403 "Error: Forbidden" when opening the URL of my Cloud Run service

Question

I built my container image and then deployed to Cloud Run using the Cloud Console. However, when I open the endpoint URL of my service, I get a 403 "Error: Forbidden" page

Answer 1

If you receive a 403 "Error: Forbidden" error message when accessing your Cloud Run service, it means that your client is not authorized to invoke this service. You can address this by taking one of the following actions:

• If the service is meant to be invocable by anyone, update its IAM settings to make the service public.
• If the service is meant to be invocable only by certain identities, make sure that you invoke it with the proper authorization token .

Answer 2

Try this solution.

Go to Cloud Run then click on your service (In this example, "hello-world") :

Then, go to "TRIGGERS" and look at "Authentication" :

Your "Authentication" will be "Require authentication" :

So change it to "Allow unauthenticated invocations" then click on "SAVE" :

Finally, you will be able to open your URL properly.

In addition, you can choose "Allow unauthenticated invocations" for "Authentication" when you create a service on Cloud Run :

Answer 3

I have used IAP to resolve this issue. If there is a use case where only authenticated users must be able to access the application then use IAP

Accessing Authenticated Cloud Run applications using IAP