Supported asset types in Security Command Center

This page lists the Google Cloud assets supported by the Security Command Center Assets API. The Security Command Center Assets API supports a subset of assets from Cloud Asset Inventory, Google's centralized inventory of cloud-managed assets.

Resource types in Security Command Center use a different naming convention than Cloud Asset Inventory. The following table lists supported asset types and includes the resource type format for Security Command Center. Resource types are useful when listing assets in the Security Command Center API.

Table 1. Supported asset types
Service Cloud Asset Inventory format Security Command Center format
App Engine appengine.googleapis.com/Application google.appengine.Application
appengine.googleapis.com/Service google.appengine.Service
appengine.googleapis.com/Version google.appengine.Version
Artifact Registry artifactregistry.googleapis.com/Repository google.artifactregistry.Repository
BigQuery bigquery.googleapis.com/Dataset google.cloud.bigquery.Dataset
Cloud Composer composer.googleapis.com/Environment google.composer.Environment
Cloud DNS dns.googleapis.com/ManagedZone google.cloud.dns.ManagedZone
dns.googleapis.com/Policy google.cloud.dns.Policy
Cloud Run functions cloudfunctions.googleapis.com/CloudFunction google.cloud.functions.CloudFunction
Cloud Key Management Service cloudkms.googleapis.com/CryptoKey google.cloud.kms.CryptoKey
cloudkms.googleapis.com/CryptoKeyVersion google.cloud.kms.CryptoKeyVersion
cloudkms.googleapis.com/ImportJob google.cloud.kms.ImportJob
cloudkms.googleapis.com/KeyRing google.cloud.kms.KeyRing
Cloud Logging logging.googleapis.com/LogBucket google.logging.LogBucket
logging.googleapis.com/LogMetric google.logging.LogMetric
logging.googleapis.com/LogSink google.logging.LogSink
Spanner spanner.googleapis.com/Database google.spanner.Database
spanner.googleapis.com/Instance google.spanner.Instance
Cloud SQL sqladmin.googleapis.com/Instance google.cloud.sql.Instance
Cloud Storage storage.googleapis.com/Bucket google.cloud.storage.Bucket
Compute Engine compute.googleapis.com/Address google.compute.Address
compute.googleapis.com/Autoscaler google.compute.Autoscaler
compute.googleapis.com/BackendBucket google.compute.BackendBucket
compute.googleapis.com/BackendService google.compute.BackendService
compute.googleapis.com/Commitment google.compute.Commitment
compute.googleapis.com/Disk google.compute.Disk
compute.googleapis.com/Firewall google.compute.Firewall
compute.googleapis.com/ForwardingRule google.compute.ForwardingRule
compute.googleapis.com/GlobalAddress google.compute.GlobalAddress
compute.googleapis.com/GlobalForwardingRule google.compute.GlobalForwardingRule
compute.googleapis.com/HealthCheck google.compute.HealthCheck
compute.googleapis.com/HttpHealthCheck google.compute.HttpHealthCheck
compute.googleapis.com/HttpsHealthCheck google.compute.HttpsHealthCheck
compute.googleapis.com/Image google.compute.Image
compute.googleapis.com/Instance google.compute.Instance
compute.googleapis.com/InstanceGroup google.compute.InstanceGroup
compute.googleapis.com/InstanceGroupManagers google.compute.InstanceGroupManager
compute.googleapis.com/InstanceTemplate google.compute.InstanceTemplate
compute.googleapis.com/InterconnectAttachment google.compute.InterconnectAttachment
compute.googleapis.com/License google.compute.License
compute.googleapis.com/Network google.compute.Network
compute.googleapis.com/NetworkEndpointGroup google.compute.NetworkEndpointGroup
compute.googleapis.com/NodeGroup google.compute.NodeGroup
compute.googleapis.com/NodeTemplate google.compute.NodeTemplate
compute.googleapis.com/PacketMirroring google.compute.PacketMirroring
compute.googleapis.com/Project google.compute.Project
compute.googleapis.com/RegionBackendService google.compute.RegionBackendService
compute.googleapis.com/RegionDisk google.compute.RegionDisk
compute.googleapis.com/Reservation google.compute.Reservation
compute.googleapis.com/ResourcePolicy google.compute.ResourcePolicy
compute.googleapis.com/Route google.compute.Route
compute.googleapis.com/Router google.compute.Router
compute.googleapis.com/SecurityPolicy google.compute.SecurityPolicy
compute.googleapis.com/Snapshot google.compute.Snapshot
compute.googleapis.com/SslCertificate google.compute.SslCertificate
compute.googleapis.com/SslPolicy google.compute.SslPolicy
compute.googleapis.com/Subnetwork google.compute.Subnetwork
compute.googleapis.com/TargetHttpProxy google.compute.TargetHttpProxy
compute.googleapis.com/TargetHttpsProxy google.compute.TargetHttpsProxy
compute.googleapis.com/TargetInstance google.compute.TargetInstance
compute.googleapis.com/TargetPool google.compute.TargetPool
compute.googleapis.com/TargetSslProxy google.compute.TargetSslProxy
compute.googleapis.com/TargetTcpProxy google.compute.TargetTcpProxy
compute.googleapis.com/TargetVpnGateway google.compute.TargetVpnGateway
compute.googleapis.com/UrlMap google.compute.UrlMap
compute.googleapis.com/VpnGateway google.compute.VpnGateway
compute.googleapis.com/VpnGateway google.compute.VpnGateway
compute.googleapis.com/VpnTunnel google.compute.VpnTunnel
Container Registry

Note: Container Registry implements the Docker HTTP API V2 and does not provide a public API.

 containerregistry.googleapis.com/Image google.containerregistry.Image
Dataflow dataflow.googleapis.com/Job google.dataflow.Job
Dataproc dataproc.googleapis.com/Cluster google.cloud.dataproc.Cluster
Google Kubernetes Engine container.googleapis.com/Cluster google.container.Cluster
rbac.authorization.k8s.io/ClusterRole google.container.ClusterRole
rbac.authorization.k8s.io/ClusterRoleBinding google.container.ClusterRoleBinding
k8s.io/Namespace google.container.Namespace
k8s.io/Node google.container.Node
k8s.io/Pod google.container.Pod
rbac.authorization.k8s.io/Role google.container.Role
rbac.authorization.k8s.io/RoleBinding google.container.RoleBinding
k8s.io/Service google.container.Service
Identity and Access Management iam.googleapis.com/Role google.iam.Role
iam.googleapis.com/ServiceAccount google.iam.ServiceAccount
iam.googleapis.com/ServiceAccountKey google.iam.ServiceAccountKey
Pub/Sub pubsub.googleapis.com/Snapshot google.pubsub.Snapshot
pubsub.googleapis.com/Subscription google.pubsub.Subscription
pubsub.googleapis.com/Topic google.pubsub.Topic
Resource Manager cloudresourcemanager.googleapis.com/Organization google.cloud.resourcemanager.Organization
cloudresourcemanager.googleapis.com/Folder google.cloud.resourcemanager.Folder
cloudresourcemanager.googleapis.com/Project google.cloud.resourcemanager.Project
Serverless VPC Access vpcaccess.googleapis.com/Connector google.vpcaccess.Connector
Service Usage serviceusage.googleapis.com/Service google.serviceusage.Service
Vertex AI aiplatform.googleapis.com/BatchPredictionJob google.aiplatform.BatchPredictionJob
aiplatform.googleapis.com/CustomJob google.aiplatform.CustomJob
aiplatform.googleapis.com/Dataset google.aiplatform.Dataset
aiplatform.googleapis.com/Endpoint google.aiplatform.Endpoint
aiplatform.googleapis.com/HyperparameterTuningJob google.aiplatform.HyperparameterTuningJob
aiplatform.googleapis.com/Model google.aiplatform.Model
aiplatform.googleapis.com/SpecialistPool google.aiplatform.SpecialistPool
aiplatform.googleapis.com/TrainingPipeline google.aiplatform.TrainingPipeline