Supported asset types in Security Command Center

This page lists the Google Cloud assets supported by the Security Command Center Assets API. The Security Command Center Assets API supports a subset of assets from Cloud Asset Inventory , Google's centralized inventory of cloud-managed assets.

Resource types in Security Command Center use a different naming convention than Cloud Asset Inventory. The following table lists supported asset types and includes the resource type format for Security Command Center. Resource types are useful when listing assets in the Security Command Center API.

Table 1. Supported asset types
Service
Cloud Asset Inventory format
Security Command Center format
App Engine
google.appengine.Application
google.appengine.Service
google.appengine.Version
Artifact Registry
google.artifactregistry.Repository
BigQuery
google.cloud.bigquery.Dataset
Cloud Composer
google.composer.Environment
Cloud DNS
google.cloud.dns.ManagedZone
google.cloud.dns.Policy
Cloud Run functions
google.cloud.functions.CloudFunction
Cloud Key Management Service
google.cloud.kms.CryptoKey
google.cloud.kms.CryptoKeyVersion
google.cloud.kms.ImportJob
google.cloud.kms.KeyRing
Cloud Logging
google.logging.LogBucket
google.logging.LogMetric
google.logging.LogSink
Spanner
google.spanner.Database
google.spanner.Instance
Cloud SQL
google.cloud.sql.Instance
Cloud Storage
google.cloud.storage.Bucket
Compute Engine
google.compute.Address
google.compute.Autoscaler
google.compute.BackendBucket
google.compute.BackendService
google.compute.Commitment
google.compute.Disk
google.compute.Firewall
google.compute.ForwardingRule
google.compute.GlobalAddress
google.compute.GlobalForwardingRule
google.compute.HealthCheck
google.compute.HttpHealthCheck
google.compute.HttpsHealthCheck
google.compute.Image
google.compute.Instance
google.compute.InstanceGroup
google.compute.InstanceGroupManager
google.compute.InstanceTemplate
google.compute.InterconnectAttachment
google.compute.License
google.compute.Network
google.compute.NetworkEndpointGroup
google.compute.NodeGroup
google.compute.NodeTemplate
google.compute.PacketMirroring
google.compute.Project
google.compute.RegionBackendService
google.compute.RegionDisk
google.compute.Reservation
google.compute.ResourcePolicy
google.compute.Route
google.compute.Router
google.compute.SecurityPolicy
google.compute.Snapshot
google.compute.SslCertificate
google.compute.SslPolicy
google.compute.Subnetwork
google.compute.TargetHttpProxy
google.compute.TargetHttpsProxy
google.compute.TargetInstance
google.compute.TargetPool
google.compute.TargetSslProxy
google.compute.TargetTcpProxy
google.compute.TargetVpnGateway
google.compute.UrlMap
google.compute.VpnGateway
google.compute.VpnGateway
google.compute.VpnTunnel
Container Registry

Note: Container Registry implements the Docker HTTP API V2 and does not provide a public API.

containerregistry.googleapis.com/Image
google.containerregistry.Image
Dataflow
google.dataflow.Job
Dataproc
google.cloud.dataproc.Cluster
Google Kubernetes Engine
google.container.Cluster
google.container.ClusterRole
google.container.ClusterRoleBinding
google.container.Namespace
google.container.Node
google.container.Pod
google.container.Role
google.container.RoleBinding
google.container.Service
Identity and Access Management
google.iam.Role
google.iam.ServiceAccount
google.iam.ServiceAccountKey
Pub/Sub
google.pubsub.Snapshot
google.pubsub.Subscription
google.pubsub.Topic
Resource Manager
google.cloud.resourcemanager.Organization
google.cloud.resourcemanager.Folder
google.cloud.resourcemanager.Project
Serverless VPC Access
google.vpcaccess.Connector
Service Usage
google.serviceusage.Service
Vertex AI
google.aiplatform.BatchPredictionJob
google.aiplatform.CustomJob
google.aiplatform.Dataset
google.aiplatform.Endpoint
google.aiplatform.HyperparameterTuningJob
google.aiplatform.Model
google.aiplatform.SpecialistPool
google.aiplatform.TrainingPipeline
Create a Mobile Website
View Site in Mobile | Classic
Share by: