The following table lists products and services that are supported by Sovereign Controls by Partners for each data boundary. If a service isn't listed for a given data boundary, that service is unsupported and hasn't met the control requirements for the data boundary. Unsupported products aren't recommended for use by Sovereign Controls by Partners customers without due diligence and a thorough understanding of your responsibilities in the shared responsibility model . Unsupported products may share an API endpoint with supported products, making them available to all users.
accessapproval.googleapis.com
artifactregistry.googleapis.com
gkebackup.googleapis.com
bigquery.googleapis.com
bigqueryconnection.googleapis.com
bigquerydatapolicy.googleapis.com
bigqueryreservation.googleapis.com
bigquerystorage.googleapis.com
bigquerydatatransfer.googleapis.com
bigtable.googleapis.com
bigtableadmin.googleapis.com
binaryauthorization.googleapis.com
privateca.googleapis.com
cloudbuild.googleapis.com
dns.googleapis.com
cloudkms.googleapis.com
cloudkms.googleapis.com
compute.googleapis.com
cloudkms.googleapis.com
compute.googleapis.com
logging.googleapis.com
monitoring.googleapis.com
networkconnectivity.googleapis.com
networkconnectivity.googleapis.com
run.googleapis.com
sqladmin.googleapis.com
mesh.googleapis.com
meshca.googleapis.com
meshconfig.googleapis.com
trafficdirector.googleapis.com
networkservices.googleapis.com
storage.googleapis.com
compute.googleapis.com
workstations.googleapis.com
compute.googleapis.com
gkeconnect.googleapis.com
connectgateway.googleapis.com
dataflow.googleapis.com
datapipelines.googleapis.com
file.googleapis.com
firebaserules.googleapis.com
firestore.googleapis.com
gkehub.googleapis.com
anthosidentityservice.googleapis.com
compute.googleapis.com
networksecurity.googleapis.com
container.googleapis.com
containersecurity.googleapis.com
iam.googleapis.com
policytroubleshooter.googleapis.com
iap.googleapis.com
dataplex.googleapis.com
datalineage.googleapis.com
composer.googleapis.com
dataproc-control.googleapis.com
dataproc.googleapis.com
redis.googleapis.com
networkconnectivity.googleapis.com
orgpolicy.googleapis.com
compute.googleapis.com
pubsub.googleapis.com
cloudresourcemanager.googleapis.com
secretmanager.googleapis.com
securesourcemanager.googleapis.com
dlp.googleapis.com
spanner.googleapis.com
speech.googleapis.com
accesscontextmanager.googleapis.com
compute.googleapis.com
accessapproval.googleapis.com
artifactregistry.googleapis.com
gkebackup.googleapis.com
bigquery.googleapis.com
bigqueryconnection.googleapis.com
bigquerydatapolicy.googleapis.com
bigqueryreservation.googleapis.com
bigquerystorage.googleapis.com
bigquerydatatransfer.googleapis.com
bigtable.googleapis.com
bigtableadmin.googleapis.com
binaryauthorization.googleapis.com
privateca.googleapis.com
cloudbuild.googleapis.com
dns.googleapis.com
cloudkms.googleapis.com
cloudkms.googleapis.com
compute.googleapis.com
cloudkms.googleapis.com
compute.googleapis.com
logging.googleapis.com
monitoring.googleapis.com
networkconnectivity.googleapis.com
networkconnectivity.googleapis.com
run.googleapis.com
sqladmin.googleapis.com
mesh.googleapis.com
meshca.googleapis.com
meshconfig.googleapis.com
trafficdirector.googleapis.com
networkservices.googleapis.com
storage.googleapis.com
compute.googleapis.com
workstations.googleapis.com
compute.googleapis.com
gkeconnect.googleapis.com
connectgateway.googleapis.com
dataflow.googleapis.com
datapipelines.googleapis.com
file.googleapis.com
firebaserules.googleapis.com
firestore.googleapis.com
gkehub.googleapis.com
anthosidentityservice.googleapis.com
compute.googleapis.com
networksecurity.googleapis.com
container.googleapis.com
containersecurity.googleapis.com
iam.googleapis.com
policytroubleshooter.googleapis.com
iap.googleapis.com
dataplex.googleapis.com
datalineage.googleapis.com
composer.googleapis.com
dataproc-control.googleapis.com
dataproc.googleapis.com
redis.googleapis.com
networkconnectivity.googleapis.com
orgpolicy.googleapis.com
compute.googleapis.com
pubsub.googleapis.com
cloudresourcemanager.googleapis.com
secretmanager.googleapis.com
securesourcemanager.googleapis.com
dlp.googleapis.com
spanner.googleapis.com
speech.googleapis.com
accesscontextmanager.googleapis.com
compute.googleapis.com
accessapproval.googleapis.com
artifactregistry.googleapis.com
gkebackup.googleapis.com
bigquery.googleapis.com
bigqueryconnection.googleapis.com
bigquerydatapolicy.googleapis.com
bigqueryreservation.googleapis.com
bigquerystorage.googleapis.com
bigquerydatatransfer.googleapis.com
bigtable.googleapis.com
bigtableadmin.googleapis.com
binaryauthorization.googleapis.com
privateca.googleapis.com
cloudbuild.googleapis.com
dns.googleapis.com
cloudkms.googleapis.com
cloudkms.googleapis.com
compute.googleapis.com
cloudkms.googleapis.com
compute.googleapis.com
logging.googleapis.com
monitoring.googleapis.com
networkconnectivity.googleapis.com
networkconnectivity.googleapis.com
run.googleapis.com
sqladmin.googleapis.com
mesh.googleapis.com
meshca.googleapis.com
meshconfig.googleapis.com
trafficdirector.googleapis.com
networkservices.googleapis.com
storage.googleapis.com
compute.googleapis.com
workstations.googleapis.com
compute.googleapis.com
gkeconnect.googleapis.com
connectgateway.googleapis.com
dataflow.googleapis.com
datapipelines.googleapis.com
file.googleapis.com
firebaserules.googleapis.com
firestore.googleapis.com
gkehub.googleapis.com
anthosidentityservice.googleapis.com
compute.googleapis.com
networksecurity.googleapis.com
container.googleapis.com
containersecurity.googleapis.com
iam.googleapis.com
policytroubleshooter.googleapis.com
iap.googleapis.com
dataplex.googleapis.com
datalineage.googleapis.com
composer.googleapis.com
dataproc-control.googleapis.com
dataproc.googleapis.com
redis.googleapis.com
networkconnectivity.googleapis.com
orgpolicy.googleapis.com
compute.googleapis.com
pubsub.googleapis.com
cloudresourcemanager.googleapis.com
secretmanager.googleapis.com
securesourcemanager.googleapis.com
dlp.googleapis.com
spanner.googleapis.com
speech.googleapis.com
accesscontextmanager.googleapis.com
compute.googleapis.com
accesscontextmanager.googleapis.com
accessapproval.googleapis.com
artifactregistry.googleapis.com
bigquery.googleapis.com
bigqueryconnection.googleapis.com
bigquerydatapolicy.googleapis.com
bigqueryreservation.googleapis.com
bigquerystorage.googleapis.com
bigtable.googleapis.com
bigtableadmin.googleapis.com
privateca.googleapis.com
cloudbuild.googleapis.com
dns.googleapis.com
cloudkms.googleapis.com
cloudkms.googleapis.com
compute.googleapis.com
cloudkms.googleapis.com
compute.googleapis.com
logging.googleapis.com
monitoring.googleapis.com
networkconnectivity.googleapis.com
compute.googleapis.com
networkconnectivity.googleapis.com
run.googleapis.com
sqladmin.googleapis.com
storage.googleapis.com
compute.googleapis.com
workstations.googleapis.com
compute.googleapis.com
gkeconnect.googleapis.com
connectgateway.googleapis.com
dataflow.googleapis.com
datapipelines.googleapis.com
essentialcontacts.googleapis.com
file.googleapis.com
firebaserules.googleapis.com
compute.googleapis.com
networksecurity.googleapis.com
container.googleapis.com
containersecurity.googleapis.com
gkehub.googleapis.com
iam.googleapis.com
policytroubleshooter.googleapis.com
iap.googleapis.com
dataplex.googleapis.com
datalineage.googleapis.com
dataproc-control.googleapis.com
dataproc.googleapis.com
redis.googleapis.com
networkconnectivity.googleapis.com
orgpolicy.googleapis.com
compute.googleapis.com
servicehealth.googleapis.com
pubsub.googleapis.com
cloudresourcemanager.googleapis.com
secretmanager.googleapis.com
securesourcemanager.googleapis.com
dlp.googleapis.com
spanner.googleapis.com
accesscontextmanager.googleapis.com
servicenetworking.googleapis.com
compute.googleapis.com
accesscontextmanager.googleapis.com
accessapproval.googleapis.com
artifactregistry.googleapis.com
bigquery.googleapis.com
bigqueryconnection.googleapis.com
bigquerydatapolicy.googleapis.com
bigqueryreservation.googleapis.com
bigquerystorage.googleapis.com
bigtable.googleapis.com
bigtableadmin.googleapis.com
privateca.googleapis.com
cloudbuild.googleapis.com
dns.googleapis.com
cloudkms.googleapis.com
cloudkms.googleapis.com
compute.googleapis.com
cloudkms.googleapis.com
compute.googleapis.com
logging.googleapis.com
monitoring.googleapis.com
networkconnectivity.googleapis.com
compute.googleapis.com
networkconnectivity.googleapis.com
run.googleapis.com
sqladmin.googleapis.com
storage.googleapis.com
compute.googleapis.com
workstations.googleapis.com
compute.googleapis.com
gkeconnect.googleapis.com
connectgateway.googleapis.com
dataflow.googleapis.com
datapipelines.googleapis.com
essentialcontacts.googleapis.com
file.googleapis.com
firebaserules.googleapis.com
compute.googleapis.com
networksecurity.googleapis.com
container.googleapis.com
containersecurity.googleapis.com
gkehub.googleapis.com
iam.googleapis.com
policytroubleshooter.googleapis.com
iap.googleapis.com
dataplex.googleapis.com
datalineage.googleapis.com
dataproc-control.googleapis.com
dataproc.googleapis.com
redis.googleapis.com
networkconnectivity.googleapis.com
orgpolicy.googleapis.com
compute.googleapis.com
servicehealth.googleapis.com
pubsub.googleapis.com
cloudresourcemanager.googleapis.com
secretmanager.googleapis.com
securesourcemanager.googleapis.com
dlp.googleapis.com
spanner.googleapis.com
accesscontextmanager.googleapis.com
servicenetworking.googleapis.com
compute.googleapis.com
Footnotes
1. Depending on the data boundary that you choose, different API endpoint types may be available. The API endpoints listed on this page are global API endpoints, but regional or locational API endpoints may be available or required for a given data boundary.
2. BigQuery is supported, but it isn't automatically enabled when you create a new
Assured Workloads folder due to an internal configuration process. This process normally
finishes in ten minutes, but can take much longer in some circumstances. To check whether the
process is finished and to enable BigQuery, complete the following steps:
- In the Google Cloud console, go to the Assured Workloads page.
- Select your new Assured Workloads folder from the list.
- On the Folder Details page in the Allowed services section, click Review Available Updates .
- In the Allowed services
pane, review the services to be added to the Resource Usage Restriction
organization policy for the folder. If BigQuery services are listed, click Allow Services
to add them.
If BigQuery services are not listed, wait for the internal process to complete. If the services are not listed within 12 hours of folder creation, contact Cloud Customer Care .
After the enablement process is completed, you can use BigQuery in your Assured Workloads folder.
Gemini in BigQuery is not supported by Assured Workloads.
3. Cloud Monitoring's Synthetic monitoring and Uptime checks features are not supported in Sovereign Controls by Partners.

