Why doesn't granting 'allAuthenticatedUsers' member the 'Cloud Functions Invoker' role work for google cloud functions?

Question

According to the Google documentation, The \'allAuthenticatedUsers\' member would include anybody that is authenticated included regular gmail accounts. So I gave that member th

Answer 1

You can apply this role on a single function.

If you want to secure all your resources on your project, I mean, if you don't want to allow allUsers on GCP resources like Function, Cloud Run, Storage (...), you can activate the Domain Restriction Sharing Policy (DRS). With it, allUsers is forbidden.