question

Setting PlayFab API policy can prevent clients from calling API ExecuteCloudScript, but PlayFab Policy doesn’t supports restrict access to the specific CloudScript function. When CloudScript function is triggered by a PlayStreamEvent, the info of this PlayStreamEvent would be contained in the context. So you can make conditional judgments in the function to limit the execution of valid logic. You can refer to the following testing CloudScript function.

handlers.handlePlayStreamEventAndProfile = function (args, context) {
    var psEvent = context.playStreamEvent;
    if (psEvent != null) {
        // use the specific event name
        if (psEvent.EventName == "player_logged_in") {
            //do something
            return { result: "executed the function" };
        } else { return { result: "nothing happened" }; }

    } else { return { result: "nothing happened" }; }

};