Making a container private
Written by
Updated at July 1, 2026
For a container to be invoked only by users with the permission to do so, make the container private.
Note
If all unauthorized users (the All users public group) of a cloud or folder are granted permissions to invoke a container, the container will be public regardless of its settings. How to revoke a role.
CLI
To make a container private, run this command:
yc serverless container deny-unauthenticated-invoke <container_name>
Result:
done (1s)