I have several Cloud Functions that are all setup and working well, each of type https.onRequest(...
.
I am trying to figure out the best / easiest way to a
You could use a GCE VM as proxy with a firewall rule to only accept incoming traffic form the IP that you want
The GCE VM could hit to the functions and to avoid that public traffic hit your functions you could apply the internal traffic flag on them.
Or you can move your functions to an App Engine Service, it allows use Firewall rules