It's a Cloud Function running in Cloud, with customized node package dependencies (so I could pull stuff like jq, webp in).

Thanks to a fully managed container environment, I don't have to worry too much about security stuff.