Cloud asset. This includes all Google Cloud Platform resources, Cloud
IAM policies, and other non-GCP assets.
Type of the asset. Example: "compute.googleapis.com/Disk".
Representation of the actual Cloud IAM policy set on a cloud
resource. For each resource, there must be at most one Cloud
IAM policy set on it.
Asset's ancestry path in Cloud Resource Manager (CRM)
hierarchy, represented as a list of relative resource names.
Ancestry path starts with the closest CRM ancestor and ending
at a visible root. If the asset is a CRM project/
folder/organization, this starts from the asset itself.
Example: ["projects/123456789", "folders/5432",
"organizations/1234"]
