Reduce permission used by cloud function IAM service account in CloudSQL Export #6
Description
Background
Currently Cloud Function service account in CloudSQL export module use roles/cloudsql.editor role. This role is too wide. For example this role granted cloudsql.instances.restart which will allow cloudfunction to restart CloudSQL instance
Tasks
- Create custom role with just enough access to
-- list instances
-- list databases inside instances
-- run export DB