Cloud Asset API

The cloud asset API manages the history and inventory of cloud resources.

Service: cloudasset.googleapis.com

To call this service, we recommend that you use the Google-provided client libraries. If your application needs to use your own libraries to call this service, use the following information when you make the API requests.

Discovery document

A Discovery Document is a machine-readable specification for describing and consuming REST APIs. It is used to build client libraries, IDE plugins, and other tools that interact with Google APIs. One service may provide multiple discovery documents. This service provides the following discovery documents:

Service endpoint

A service endpoint is a base URL that specifies the network address of an API service. One service might have multiple service endpoints. This service has the following service endpoint and all URIs below are relative to this service endpoint:

  • https://cloudasset.googleapis.com

REST Resource: v1p7beta1

Methods
exportAssetUpdates POST /v1p7beta1/{parent=*/*}:exportAssetUpdates
Exports asset updates within a time window to a given Cloud Storage location/BigQuery table.
exportAssets POST /v1p7beta1/{parent=*/*}:exportAssets
Exports assets with time and resource types to a given Cloud Storage location/BigQuery table.

REST Resource: v1p7beta1.assetUpdates

Methods
list GET /v1p7beta1/{parent=*/*}/assetUpdates
Lists asset updates within a time window and returns paged results in response.

REST Resource: v1p7beta1.folders

Methods
getInventorySettings GET /v1p7beta1/{name=folders/*/inventorySettings}
Gets details about an inventory setting.

REST Resource: v1p7beta1.folders.inventorySettings.exportSettings

Methods
create POST /v1p7beta1/{parent=folders/*/inventorySettings}/exportSettings
Creates an export setting.
delete DELETE /v1p7beta1/{name=folders/*/inventorySettings/exportSettings/*}
Deletes an export setting.
get GET /v1p7beta1/{name=folders/*/inventorySettings/exportSettings/*}
Gets details about an export setting.
list GET /v1p7beta1/{parent=folders/*/inventorySettings}/exportSettings
Lists all export settings under a [InventorySettings].
patch PATCH /v1p7beta1/{exportSetting.name=folders/*/inventorySettings/exportSettings/*}
Updates an export setting.

REST Resource: v1p7beta1.organizations

Methods
getInventorySettings GET /v1p7beta1/{name=organizations/*/inventorySettings}
Gets details about an inventory setting.

REST Resource: v1p7beta1.organizations.inventorySettings.exportSettings

Methods
create POST /v1p7beta1/{parent=organizations/*/inventorySettings}/exportSettings
Creates an export setting.
delete DELETE /v1p7beta1/{name=organizations/*/inventorySettings/exportSettings/*}
Deletes an export setting.
get GET /v1p7beta1/{name=organizations/*/inventorySettings/exportSettings/*}
Gets details about an export setting.
list GET /v1p7beta1/{parent=organizations/*/inventorySettings}/exportSettings
Lists all export settings under a [InventorySettings].
patch PATCH /v1p7beta1/{exportSetting.name=organizations/*/inventorySettings/exportSettings/*}
Updates an export setting.

REST Resource: v1p7beta1.projects

Methods
getInventorySettings GET /v1p7beta1/{name=projects/*/inventorySettings}
Gets details about an inventory setting.

REST Resource: v1p7beta1.projects.inventorySettings.exportSettings

Methods
create POST /v1p7beta1/{parent=projects/*/inventorySettings}/exportSettings
Creates an export setting.
delete DELETE /v1p7beta1/{name=projects/*/inventorySettings/exportSettings/*}
Deletes an export setting.
get GET /v1p7beta1/{name=projects/*/inventorySettings/exportSettings/*}
Gets details about an export setting.
list GET /v1p7beta1/{parent=projects/*/inventorySettings}/exportSettings
Lists all export settings under a [InventorySettings].
patch PATCH /v1p7beta1/{exportSetting.name=projects/*/inventorySettings/exportSettings/*}
Updates an export setting.

Service: cloudasset.googleapis.com

To call this service, we recommend that you use the Google-provided client libraries. If your application needs to use your own libraries to call this service, use the following information when you make the API requests.

Discovery document

A Discovery Document is a machine-readable specification for describing and consuming REST APIs. It is used to build client libraries, IDE plugins, and other tools that interact with Google APIs. One service may provide multiple discovery documents. This service provides the following discovery documents:

Service endpoint

A service endpoint is a base URL that specifies the network address of an API service. One service might have multiple service endpoints. This service has the following service endpoint and all URIs below are relative to this service endpoint:

  • https://cloudasset.googleapis.com

REST Resource: v1p5beta1.assets

Methods
list GET /v1p5beta1/{parent=*/*}/assets
Lists assets with time and resource types and returns paged results in response.

Service: cloudasset.googleapis.com

To call this service, we recommend that you use the Google-provided client libraries. If your application needs to use your own libraries to call this service, use the following information when you make the API requests.

Discovery document

A Discovery Document is a machine-readable specification for describing and consuming REST APIs. It is used to build client libraries, IDE plugins, and other tools that interact with Google APIs. One service may provide multiple discovery documents. This service provides the following discovery documents:

Service endpoint

A service endpoint is a base URL that specifies the network address of an API service. One service might have multiple service endpoints. This service has the following service endpoint and all URIs below are relative to this service endpoint:

  • https://cloudasset.googleapis.com

REST Resource: v1p4beta1

Methods
analyzeIamPolicy GET /v1p4beta1/{analysisQuery.parent=*/*}:analyzeIamPolicy
Analyzes IAM policies to answer which identities have what accesses on which resources.
exportIamPolicyAnalysis POST /v1p4beta1/{analysisQuery.parent=*/*}:exportIamPolicyAnalysis
Exports the answers of which identities have what accesses on which resources to a Google Cloud Storage destination.

Service: cloudasset.googleapis.com

To call this service, we recommend that you use the Google-provided client libraries. If your application needs to use your own libraries to call this service, use the following information when you make the API requests.

Discovery document

A Discovery Document is a machine-readable specification for describing and consuming REST APIs. It is used to build client libraries, IDE plugins, and other tools that interact with Google APIs. One service may provide multiple discovery documents. This service provides the following discovery documents:

Service endpoint

A service endpoint is a base URL that specifies the network address of an API service. One service might have multiple service endpoints. This service has the following service endpoint and all URIs below are relative to this service endpoint:

  • https://cloudasset.googleapis.com

REST Resource: v1p2beta1.feeds

Methods
create POST /v1p2beta1/{parent=*/*}/feeds
Creates a feed in a parent project/folder/organization to listen to its asset updates.
delete DELETE /v1p2beta1/{name=*/*/feeds/*}
Deletes an asset feed.
get GET /v1p2beta1/{name=*/*/feeds/*}
Gets details about an asset feed.
list GET /v1p2beta1/{parent=*/*}/feeds
Lists all asset feeds in a parent project/folder/organization.
patch PATCH /v1p2beta1/{feed.name=*/*/feeds/*}
Updates an asset feed configuration.

REST Resource: v1p2beta1.operations

Methods
get GET /v1p2beta1/{name=*/*/operations/*/**}
Gets the latest state of a long-running operation.

Service: cloudasset.googleapis.com

To call this service, we recommend that you use the Google-provided client libraries. If your application needs to use your own libraries to call this service, use the following information when you make the API requests.

Discovery document

A Discovery Document is a machine-readable specification for describing and consuming REST APIs. It is used to build client libraries, IDE plugins, and other tools that interact with Google APIs. One service may provide multiple discovery documents. This service provides the following discovery documents:

Service endpoint

A service endpoint is a base URL that specifies the network address of an API service. One service might have multiple service endpoints. This service has the following service endpoint and all URIs below are relative to this service endpoint:

  • https://cloudasset.googleapis.com

REST Resource: v1p1beta1.iamPolicies

Methods
searchAll GET /v1p1beta1/{scope=*/*}/iamPolicies:searchAll
Searches all the IAM policies within a given accessible CRM scope (project/folder/organization).

REST Resource: v1p1beta1.resources

Methods
searchAll GET /v1p1beta1/{scope=*/*}/resources:searchAll
Searches all the resources within a given accessible CRM scope (project/folder/organization).

Service: cloudasset.googleapis.com

To call this service, we recommend that you use the Google-provided client libraries. If your application needs to use your own libraries to call this service, use the following information when you make the API requests.

Discovery document

A Discovery Document is a machine-readable specification for describing and consuming REST APIs. It is used to build client libraries, IDE plugins, and other tools that interact with Google APIs. One service may provide multiple discovery documents. This service provides the following discovery documents:

Service endpoint

A service endpoint is a base URL that specifies the network address of an API service. One service might have multiple service endpoints. This service has the following service endpoint and all URIs below are relative to this service endpoint:

  • https://cloudasset.googleapis.com

REST Resource: v1

Methods
analyzeIamPolicy GET /v1/{analysisQuery.scope=*/*}:analyzeIamPolicy
Analyzes IAM policies to answer which identities have what accesses on which resources.
analyzeIamPolicyLongrunning POST /v1/{analysisQuery.scope=*/*}:analyzeIamPolicyLongrunning
Analyzes IAM policies asynchronously to answer which identities have what accesses on which resources, and writes the analysis results to a Google Cloud Storage or a BigQuery destination.
batchGetAssetsHistory GET /v1/{parent=*/*}:batchGetAssetsHistory
Batch gets the update history of assets that overlap a time window.
exportAssets POST /v1/{parent=*/*}:exportAssets
Exports assets with time and resource types to a given Cloud Storage location/BigQuery table.
searchAllIamPolicies GET /v1/{scope=*/*}:searchAllIamPolicies
Searches all IAM policies within the specified scope, such as a project, folder, or organization.
searchAllResources GET /v1/{scope=*/*}:searchAllResources
Searches all Cloud resources within the specified scope, such as a project, folder, or organization.

REST Resource: v1.feeds

Methods
create POST /v1/{parent=*/*}/feeds
Creates a feed in a parent project/folder/organization to listen to its asset updates.
delete DELETE /v1/{name=*/*/feeds/*}
Deletes an asset feed.
get GET /v1/{name=*/*/feeds/*}
Gets details about an asset feed.
list GET /v1/{parent=*/*}/feeds
Lists all asset feeds in a parent project/folder/organization.
patch PATCH /v1/{feed.name=*/*/feeds/*}
Updates an asset feed configuration.

REST Resource: v1.operations

Methods
get GET /v1/{name=*/*/operations/*/**}
Gets the latest state of a long-running operation.