[minimaxir]

There's both a max number of containers setting and a max concurrency limit per container setting.

FWIW, I do wish Google added some way to more explicitly prevent abuse with the containers. I had to take down my Cloud Run containers because people found ways to automate access to my services without rate limits, and Google's solution to that was to use a proxy which sorta defeats the point of using Cloud Run.

[renewiltord]

Apigee is just such a heavy-weight thing. It feels like API Gateway plus Lambda w/ Containers will provide what you want, though, serverless and easy to set up. You can rate-limit per "usage plan" etc.