This document lists the supported asset types in Cloud Asset Inventory. These include resource types , policy types , and runtime information types .
You can use these asset types with the following Cloud Asset Inventory operations:
You might also need to make use of asset names associated with these asset types when working with Cloud Asset Inventory.
Unless otherwise specified, all resource types are available in the export, list, monitor, search, and analysis APIs. Effective tags are supported only in the search APIs.
Resource types
Cloud Asset Inventory provides eventual consistency on current data and best-effort consistency on historical data. While rare, it's possible that Cloud Asset Inventory can miss some data updates.Unless noted in the following table, almost all asset updates are available in minutes.
Cloud Asset Inventory uses the following asset types for the RESOURCE
content type
.
Access Approval
-
accessapproval.googleapis. com/ AccessApprovalSettings Not available in the analysis APIs.
Access Policy (Access Context Manager)
To retrieve all access policies in the export, list, and monitor APIs:
- REST
: Set the
contentTypetoACCESS_POLICY. - gcloud CLI
: Set the
--content-typeflag toaccess-policy.
AlloyDB for PostgreSQL
-
alloydb.googleapis. com/ Backup Not available in the analysis APIs.
-
alloydb.googleapis. com/ Cluster Not available in the analysis APIs.
-
alloydb.googleapis. com/ Instance Not available in the analysis APIs.
API Gateway
API keys
The location
field might not be populated for API keys assets.
Apigee
-
apigee.googleapis. com/ Instance Effective tags aren't supported.
-
apigee.googleapis. com/ Organization Effective tags aren't supported.
Apigee API hub
App Engine
The location
field might not be populated for App Engine assets.
-
appengine.googleapis. com/ Application Searchable attributes:
-
defaultBucket -
defaultHostname
-
-
appengine.googleapis. com/ Version Searchable attributes:
-
versionUrl
-
App Hub
-
apphub.googleapis. com/ Application Effective tags aren't supported. Not available in the analysis APIs.
-
apphub.googleapis. com/ Service Effective tags aren't supported. Not available in the analysis APIs.
-
apphub.googleapis. com/ ServiceProjectAttachment Effective tags aren't supported. Not available in the analysis APIs.
-
apphub.googleapis. com/ Workload Effective tags aren't supported. Not available in the analysis APIs.
Application Integration
-
integrations.googleapis. com/ AuthConfig Not available in the analysis APIs.
-
integrations.googleapis. com/ Certificate Not available in the analysis APIs.
-
integrations.googleapis. com/ Execution Not available in the analysis APIs.
-
integrations.googleapis. com/ Integration Not available in the analysis APIs.
-
integrations.googleapis. com/ IntegrationVersion Not available in the analysis APIs.
-
integrations.googleapis. com/ SfdcChannel Not available in the analysis APIs.
-
integrations.googleapis. com/ SfdcInstance Not available in the analysis APIs.
-
integrations.googleapis. com/ Suspension Not available in the analysis APIs.
Artifact Registry
-
artifactregistry.googleapis. com/ MavenArtifact Not available in the analysis APIs.
-
artifactregistry.googleapis. com/ NpmPackage Not available in the analysis APIs.
-
artifactregistry.googleapis. com/ PythonPackage Not available in the analysis APIs.
-
artifactregistry.googleapis. com/ Rule Not available in the analysis APIs.
Assured Workloads
Backup and DR Service
-
backupdr.googleapis. com/ Backup Not available in the analysis APIs.
-
backupdr.googleapis. com/ BackupPlan Effective tags aren't supported. Not available in the analysis APIs.
-
backupdr.googleapis. com/ BackupPlanAssociation Effective tags aren't supported. Not available in the analysis APIs.
-
backupdr.googleapis. com/ BackupVault Not available in the analysis APIs.
-
backupdr.googleapis. com/ DataSource Not available in the analysis APIs.
-
backupdr.googleapis. com/ DataSourceReference Not available in the analysis APIs.
-
backupdr.googleapis. com/ ManagementServer Effective tags aren't supported.
Backup for GKE
Batch
-
Not available in the analysis APIs.
BigQuery
-
bigquery.googleapis. com/ Dataset Effective tags aren't supported.
-
bigquery.googleapis. com/ Model Effective tags aren't supported.
-
bigquery.googleapis. com/ Table Effective tags aren't supported.
BigQuery Data Transfer Service
BigQuery Data Transfer Service asset change history might be incomplete. Data freshness is synchronized every 7 hours. If a sync fails, freshness is delayed until the next successful sync.
BigQuery Migration Service
Bigtable
-
binaryauthorization.googleapis. com/ Attestor Not available in the analysis APIs.
-
binaryauthorization.googleapis. com/ PlatformPolicy Not available in the analysis APIs.
-
binaryauthorization.googleapis. com/ Policy Not available in the analysis APIs.
Blockchain Node Engine
Certificate Manager
-
certificatemanager.googleapis. com/ Certificate Not available in the analysis APIs.
-
certificatemanager.googleapis. com/ CertificateIssuanceConfig Not available in the analysis APIs.
-
certificatemanager.googleapis. com/ CertificateMap Not available in the analysis APIs.
-
certificatemanager.googleapis. com/ CertificateMapEntry Not available in the analysis APIs.
-
certificatemanager.googleapis. com/ DnsAuthorization Not available in the analysis APIs.
-
certificatemanager.googleapis. com/ TrustConfig Not available in the analysis APIs.
Cloud Asset Inventory
-
cloudasset.googleapis. com/ Feed Effective tags aren't supported. Not available in the analysis APIs.
Cloud Billing
-
cloudbilling.googleapis. com/ ProjectBillingInfo Not available in the analysis APIs.
Cloud Build
-
cloudbuild.googleapis. com/ BitbucketServerConfig Not available in the analysis APIs.
-
cloudbuild.googleapis. com/ Build Effective tags aren't supported. Not available in the analysis and search APIs.
-
cloudbuild.googleapis. com/ BuildTrigger Not available in the analysis APIs.
-
cloudbuild.googleapis. com/ Connection Not available in the analysis and search APIs.
-
cloudbuild.googleapis. com/ GithubEnterpriseConfig Not available in the analysis APIs.
-
cloudbuild.googleapis. com/ GlobalTriggerSettings Not available in the analysis APIs.
-
cloudbuild.googleapis. com/ Repository Not available in the analysis and search APIs.
-
cloudbuild.googleapis. com/ WorkerPool Not available in the analysis APIs.
Cloud Composer
Cloud Composer v1beta1 is supported. The resources in v1beta1 are a superset of those in v1.
-
composer.googleapis. com/ Environment In beta for the export, list, and monitor APIs.
Cloud Config Manager API
-
config.googleapis. com/ Preview Not available in the analysis APIs.
Cloud Controls Partner API
Cloud Data Fusion
Cloud Deploy
Cloud DNS
-
dns.googleapis. com/ ManagedZone Searchable attributes:
-
dnsName -
peeringConfig.targetNetwork. networkUrl
-
-
dns.googleapis. com/ ResourceRecordSet Not available in the analysis APIs.
-
dns.googleapis. com/ ResponsePolicy Not available in the analysis APIs.
-
dns.googleapis. com/ ResponsePolicyRule Not available in the analysis APIs.
Cloud Domains
Cloud Healthcare API
Cloud Healthcare API asset change history might be incomplete. Data freshness is synchronized every 7 hours. If a sync fails, freshness is delayed until the next successful sync.
Cloud Intrusion Detection System
Cloud Key Management Service
Cloud Load Balancing
-
networksecurity.googleapis. com/ AuthzPolicy Not available in the analysis and search APIs.
Cloud Logging
Cloud Logging asset change history might be incomplete. Data freshness is synchronized every 7 hours. If a sync fails, freshness is delayed until the next successful sync.
-
logging.googleapis. com/ Link Effective tags aren't supported. Not available in the analysis APIs.
-
logging.googleapis. com/ LogView Effective tags aren't supported. Not available in the analysis APIs.
-
logging.googleapis. com/ RecentQuery Effective tags aren't supported. Not available in the analysis APIs.
-
logging.googleapis. com/ SavedQuery Effective tags aren't supported. Not available in the analysis APIs.
-
logging.googleapis. com/ Settings Effective tags aren't supported. Not available in the analysis APIs.
The resource is served only when the Logging update API is called.
Cloud Monitoring
-
monitoring.googleapis. com/ Dashboard Not available in the analysis APIs.
-
monitoring.googleapis. com/ UptimeCheckConfig Not available in the analysis APIs.
Cloud Next Generation Firewall Enterprise asset change history might be incomplete. Data freshness is synchronized every 7 hours. If a sync fails, freshness is delayed until the next successful sync.
-
networksecurity.googleapis. com/ FirewallEndpoint Not available in the analysis APIs.
-
networksecurity.googleapis. com/ FirewallEndpointAssociation Not available in the analysis APIs.
-
networksecurity.googleapis. com/ SecurityProfile Not available in the analysis APIs.
-
networksecurity.googleapis. com/ SecurityProfileGroup Not available in the analysis APIs.
-
networksecurity.googleapis. com/ TlsInspectionPolicy Not available in the analysis APIs.
Cloud OS Config
Cloud OS Config asset change history might be incomplete. Data freshness is synchronized every 7 hours. If a sync fails, freshness is delayed until the next successful sync.
-
osconfig.googleapis. com/ OSPolicyAssignment Effective tags aren't supported.
-
osconfig.googleapis. com/ OSPolicyAssignmentReport Effective tags aren't supported.
-
osconfig.googleapis. com/ PatchDeployment Effective tags aren't supported.
-
osconfig.googleapis. com/ VulnerabilityReport Effective tags aren't supported. Not available in the analysis APIs.
Cloud Quotas
-
cloudquotas.googleapis. com/ QuotaPreference Effective tags aren't supported. Not available in the analysis APIs.
Cloud Run
-
run.googleapis. com/ DomainMapping Not available in the analysis APIs.
-
run.googleapis. com/ Execution Effective tags aren't supported.
-
run.googleapis. com/ Revision Effective tags aren't supported.
Cloud Run functions (1st and 2nd gen)
This includes both 1st and 2nd gen Cloud Run functions. The asset change history might be incomplete. Data freshness is synchronized every 7 hours. If a sync fails, freshness is delayed until the next successful sync.
-
cloudfunctions.googleapis. com/ Function Searchable attributes:
-
environment
-
Cloud Run functions (1st gen)
This only includes 1st gen Cloud Run functions. The asset change history might be incomplete. Data freshness is synchronized every 7 hours. If a sync fails, freshness is delayed until the next successful sync.
Cloud Service Mesh
-
networksecurity.googleapis. com/ AuthorizationPolicy Not available in the analysis APIs.
-
networksecurity.googleapis. com/ CientTlsPolicy Not available in the analysis APIs.
-
networksecurity.googleapis. com/ ServerTlsPolicy Not available in the analysis APIs.
Cloud SQL
Cloud SQL asset change history might be incomplete. Data freshness is synchronized every 7 hours. If a sync fails, freshness is delayed until the next successful sync.
-
sqladmin.googleapis. com/ Backup Not available in the analysis APIs.
Cloud Storage
Cloud Tasks
Cloud TPU
Cloud Workstations
-
workstations.googleapis. com/ Workstation Not available in the analysis APIs.
-
workstations.googleapis. com/ WorkstationCluster Not available in the analysis APIs.
-
workstations.googleapis. com/ WorkstationConfig Not available in the analysis APIs.
Compute Engine
-
compute.googleapis. com/ Address Returns global and regional addresses in the search and analysis APIs, and only regional addresses in the list, export, query, and monitor APIs.
-
compute.googleapis. com/ BackendService Returns global and regional backend services in the search and analysis APIs, and only regional backend services in the list, export, query, and monitor APIs.
-
compute.googleapis. com/ Disk Returns zonal and regional disks in the search and analysis APIs, and only zonal disks in the list, export, query, and monitor APIs.
-
compute.googleapis. com/ FirewallPolicy Not available in the analysis APIs.
-
compute.googleapis. com/ ForwardingRule Returns global and regional forwarding rules in the search and analysis APIs, and only regional forwarding rules in the list, export, query, and monitor APIs.
-
compute.googleapis. com/ GlobalAddress Not available in the analysis and search APIs.
Use
compute.googleapis.com/Addressinstead in the search and analysis APIs. -
compute.googleapis. com/ GlobalForwardingRule Not available in the analysis and search APIs.
Use
compute.googleapis.com/ForwardingRuleinstead in the search and analysis APIs. -
compute.googleapis. com/ Instance Searchable attributes:
-
deletionProtection -
externalIPs -
internalIPs -
machineType -
networkInterfaceNetworks -
networkInterfaceNames
The following attributes are from the OS Inventory , which is attached on this Compute Engine Instance to provide information on operating system and packages. Learn more about OS inventory management .
-
osLongName -
osShortName
Supported metadata fields:
-
block-project-ssh-keys -
enable-oslogin -
enable-osconfig -
serial-port-enable
-
-
compute.googleapis. com/ InstanceSettings Not available in the analysis APIs.
-
compute.googleapis. com/ Network Searchable attributes:
-
gatewayIPv4
-
-
compute.googleapis. com/ NetworkAttachment Searchable attributes:
-
connectionEndpointsIpAddresses -
connectionEndpointsIpv6Addresses
-
-
compute.googleapis. com/ Project Supported metadata fields:
-
block-project-ssh-keys -
enable-osconfig -
enable-oslogin -
serial-port-enable
-
-
compute.googleapis. com/ RegionBackendService Not available in the analysis and search APIs.
Use
compute.googleapis.com/BackendServiceinstead in the search and analysis APIs. -
compute.googleapis. com/ RegionDisk Not available in the analysis and search APIs.
Use
compute.googleapis.com/Diskinstead in the search and analysis APIs. -
compute.googleapis. com/ Subnetwork Searchable attributes:
-
gatewayAddress
-
Container Registry
Container Registry implements Docker HTTP API V2 and does not provide a public API.
-
containerregistry.googleapis. com/ Image Effective tags aren't supported. Not available in the analysis APIs.
Conversational Insights
Data Lineage
Database Migration Service
Dataflow
Dataflow asset change history might be incomplete. Data freshness is synchronized every 7 hours. If a sync fails, freshness is delayed until the next successful sync.
Dataform
Dataplex Universal Catalog
-
dataplex.googleapis. com/ AspectType Not available in the analysis APIs.
-
dataplex.googleapis. com/ EncryptionConfigs Not available in the analysis and search APIs.
-
dataplex.googleapis. com/ EntryGroup Not available in the analysis APIs.
-
dataplex.googleapis. com/ EntryType Not available in the analysis APIs.
-
dataplex.googleapis. com/ Glossary Not available in the analysis APIs.
-
dataplex.googleapis. com/ MetadataJob Not available in the analysis and search APIs.
Dataproc
-
metastore.googleapis. com/ Backup Not available in the analysis APIs.
-
metastore.googleapis. com/ Federation Not available in the analysis APIs.
-
metastore.googleapis. com/ MetadataImport Not available in the analysis APIs.
-
metastore.googleapis. com/ Service Not available in the analysis APIs.
Datastream
Developer Connect
-
developerconnect.googleapis. com/ Connection Effective tags aren't supported.
-
developerconnect.googleapis. com/ GitRepositoryLink Effective tags aren't supported.
Dialogflow CX
-
dialogflow.googleapis. com/ LocationSettings
Dialogflow ES
Discovery Engine
-
discoveryengine.googleapis. com/ Collection -
discoveryengine.googleapis. com/ DataStore -
discoveryengine.googleapis. com/ Engine -
discoveryengine.googleapis. com/ Notebook Not available in the analysis APIs.
Document AI
-
documentai.googleapis. com/ LabelerPool -
documentai.googleapis. com/ ProcessorVersion
Essential Contacts
-
essentialcontacts.googleapis. com/ Contact Not available in the analysis APIs.
Eventarc
-
eventarc.googleapis. com/ Channel Not available in the analysis APIs.
-
eventarc.googleapis. com/ ChannelConnection Not available in the analysis APIs.
-
eventarc.googleapis. com/ Enrollment Not available in the analysis APIs.
-
eventarc.googleapis. com/ GoogleApiSource Not available in the analysis APIs.
-
eventarc.googleapis. com/ GoogleChannelConfig Not available in the analysis and search APIs.
-
eventarc.googleapis. com/ MessageBus Not available in the analysis APIs.
-
eventarc.googleapis. com/ Pipeline Not available in the analysis APIs.
Filestore
-
In beta for the export, list, and monitor APIs.
-
file.googleapis. com/ Snapshot Not available in the analysis APIs.
Financial Services
-
financialservices.googleapis. com/ BacktestResult Not available in the analysis APIs.
-
financialservices.googleapis. com/ Dataset Not available in the analysis APIs.
-
financialservices.googleapis. com/ EngineConfig Not available in the analysis APIs.
-
financialservices.googleapis. com/ Instance -
financialservices.googleapis. com/ Model Not available in the analysis APIs.
-
financialservices.googleapis. com/ PredictionResult Not available in the analysis APIs.
Firebase
-
firebaserules.googleapis. com/ Release Effective tags aren't supported. Not available in the analysis APIs.
-
firebaserules.googleapis. com/ Ruleset Not available in the analysis APIs.
Firebase Data Connect
Firestore
-
firestore.googleapis. com/ Backup Not available in the analysis APIs.
Gemini for Google Cloud API
GKE Multi-Cloud
GKE on GDC
GKE on GDC metadata has no public API source.
-
anthos.googleapis. com/ ConnectedCluster Effective tags aren't supported. Not available in the analysis APIs.
In beta for the export, list, and monitor APIs.
GKE On-Prem API
-
gkeonprem.googleapis. com/ BareMetalAdminCluster Not available in the analysis and search APIs.
-
gkeonprem.googleapis. com/ VmwareAdminCluster Not available in the analysis and search APIs.
Google Cloud Managed Service for Apache Kafka
-
managedkafka.googleapis. com/ Cluster Not available in the analysis APIs.
-
managedkafka.googleapis. com/ connectClusters Not available in the analysis and search APIs.
Google Cloud NetApp Volumes
-
netapp.googleapis. com/ ActiveDirectory Effective tags aren't supported. Not available in the analysis APIs.
-
netapp.googleapis. com/ Backup Effective tags aren't supported.
-
netapp.googleapis. com/ BackupPolicy Effective tags aren't supported.
-
netapp.googleapis. com/ BackupVault Effective tags aren't supported.
-
netapp.googleapis. com/ KmsConfig Effective tags aren't supported. Not available in the analysis APIs.
-
netapp.googleapis. com/ Replication Effective tags aren't supported. Not available in the analysis APIs.
-
netapp.googleapis. com/ Snapshot Effective tags aren't supported. Not available in the analysis APIs.
-
netapp.googleapis. com/ StoragePool Effective tags aren't supported. Not available in the analysis APIs.
-
netapp.googleapis. com/ Volume Effective tags aren't supported. Not available in the analysis APIs.
Google Cloud VMware Engine
Google Kubernetes Engine
-
admissionregistration.k8s. io/ MutatingWebhookConfiguration -
admissionregistration.k8s. io/ ValidatingWebhookConfiguration -
autoscaling.k8s. io/ HorizontalPodAutoscaler Not available in the analysis APIs.
The asset change history might be incomplete. Data freshness is synchronized every 7 hours. If a sync fails, freshness is delayed until the next successful sync.
-
container.googleapis. com/ Cluster Searchable attributes:
-
endpoint
-
-
container.googleapis. com/ NodePool Searchable attributes:
-
locations
-
-
extensions.k8s. io/ DaemonSet Not available in the analysis APIs.
-
extensions.k8s. io/ Ingress Not available in the analysis APIs.
In beta for the export, list, and monitor APIs.
-
gateway.networking. k8s. io/ Gateway Not available in the analysis APIs.
-
gateway.networking. k8s. io/ GatewayClass Not available in the analysis APIs.
-
gateway.networking. k8s. io/ HTTPRoute Not available in the analysis APIs.
-
gateway.networking. k8s. io/ ReferenceGrant Not available in the analysis APIs.
-
Not available in the analysis and search APIs.
-
Not available in the analysis APIs.
-
Not available in the analysis APIs.
In beta for the export, list, and monitor APIs.
Hub
-
gkehub.googleapis. com/ Fleet Not available in the analysis APIs.
-
gkehub.googleapis. com/ MembershipBinding Not available in the analysis APIs.
-
gkehub.googleapis. com/ MembershipFeature Not available in the analysis APIs.
-
gkehub.googleapis. com/ Namespace Not available in the analysis APIs.
-
gkehub.googleapis. com/ RBACRoleBinding Not available in the analysis APIs.
-
gkehub.googleapis. com/ Scope Not available in the analysis APIs.
Identity and Access Management v1
IAM data can be stale by up to 7 days.
-
Searchable attributes:
-
includedPermissions
-
-
iam.googleapis. com/ ServiceAccount Searchable attributes:
-
email -
uniqueId
-
-
iam.googleapis. com/ ServiceAccountKey Not available in the analysis APIs.
Identity and Access Management v2
Identity Platform
-
identitytoolkit.googleapis. com/ DefaultSupportedIdpConfig Not available in the analysis APIs.
-
identitytoolkit.googleapis. com/ InboundSamlConfig Not available in the analysis APIs.
-
identitytoolkit.googleapis. com/ OauthIdpConfig Not available in the analysis APIs.
-
identitytoolkit.googleapis. com/ Tenant Not available in the analysis APIs.
Identity-Aware Proxy
-
iap.googleapis. com/ TunnelDestGroup Effective tags aren't supported. Not available in the analysis APIs.
Integration Connectors
KRM API Hosting
-
krmapihosting.googleapis. com/ KrmApiHost
Live Stream API
Looker
-
looker.googleapis. com/ Backup Not available in the analysis APIs.
-
looker.googleapis. com/ Instance Not available in the analysis APIs.
Managed Service for Microsoft Active Directory
Memorystore
-
memorystore.googleapis. com/ Instance Not available in the analysis APIs.
Memorystore for Memcached
Memorystore for Redis
Migrate to Virtual Machines
-
vmmigration.googleapis. com/ CloneJob Effective tags aren't supported. Not available in the analysis APIs.
-
vmmigration.googleapis. com/ CutoverJob Effective tags aren't supported. Not available in the analysis APIs.
-
vmmigration.googleapis. com/ DatacenterConnector Effective tags aren't supported. Not available in the analysis APIs.
-
vmmigration.googleapis. com/ Group Effective tags aren't supported. Not available in the analysis APIs.
-
vmmigration.googleapis. com/ ImageImport Not available in the analysis APIs.
-
vmmigration.googleapis. com/ MigratingVm Effective tags aren't supported. Not available in the analysis APIs.
-
vmmigration.googleapis. com/ Source Effective tags aren't supported. Not available in the analysis APIs.
-
vmmigration.googleapis. com/ TargetProject Effective tags aren't supported. Not available in the analysis APIs.
-
vmmigration.googleapis. com/ UtilizationReport Effective tags aren't supported. Not available in the analysis APIs.
Network Connectivity
-
networkconnectivity.googleapis. com/ Group Effective tags aren't supported. Not available in the analysis and search APIs.
-
networkconnectivity.googleapis. com/ PolicyBasedRoute
Network Management API
Network Security Integration
Network Security Integration asset change history might be incomplete. Data freshness is synchronized every 7 hours. If a sync fails, freshness is delayed until the next successful sync.
-
networksecurity.googleapis. com/ MirroringDeployment Not available in the analysis APIs.
-
networksecurity.googleapis. com/ MirroringEndpointGroup Not available in the analysis APIs.
-
networksecurity.googleapis. com/ MirroringEndpointGroupAssociation Not available in the analysis APIs.
Network Services API
-
networkservices.googleapis. com/ AuthzExtension Not available in the analysis and search APIs.
-
networkservices.googleapis. com/ EdgeCacheKeyset Not available in the analysis APIs.
-
networkservices.googleapis. com/ EdgeCacheOrigin Not available in the analysis APIs.
-
networkservices.googleapis. com/ EdgeCacheService Not available in the analysis APIs.
-
networkservices.googleapis. com/ LbRouteExtension Not available in the analysis APIs.
-
networkservices.googleapis. com/ LbTrafficExtension Not available in the analysis APIs.
-
networkservices.googleapis. com/ ServiceLbPolicy Not available in the analysis APIs.
-
networkservices.googleapis. com/ WasmPlugin Not available in the analysis APIs.
-
networkservices.googleapis. com/ WasmPluginVersion Not available in the analysis APIs.
Oracle Database@Google Cloud
-
oracledatabase.googleapis. com/ AutonomousDatabase Not available in the analysis APIs.
-
oracledatabase.googleapis. com/ CloudExadataInfrastructure Not available in the analysis APIs.
-
oracledatabase.googleapis. com/ CloudVmCluster Not available in the analysis APIs.
Organization Policy Service
-
orgpolicy.googleapis. com/ Policy Not available in the analysis APIs.
Organization Policy Service v2
Parameter Manager
-
parametermanager.googleapis. com/ Parameter Effective tags aren't supported. Not available in the analysis and search APIs.
-
parametermanager.googleapis. com/ ParameterVersion Effective tags aren't supported. Not available in the analysis and search APIs.
Privileged Access Manager
-
privilegedaccessmanager.googleapis. com/ Grant
Pub/Sub
reCAPTCHA
-
recaptchaenterprise.googleapis. com/ FirewallPolicy Not available in the analysis and search APIs.
-
recaptchaenterprise.googleapis. com/ Key Not available in the analysis and search APIs.
Resource Manager
-
cloudresourcemanager.googleapis. com/ Lien Not available in the analysis, export, list, and monitor APIs.
-
cloudresourcemanager.googleapis. com/ Project Searchable attributes:
-
projectId
-
-
cloudresourcemanager.googleapis. com/ TagBinding Not available in the analysis and search APIs.
In search, directly attached and effective tags can be queried and/or returned along with resources. For details, see Search for resources .
Retail API
Secret Manager
The location
field in the Secret Manager asset does not reflect the replication policy of the secret. Instead, use the replication
field to get that information.
Secure Source Manager
Secure Source Manager asset change history might be incomplete. Data freshness is synchronized every 7 hours. If a sync fails, freshness is delayed until the next successful sync.
-
securesourcemanager.googleapis. com/ Instance Not available in the analysis APIs.
Secure Web Proxy
Secure Web Proxy asset change history might be incomplete. Data freshness is synchronized every 7 hours. If a sync fails, freshness is delayed until the next successful sync.
-
networksecurity.googleapis. com/ GatewaySecurityPolicy Not available in the analysis APIs.
-
networksecurity.googleapis. com/ GatewaySecurityPolicyRule Not available in the analysis APIs.
-
networksecurity.googleapis. com/ TlsInspectionPolicy Not available in the analysis APIs.
-
networksecurity.googleapis. com/ UrlList Not available in the analysis APIs.
Security Center Management API
Security Command Center
-
securitycenter.googleapis. com/ BigQueryExport Not available in the analysis APIs.
-
securitycenter.googleapis. com/ ContainerThreatDetectionSettings Not available in the analysis APIs.
-
securitycenter.googleapis. com/ EventThreatDetectionSettings Not available in the analysis APIs.
-
securitycenter.googleapis. com/ MuteConfig Not available in the analysis APIs.
-
securitycenter.googleapis. com/ NotificationConfig Not available in the analysis APIs.
-
securitycenter.googleapis. com/ ResourceValueConfig Not available in the analysis APIs.
-
securitycenter.googleapis. com/ SecurityHealthAnalyticsSettings Not available in the analysis APIs.
-
securitycenter.googleapis. com/ VirtualMachineThreatDetectionSettings Not available in the analysis APIs.
-
securitycenter.googleapis. com/ WebSecurityScannerSettings Not available in the analysis APIs.
Security Posture API
Sensitive Data Protection
Serverless VPC Access
Service Directory
Service Management
Service Management asset change history might be incomplete. Data freshness is synchronized every 7 hours. If a sync fails, freshness is delayed until the next successful sync.
-
servicemanagement.googleapis. com/ Service Effective tags aren't supported. Not available in the analysis APIs.
Service Networking
Service Usage
Service Usage asset change history might be incomplete. The config
field in the metadata is not supported yet.
Spanner
Speaker ID
Speech-to-Text
-
speech.googleapis. com/ Endpoint Not available in the analysis APIs.
-
speech.googleapis. com/ Model Not available in the analysis APIs.
Storage Insights
Storage Transfer Service
-
storagetransfer.googleapis. com/ TransferJob Not available in the analysis APIs.
Transcoder API
Vertex AI
Vertex AI asset change history might be incomplete. Data freshness is synchronized every 7 hours. If a sync fails, freshness is delayed until the next successful sync. Some datasets' metadata (for example, the TABLE
data type) could be stale due to an ongoing data issue.
-
Theaiplatform.googleapis. com/ Endpoint deployedModelsfield is not populated. -
aiplatform.googleapis. com/ FeatureGroup Not available in the analysis APIs.
-
aiplatform.googleapis. com/ FeatureOnlineStore Not available in the analysis APIs.
-
Theaiplatform.googleapis. com/ Model deployedModelsfield is not populated. -
aiplatform.googleapis. com/ NotebookRuntime Effective tags aren't supported.
-
aiplatform.googleapis. com/ NotebookRuntimeTemplate Effective tags aren't supported.
-
aiplatform.googleapis. com/ TuningJob Not available in the analysis APIs.
Vertex AI Workbench
-
notebooks.googleapis. com/ Instance Not available in the analysis APIs.
Video Stitcher API
-
videostitcher.googleapis. com/ CdnKey Not available in the analysis APIs.
-
videostitcher.googleapis. com/ LiveConfig Not available in the analysis APIs.
-
videostitcher.googleapis. com/ Slate Not available in the analysis APIs.
-
videostitcher.googleapis. com/ VodConfig Not available in the analysis APIs.
Web Security Scanner
-
websecurityscanner.googleapis. com/ ScanConfig Not available in the analysis APIs.
Policy types
Cloud Asset Inventory uses the following asset types for the ACCESS_POLICY
, IAM_POLICY
, and ORG_POLICY
content types
.
Supported policy parent
-
cloudresourcemanager.googleapis. com/ Organization Not available in the analysis APIs.
Supported policy scope
-
cloudresourcemanager.googleapis. com/ Folder Not available in the analysis APIs.
-
cloudresourcemanager.googleapis. com/ Organization Not available in the analysis APIs.
-
cloudresourcemanager.googleapis. com/ Project Not available in the analysis APIs.
IAM policy
Data can be delayed by approximately 36 hours.
Supported resource types that IAM policies can be attached to:
- All asset types in supported resource types .
- All policy types in this table except for IAM policy itself.
-
The following IAP resource types:
-
iap.googleapis. com/ Tunnel Not available in the analysis and search APIs.
-
iap.googleapis. com/ TunnelInstance Not available in the analysis and search APIs.
-
iap.googleapis. com/ TunnelZone Not available in the analysis and search APIs.
-
iap.googleapis. com/ Web Not available in the analysis and search APIs.
-
iap.googleapis. com/ WebService Not available in the analysis and search APIs.
-
iap.googleapis. com/ WebServiceVersion Not available in the analysis and search APIs.
-
iap.googleapis. com/ WebType Not available in the analysis and search APIs.
-
Supported resource types that organization policies can be attached to:
Runtime information types
Cloud Asset Inventory uses the following asset types for the OS_INVENTORY
content type
.
OS inventory
Provides information on the operating system, installed packages, and available package updates for an instance. Learn more about OS inventory management .
-
compute.googleapis. com/ Instance Only available in analysis, list, and search APIs.
