Cloud Armor WAF and Serverless endpoints

[Hendrik Schalekamp]

Is there any way to use Cloud Armor WAF (or any other WAF technology) to protect Cloud Run or Cloud Function endpoints?

[goya]

You could create serverless NEGs [1] (available for Cloud Run, Cloud Functions & App Engine services) for a Load Balancer, and then add the Cloud Armor rules to it.

[1]: https://cloud.google.com/load-balancing/docs/negs/serverless-neg-concepts