This document lists the supported asset types in Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
You can use these asset types with the following Cloud Asset Inventory operations:
You might also need to make use of asset names associated with these asset types when working with Cloud Asset Inventory.
Unless otherwise specified, all resource types are available in the export, list, monitor, search, and analysis APIs. Effective tags are supported only in the search APIs.
Resource types
Cloud Asset Inventory uses the following asset types for the RESOURCE
content type.
Service | Asset type |
---|---|
Access Policy (Access Context Manager) To retrieve all access policies in the export, list, and monitor APIs:
|
|
AlloyDB for PostgreSQL |
|
API Gateway |
|
API keys The |
|
Apigee |
|
App Engine The |
|
App Hub |
|
Application Integration |
|
Artifact Registry |
|
Assured Workloads |
|
Backup and DR Service |
|
Backup for GKE |
|
Batch |
|
BigQuery |
|
BigQuery Data Transfer Service BigQuery Data Transfer Service asset change history might be incomplete. Data freshness is synchronized every 7 hours. If a sync fails, freshness is delayed until the next successful sync. |
|
BigQuery Migration Service |
|
Bigtable |
|
Blockchain Node Engine |
|
|
|
Certificate Manager |
|
Cloud Billing |
|
Cloud Build |
|
Cloud Composer Cloud Composer v1beta1 is supported. The resources in v1beta1 are a superset of those in v1. |
|
Cloud Config Manager API |
|
Cloud Controls Partner API |
|
Cloud Data Fusion |
|
Cloud Deploy |
|
Cloud DNS |
|
Cloud Domains |
|
Cloud Healthcare API Cloud Healthcare API asset change history might be incomplete. Data freshness is synchronized every 7 hours. If a sync fails, freshness is delayed until the next successful sync. |
|
Cloud Intrusion Detection System |
|
Cloud Key Management Service |
|
Cloud Logging Cloud Logging asset change history might be incomplete. Data freshness is synchronized every 7 hours. If a sync fails, freshness is delayed until the next successful sync. |
|
Cloud Monitoring |
|
Cloud Next Generation Firewall Enterprise Cloud Next Generation Firewall Enterprise asset change history might be incomplete. Data freshness is synchronized every 7 hours. If a sync fails, freshness is delayed until the next successful sync. |
|
Cloud OS Config Cloud OS Config asset change history might be incomplete. Data freshness is synchronized every 7 hours. If a sync fails, freshness is delayed until the next successful sync. |
|
Cloud Quotas |
|
Cloud Run |
|
Cloud Run functions (1st and 2nd gen) This includes both 1st and 2nd gen Cloud Run functions. The asset change history might be incomplete. Data freshness is synchronized every 7 hours. If a sync fails, freshness is delayed until the next successful sync. |
|
Cloud Run functions (1st gen) This only includes 1st gen Cloud Run functions. The asset change history might be incomplete. Data freshness is synchronized every 7 hours. If a sync fails, freshness is delayed until the next successful sync. |
|
Cloud SQL Cloud SQL asset change history might be incomplete. Data freshness is synchronized every 7 hours. If a sync fails, freshness is delayed until the next successful sync. |
|
Cloud Storage |
|
Cloud Tasks |
|
Cloud TPU |
|
Cloud Workstations |
|
Compute Engine |
|
Contact Center AI Insights |
|
Container Registry Container Registry implements Docker HTTP API V2 and does not provide a public API. |
|
Data Lineage |
|
Database Migration Service |
|
Dataflow Dataflow asset change history might be incomplete. Data freshness is synchronized every 7 hours. If a sync fails, freshness is delayed until the next successful sync. |
|
Dataform |
|
Dataplex |
|
Dataproc |
|
Dataproc Metastore |
|
Datastream |
|
Developer Connect |
|
Dialogflow CX |
|
Dialogflow ES |
|
Discovery Engine |
|
Document AI |
|
Eventarc |
|
Filestore |
|
Financial Services |
|
Firebase |
|
Firestore |
|
Gemini for Google Cloud API |
|
GKE Multi-Cloud |
|
GKE on GDC GKE on GDC metadata is from Confluence, which has no public API. |
|
GKE On-Prem API |
|
Google Cloud NetApp Volumes |
|
Google Cloud VMware Engine |
|
Google Kubernetes Engine |
|
Hub |
|
Identity and Access Management v1 |
|
Identity and Access Management v2 |
|
Identity Platform |
|
Integration Connectors |
|
KRM API Hosting |
|
Live Stream API |
|
Looker |
|
Managed Service for Microsoft Active Directory |
|
Memorystore for Memcached |
|
Memorystore for Redis |
|
Migrate to Virtual Machines |
|
Network Connectivity |
|
Network Management API |
|
Network Services API |
|
Organization Policy Service |
|
Organization Policy Service v2 |
|
Privileged Access Manager |
|
Pub/Sub |
|
Resource Manager |
|
Secret Manager The |
|
Secure Source Manager Secure Source Manager asset change history might be incomplete. Data freshness is synchronized every 7 hours. If a sync fails, freshness is delayed until the next successful sync. |
|
Secure Web Proxy Secure Web Proxy asset change history might be incomplete. Data freshness is synchronized every 7 hours. If a sync fails, freshness is delayed until the next successful sync. |
|
Sensitive Data Protection |
|
Serverless VPC Access |
|
Service Directory |
|
Service Management Service Management asset change history might be incomplete. Data freshness is synchronized every 7 hours. If a sync fails, freshness is delayed until the next successful sync. |
|
Service Usage Service Usage asset change history might be incomplete. The |
|
Spanner |
|
Speaker ID |
|
Speech-to-Text |
|
Transcoder API |
|
Vertex AI Vertex AI asset change history might be incomplete. Data freshness is synchronized every 7 hours. If a sync fails, freshness is delayed until the next successful sync. Some datasets' metadata (for example, the |
|
Vertex AI Workbench |
|
Video Stitcher API |
|
Workflows |
Policy types
Cloud Asset Inventory uses the following asset types for the ACCESS_POLICY
,
IAM_POLICY
, and ORG_POLICY
content types.
Service | Asset type |
---|---|
Access policy (VPC Service Controls policy) |
Supported policy parent
Supported policy scope
|
IAM policy Data can be delayed by approximately 36 hours. |
Supported resource types that IAM policies can be attached to:
|
Organization policy |
Supported resource types that organization policies can be attached to: |
Runtime information types
Cloud Asset Inventory uses the following asset types for the OS_INVENTORY
content type.
Service | Asset type |
---|---|
OS inventory Provides information on the operating system, installed packages, and available package updates for an instance. Learn more about OS inventory management. |
|