I need to implement authorization as part of the function itself. Say I could use a bearer marker approach. This will protect the resources associated with this feature from unauthorized access.
However, since the feature is available worldwide, it may be DDoS-ed from the bad guy. If the attack is not as strong as Google’s defense, my function / service can still respond. It's good. However, I do not want to pay for those function calls that the party made that I did not allow to access this function. (Since billing for the number of function calls). That’s why it’s important for me to know if Google’s cloud features detect DDoS attacks and activate countermeasures before I will be responsible for the charges.
source
share