Metadata storage locations

This page outlines the locations where Artifact Analysis vulnerability metadata is stored, as well as the metadata API endpoints. Platform administrators and security managers can use this information to understand regionalized service support within Artifact Analysis.

When you push container images to Artifact Registry and perform on-push vulnerability scans, Artifact Analysis automatically stores the scan results for you. A single global endpoint is used for metadata retrieval: https://containeranalysis.googleapis.com.

Upcoming changes

Starting September 30, 2024, Artifact Analysis is gradually rolling out regionalized data storage and endpoints to help support compliance with data residency requirements. The Container Analysis API stores metadata in the same region or multi-region as the Artifact Registry repository where your image is being scanned.

Once the regionalized capabilities are available for your account, you can continue using the global API endpoint to retrieve vulnerability scan results, or you can directly call the regional endpoint.

Regions and multi-regions

Metadata can be stored in the following types of locations:

  • A region is a specific geographic place, such as Tokyo or Northern Virginia.

  • A multi-region is a large geographic area, such as Asia or the United States, that contains two or more geographic places.

Data storage regions with regional endpoints

Artifact Analysis can store data in the following regions, which have both global and regional endpoints.

The format for each endpoint is https://containeranalysis.REGION.rep.googleapis.com.

Region Region description
asia-east1 Taiwan
asia-east2 Hong Kong
asia-northeast1 Tokyo
asia-northeast3 Seoul
asia-south1 Mumbai
asia-south2 Delhi
asia-southeast1 Singapore
asia-southeast2 Jakarta
australia-southeast1 Sydney
europe-central2 Warsaw
europe-north1 Finland
europe-southwest1 Madrid
europe-west1 Belgium
europe-west2 London
europe-west3 Frankfurt
europe-west4 Netherlands
europe-west6 Zürich
europe-west8 Milan
europe-west9 Paris
me-central1 Doha
me-central2 Dammam
me-west1 Tel Aviv
northamerica-northeast1 Montréal
northamerica-northeast2 Toronto
southamerica-east1 São Paulo
southamerica-west1 Santiago
us-central1 Iowa
us-east1 South Carolina
us-east4 Northern Virginia
us-east5 Columbus
us-south1 Dallas
us-west1 Oregon
us-west2 Los Angeles
us-west3 Salt Lake City
us-west4 Las Vegas

Data storage regions using the global endpoint

Artifact Analysis can store data in the following regions. You must retrieve metadata through the global endpoint, https://containeranalysis.googleapis.com.

Region Region description
africa-south1 Johannesburg
asia-northeast2 Osaka
australia-southeast2 Melbourne
europe-west10 Berlin
europe-west12 Turin

Data storage in multi-regions

Artifact Analysis can store data in the following regions, which only have a global endpoint. You must retrieve metadata through the global endpoint, https://containeranalysis.googleapis.com.

Multi-region name Multi-region description
asia Data centers in Asia
eu Data centers in the European Union
us Data centers in the United States