Cloud Asset Inventory release notes

The following resource types are publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, SearchAllResources, and SearchAllIamPolicies APIs.

• Apigee
  • apigee.googleapis.com/SecurityAction
  • apigee.googleapis.com/SecurityMonitoringCondition
  • apigee.googleapis.com/SecurityProfileV2
• Cloud Key Management Service
  • cloudkms.googleapis.com/RetiredResource
• Hypercompute Cluster
  • hypercomputecluster.googleapis.com/Cluster

The following resource types are publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, SearchAllResources, and SearchAllIamPolicies APIs.

• App Lifecycle Manager
  • saasservicemgmt.googleapis.com/Saas
  • saasservicemgmt.googleapis.com/Tenant
  • saasservicemgmt.googleapis.com/UnitKind
  • saasservicemgmt.googleapis.com/Unit
  • saasservicemgmt.googleapis.com/Release
• Backup and DR
  • backupdr.googleapis.com/BackupPlanRevision
• Parallelstore
  • parallelstore.googleapis.com/Instance
• Vertex AI
  • aiplatform.googleapis.com/DeploymentResourcePool

Cloud Asset Inventory now supports listing assets over Model Context Protocol (MCP) (Preview).

The following resource type is publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, SearchAllResources, and SearchAllIamPolicies APIs.

• Storage Batch Operations API
  • storagebatchoperations.googleapis.com/Job

The following resource type is publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, SearchAllResources, and SearchAllIamPolicies APIs.

• Vertex AI
  • aiplatform.googleapis.com/CachedContent

The following resource types are publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, SearchAllResources, and SearchAllIamPolicies APIs.

• Cloud Load Balancing
  • networksecurity.googleapis.com/AuthzPolicy
• Network Services API
  • networkservices.googleapis.com/AuthzExtension

The following resource types are publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, SearchAllResources, and SearchAllIamPolicies APIs.

• Apigee
  • apigee.googleapis.com/ApiProxy
  • apigee.googleapis.com/ApiProxyRevision
  • apigee.googleapis.com/Environment

The following resource types are publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, SearchAllResources, and SearchAllIamPolicies APIs.

• Cloud Run
  • run.googleapis.com/WorkerPool
• Dataform
  • dataform.googleapis.com/TeamFolder
  • dataform.googleapis.com/Folder
• Discovery Engine
  • discoveryengine.googleapis.com/Assistant

The following resource types are publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, SearchAllResources, and SearchAllIamPolicies APIs.

• Bigtable
  • bigtableadmin.googleapis.com/LogicalView

The following resource types are publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, SearchAllResources, and SearchAllIamPolicies APIs.

• BigQuery
  • bigquery.googleapis.com/Routine

The following resource types are publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, SearchAllResources, and SearchAllIamPolicies APIs.

• Bigtable
  • bigtableadmin.googleapis.com/AuthorizedView

The location granularity for the following Bigtable Backup resource type has changed from global to regional.

• bigtableadmin.googleapis.com/Backup

The following resource types are publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, SearchAllResources, and SearchAllIamPolicies APIs.

• Network Connectivity
  • networkconnectivity.googleapis.com/InternalRange
• Network Security Integration
  • networksecurity.googleapis.com/InterceptDeploymentGroup
  • networksecurity.googleapis.com/InterceptDeployment
  • networksecurity.googleapis.com/InterceptEndpointGroup
  • networksecurity.googleapis.com/InterceptEndpointGroupAssociation

The following resource types are publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, SearchAllResources, and SearchAllIamPolicies APIs.

• BigQuery
  • bigquery.googleapis.com/RowAccessPolicy

The following resource types are publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, SearchAllResources, and SearchAllIamPolicies APIs.

• BigQuery sharing
  • analyticshub.googleapis.com/DataExchange
  • analyticshub.googleapis.com/Listing

The following resource types are publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, SearchAllResources, and SearchAllIamPolicies APIs.

• Vertex AI
  • aiplatform.googleapis.com/ReasoningEngine

The following resource types are publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Identity and Access Management

  • iam.googleapis.com/OauthClient
  • iam.googleapis.com/OauthClientCredential
  • iam.googleapis.com/WorkforcePool
  • iam.googleapis.com/WorkforcePoolProvider
  • iam.googleapis.com/WorkforcePoolProviderKey
  • iam.googleapis.com/WorkloadIdentityPool
  • iam.googleapis.com/WorkloadIdentityPoolProvider
  • iam.googleapis.com/WorkloadIdentityPoolProviderKey

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Cloud Speech-to-Text
  • speech.googleapis.com/Endpoint
  • speech.googleapis.com/Model
• Looker
  • looker.googleapis.com/Backup

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Contact Center AI Insights API
  • contactcenterinsights.googleapis.com/EncryptionSpec
• Network Security API
  • networksecurity.googleapis.com/MirroringDeployment
  • networksecurity.googleapis.com/MirroringDeploymentGroup
  • networksecurity.googleapis.com/MirroringEndpointGroup
  • networksecurity.googleapis.com/MirroringEndpointGroupAssociation

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Service Management API
  • servicemanagement.googleapis.com/Service

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, and Feed APIs.

• Parameter Manager
  • parametermanager.googleapis.com/Parameter
  • parametermanager.googleapis.com/ParameterVersion

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Cloud Spanner
  • spanner.googleapis.com/InstancePartition

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Security Command Center
  • websecurityscanner.googleapis.com/ScanConfig

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, and Feed APIs.

• Firebase Data Connect
  • firebasedataconnect.googleapis.com/Connector
  • firebasedataconnect.googleapis.com/Schema
  • firebasedataconnect.googleapis.com/Service
• Integration Connectors
  • connectors.googleapis.com/RegionalSetting
  • connectors.googleapis.com/Setting
• Network Connectivity
  • networkconnectivity.googleapis.com/Group

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Dataplex Universal Catalog
  • dataplex.googleapis.com/Glossary

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Backup and DR Service
  • backupdr.googleapis.com/Backup
  • backupdr.googleapis.com/BackupVault
  • backupdr.googleapis.com/DataSource
• Discovery Engine
  • discoveryengine.googleapis.com/Notebook
• Migrate to Virtual Machines
  • vmmigration.googleapis.com/ImageImport

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Cloud Deploy
  • clouddeploy.googleapis.com/Automation
  • clouddeploy.googleapis.com/AutomationRun
  • clouddeploy.googleapis.com/CustomTargetType
  • clouddeploy.googleapis.com/DeployPolicy
  • clouddeploy.googleapis.com/JobRun
• Dataproc Metastore
  • metastore.googleapis.com/Federation

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Cloud DNS
  • dns.googleapis.com/ResourceRecordSet
  • dns.googleapis.com/ResponsePolicy
  • dns.googleapis.com/ResponsePolicyRule

The following resource types are now publicly available through the Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Eventarc
  • eventarc.googleapis.com/Enrollment
  • eventarc.googleapis.com/GoogleApiSource
  • eventarc.googleapis.com/MessageBus
  • eventarc.googleapis.com/Pipeline

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Firestore
  • firestore.googleapis.com/Backup

The following resource types are now publicly available through the Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Eventarc
  • eventarc.googleapis.com/Channel
  • eventarc.googleapis.com/ChannelConnection

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Security Command Center
  • securitycenter.googleapis.com/BigQueryExport
  • securitycenter.googleapis.com/ContainerThreatDetectionSettings
  • securitycenter.googleapis.com/EventThreatDetectionSettings
  • securitycenter.googleapis.com/MuteConfig
  • securitycenter.googleapis.com/NotificationConfig
  • securitycenter.googleapis.com/ResourceValueConfig
  • securitycenter.googleapis.com/SecurityHealthAnalyticsSettings
  • securitycenter.googleapis.com/VirtualMachineThreatDetectionSettings
  • securitycenter.googleapis.com/WebSecurityScannerSettings
• Oracle Database@Google Cloud
  • oracledatabase.googleapis.com/AutonomousDatabase
  • oracledatabase.googleapis.com/CloudExadataInfrastructure
  • oracledatabase.googleapis.com/CloudVmCluster

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, and Feed APIs.

• GKE Hub API
  • gkehub.googleapis.com/MembershipFeature

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, and Feed APIs.

• Eventarc
  • eventarc.googleapis.com/Channel
  • eventarc.googleapis.com/ChannelConnection

The following resource types are now publicly available through the analyze policy (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning) APIs.

• Compute Engine
  • compute.googleapis.com/StoragePool
• Discovery Engine
  • discoveryengine.googleapis.com/Engine

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, and Feed APIs.

• Eventarc
  • eventarc.googleapis.com/Enrollment
  • eventarc.googleapis.com/GoogleApiSource
  • eventarc.googleapis.com/MessageBus
  • eventarc.googleapis.com/Pipeline

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Security Command Center Management API
  • securitycentermanagement.googleapis.com/EventThreatDetectionCustomModule
  • securitycentermanagement.googleapis.com/SecurityCenterService
  • securitycentermanagement.googleapis.com/SecurityHealthAnalyticsCustomModule

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Binary Authorization
  • binaryauthorization.googleapis.com/Attestor
  • binaryauthorization.googleapis.com/PlatformPolicy
  • binaryauthorization.googleapis.com/Policy
• Compute Engine
  • compute.googleapis.com/InstanceSettings
• Network Security
  • networksecurity.googleapis.com/AuthorizationPolicy
  • networksecurity.googleapis.com/ClientTlsPolicy
  • networksecurity.googleapis.com/ServerTlsPolicy

The following resource types are now publicly available through the analyze policy (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning) APIs.

• Developer Connect
  • developerconnect.googleapis.com/Connection
  • developerconnect.googleapis.com/GitRepositoryLink

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Storage Transfer Service
  • storagetransfer.googleapis.com/TransferJob

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• GKE On-Prem API
  • gkeonprem.googleapis.com/BareMetalCluster
  • gkeonprem.googleapis.com/BareMetalNodePool
  • gkeonprem.googleapis.com/VmwareCluster
  • gkeonprem.googleapis.com/VmwareNodePool

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Vertex AI
  • aiplatform.googleapis.com/FeatureGroup
  • aiplatform.googleapis.com/NotebookRuntimeTemplate
• Assured Workloads
  • accessapproval.googleapis.com/AccessApprovalSettings

The following resource types are now publicly available through the analyze policy (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning) APIs.

• Compute Engine
  • compute.googleapis.com/NetworkEdgeSecurityService
• Gemini for Google Cloud
  • cloudaicompanion.googleapis.com/CodeRepositoryIndex
  • cloudaicompanion.googleapis.com/RepositoryGroup
• Google Cloud NetApp Volumes
  • netapp.googleapis.com/Backup
  • netapp.googleapis.com/BackupPolicy
  • netapp.googleapis.com/BackupVault
• Memorystore
  • redis.googleapis.com/Cluster

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Essential Contacts API
  • essentialcontacts.googleapis.com/Contact

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Backup and Disaster Recovery
  • backupdr.googleapis.com/BackupPlan
  • backupdr.googleapis.com/BackupPlanAssociation

The following resource types are now publicly available through the analyze policy (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning) APIs.

• Google Kubernetes Engine
  • admissionregistration.k8s.io/ValidatingWebhookConfiguration
• BigQuery Data Transfer API
  • bigquerydatatransfer.googleapis.com/TransferConfig

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Cloud Asset Inventory
  • cloudasset.googleapis.com/Feed
• Firebase
  • firebaserules.googleapis.com/Release
  • firebaserules.googleapis.com/Ruleset
• Identity-Aware Proxy
  • iap.googleapis.com/TunnelDestGroup

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, Search (SearchAllResources, SearchAllIamPolicies), and analyze policy (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning) APIs.

• Cloud Storage
  • storageinsights.googleapis.com/ReportConfig
  • storageinsights.googleapis.com/ReportDetail

The following resource types are now publicly available through the analyze policy (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning) APIs.

• Identity Platform
  • identitytoolkit.googleapis.com/Config
• KRM API Hosting
  • krmapihosting.googleapis.com/KrmApiHost

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Resource Manager
  • cloudresourcemanager.googleapis.com/Lien

The following resource types are now publicly available through the analyze policy (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning) APIs.

• Cloud Next Generation Firewall Enterprise
  • networksecurity.googleapis.com/AddressGroup

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Managed Service for Apache Kafka
  • managedkafka.googleapis.com/Cluster

The following resource types are now publicly available through the analyze policy (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning) APIs.

• Backup and DR
  • backupdr.googleapis.com/ManagementServer
• Database Migration API
  • datamigration.googleapis.com/ConversionWorkspace
• Google Kubernetes Engine
  • k8s.io/Endpoints
• Security Command Center
  • securityposture.googleapis.com/Posture
  • securityposture.googleapis.com/PostureDeployment
• Vertex AI
  • aiplatform.googleapis.com/NotebookRuntime
  • aiplatform.googleapis.com/NotebookRuntimeTemplate

The following resource types are now publicly available through the analyze policy (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning) APIs.

• Live Stream API
  • livestream.googleapis.com/Asset
  • livestream.googleapis.com/Channel
  • livestream.googleapis.com/Input
  • livestream.googleapis.com/Pool

The following resource types are now publicly available through the analyze policy (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning) APIs.

• Conversational Insights
  • contactcenterinsights.googleapis.com/IssueModel
  • contactcenterinsights.googleapis.com/PhraseMatcher
  • contactcenterinsights.googleapis.com/View
• Google Kubernetes Engine
  • admissionregistration.k8s.io/MutatingWebhookConfiguration
  • apps.k8s.io/DaemonSet
  • apps.k8s.io/StatefulSet
  • batch.k8s.io/CronJob
  • k8s.io/PersistentVolume
  • k8s.io/PersistentVolumeClaim
  • k8s.io/PodTemplate
  • k8s.io/ReplicationController
  • k8s.io/ResourceQuota
  • policy.k8s.io/PodDisruptionBudget
  • storage.k8s.io/StorageClass

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Infrastructure Manager
  • config.googleapis.com/Preview

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, and Feed APIs.

• Apigee API Hub
  • apihub.googleapis.com/ApiHubInstance

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, and Feed APIs.

• Cloud Build
  • cloudbuild.googleapis.com/Build

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Dataplex
  • dataplex.googleapis.com/AspectType
  • dataplex.googleapis.com/EntryGroup
  • dataplex.googleapis.com/EntryType

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Dataproc API
  • dataproc.googleapis.com/Session
• Identity Platform
  • identitytoolkit.googleapis.com/DefaultSupportedIdpConfig
  • identitytoolkit.googleapis.com/InboundSamlConfig
  • identitytoolkit.googleapis.com/OauthIdpConfig
  • identitytoolkit.googleapis.com/Tenant
• Vertex AI
  • aiplatform.googleapis.com/TuningJob

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Video Stitcher API
  • videostitcher.googleapis.com/CdnKey
  • videostitcher.googleapis.com/LiveConfig
  • videostitcher.googleapis.com/Slate
  • videostitcher.googleapis.com/VodConfig

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Network Services API
  • networkservices.googleapis.com/WasmPlugin
  • networkservices.googleapis.com/WasmPluginVersion
• Artifact Registry
  • artifactregistry.googleapis.com/Rule

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Data Lineage API
  • datalineage.googleapis.com/Process
• Cloud Logging
  • logging.googleapis.com/Link
• Cloud Next Generation Firewall Enterprise
  • networksecurity.googleapis.com/AddressGroup
• Gemini for Google Cloud API
  • cloudaicompanion.googleapis.com/CodeRepositoryIndex
  • cloudaicompanion.googleapis.com/RepositoryGroup

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Developer Connect
  • developerconnect.googleapis.com/Connection
  • developerconnect.googleapis.com/GitRepositoryLink
• Cloud Logging
  • logging.googleapis.com/LogView
  • logging.googleapis.com/Settings
  • logging.googleapis.com/RecentQuery
  • logging.googleapis.com/SavedQuery

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Secure Web Proxy
  • networksecurity.googleapis.com/FirewallEndpoint
  • networksecurity.googleapis.com/FirewallEndpointAssociation
  • networksecurity.googleapis.com/SecurityProfile
  • networksecurity.googleapis.com/SecurityProfileGroup
  • networkservices.googleapis.com/ServiceLbPolicy
  • networksecurity.googleapis.com/TlsInspectionPolicy

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Pub/Sub
  • pubsub.googleapis.com/Schema
• Secure Web Proxy
  • networksecurity.googleapis.com/GatewaySecurityPolicy
  • networksecurity.googleapis.com/GatewaySecurityPolicyRule
  • networksecurity.googleapis.com/UrlList

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Cloud Controls Partner APIs
  • cloudcontrolspartner.googleapis.com/Partner
  • cloudcontrolspartner.googleapis.com/Customer
  • cloudcontrolspartner.googleapis.com/Workload

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• GKE On-prem API
  • gkeonprem.googleapis.com/BareMetalCluster
  • gkeonprem.googleapis.com/BareMetalNodePool
  • gkeonprem.googleapis.com/VmwareCluster
  • gkeonprem.googleapis.com/VmwareNodePool

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Vertex AI
  • aiplatform.googleapis.com/NotebookExecutionJob

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Backup and DR Service
  • backupdr.googleapis.com/ManagementServer
• Google Kubernetes Engine
  • k8s.io/Endpoints

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Compute Engine
  • compute.googleapis.com/InstantSnapshot

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Cloud Monitoring
  • monitoring.googleapis.com/UptimeCheckConfig

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Secure Source Manager
  • securesourcemanager.googleapis.com/Instance

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Google Kubernetes Engine
  • admissionregistration.k8s.io/MutatingWebhookConfiguration
  • apps.k8s.io/DaemonSet
  • apps.k8s.io/StatefulSet
  • batch.k8s.io/CronJob
  • extensions.k8s.io/DaemonSet
  • k8s.io/PersistentVolume
  • k8s.io/PersistentVolumeClaim
  • k8s.io/PodTemplate
  • k8s.io/ReplicationController
  • k8s.io/ResourceQuota
  • policy.k8s.io/PodDisruptionBudget
  • storage.k8s.io/StorageClass
  • gateway.networking.k8s.io/Gateway
  • gateway.networking.k8s.io/GatewayClass
  • gateway.networking.k8s.io/HTTPRoute

The following resource types are now publicly available through the Analyze IAM Policies APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning).

• Cloud Config Manager API
  • config.googleapis.com/Deployment
• Cloud Monitoring
  • monitoring.googleapis.com/NotificationChannel
  • monitoring.googleapis.com/Snooze

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Cloud Monitoring
  • monitoring.googleapis.com/Dashboard
• Discovery Engine
  • discoveryengine.googleapis.com/Engine

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Compute Engine
  • compute.googleapis.com/StoragePool

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• AI Platform
  • aiplatform.googleapis.com/Index
  • aiplatform.googleapis.com/IndexEndpoint
• Compute Engine
  • compute.googleapis.com/NetworkAttachment

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Vertex AI Workbench
  • notebooks.googleapis.com/Instance

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• App Hub

  • apphub.googleapis.com/Application
  • apphub.googleapis.com/Service
  • apphub.googleapis.com/ServiceProjectAttachment
  • apphub.googleapis.com/Workload

• Integration Connectors

  • connectors.googleapis.com/EndpointAttachment
  • connectors.googleapis.com/EventSubscription
  • connectors.googleapis.com/ManagedZone

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Apigee
  • apigee.googleapis.com/Instance
  • apigee.googleapis.com/Organization

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Compute Engine
  • compute.googleapis.com/NetworkEdgeSecurityService
• Database Migration
  • datamigration.googleapis.com/ConversionWorkspace
• Redis
  • redis.googleapis.com/Cluster

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• NetApp
  • netapp.googleapis.com/Backup
  • netapp.googleapis.com/BackupPolicy
  • netapp.googleapis.com/BackupVault

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Cloud Configuration Manager API
  • config.googleapis.com/Deployment

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• GKE Hub
  • gkehub.googleapis.com/Fleet
  • gkehub.googleapis.com/Scope
  • gkehub.googleapis.com/Namespace
  • gkehub.googleapis.com/MembershipBinding
  • gkehub.googleapis.com/RBACRoleBinding
• AI Platform
  • aiplatform.googleapis.com/NotebookRuntime
  • aiplatform.googleapis.com/NotebookRuntimeTemplate

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Cloud SQL
  • sqladmin.googleapis.com/Backup
• Cloud Monitoring
  • monitoring.googleapis.com/NotificationChannel
  • monitoring.googleapis.com/Snooze
• VPC Service Controls Policy
  • accesscontextmanager.googleapis.com/AuthorizedOrgsDesc

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Live Stream API
  • livestream.googleapis.com/Asset
  • livestream.googleapis.com/Channel
  • livestream.googleapis.com/Input
  • livestream.googleapis.com/Pool

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Network Connectivity Center
  • networkconnectivity.googleapis.com/RouteTable
  • networkconnectivity.googleapis.com/HubRoute

The following resource types are now publicly available through the analyze policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning).

• Blockchain Node Engine
  • blockchainnodeengine.googleapis.com/BlockchainNode

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• BigQuery Data Transfer Service
  • bigquerydatatransfer.googleapis.com/TransferConfig
• Identity Platform
  • identitytoolkit.googleapis.com/Config

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Blockchain Node Engine
  • blockchainnodeengine.googleapis.com/BlockchainNode

The following resource types are now publicly available through the analyze policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning).

• GKE Enterprise
  • gkemulticloud.googleapis.com/AttachedCluster
  • gkemulticloud.googleapis.com/AwsCluster
  • gkemulticloud.googleapis.com/AwsNodePool
  • gkemulticloud.googleapis.com/AzureClient
  • gkemulticloud.googleapis.com/AzureCluster
  • gkemulticloud.googleapis.com/AzureNodePool

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Cloud Build
  • cloudbuild.googleapis.com/BitbucketServerConfig
  • cloudbuild.googleapis.com/BuildTrigger
  • cloudbuild.googleapis.com/GithubEnterpriseConfig
  • cloudbuild.googleapis.com/GlobalTriggerSettings
  • cloudbuild.googleapis.com/Installation
  • cloudbuild.googleapis.com/WorkerPool

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Kubernetes Resource Model
  • krmapihosting.googleapis.com/KrmApiHost

The following resource types are now publicly available through the analyze policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning).

• Google Cloud VMWare Engine
  • vmwareengine.googleapis.com/ExternalAccessRule
  • vmwareengine.googleapis.com/ExternalAddress
  • vmwareengine.googleapis.com/NetworkPeering
  • vmwareengine.googleapis.com/NetworkPolicy
  • vmwareengine.googleapis.com/PrivateCloud
  • vmwareengine.googleapis.com/Cluster
  • vmwareengine.googleapis.com/PrivateConnection
  • vmwareengine.googleapis.com/VmwareEngineNetwork
• Financial Services
  • financialservices.googleapis.com/Instance
• Discovery Engine
  • discoveryengine.googleapis.com/DataStore
  • discoveryengine.googleapis.com/Collection

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Google Cloud VMWare Engine
  • vmwareengine.googleapis.com/ExternalAccessRule
  • vmwareengine.googleapis.com/ExternalAddress
  • vmwareengine.googleapis.com/NetworkPeering
  • vmwareengine.googleapis.com/NetworkPolicy
  • vmwareengine.googleapis.com/PrivateCloud
  • vmwareengine.googleapis.com/Cluster
  • vmwareengine.googleapis.com/PrivateConnection
  • vmwareengine.googleapis.com/VmwareEngineNetwork

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• admissionregistration.k8s.io/ValidatingWebhookConfiguration

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Financial Services
  • financialservices.googleapis.com/Dataset
  • financialservices.googleapis.com/BacktestResult
  • financialservices.googleapis.com/EngineConfig
  • financialservices.googleapis.com/Model
  • financialservices.googleapis.com/PredictionResult

The following resource types are now publicly available through the Search APIs (SearchAllResources, SearchAllIamPolicies):

• autoscaling.k8s.io/HorizontalPodAutoscaler
• k8s.io/ServiceAccount

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, and Feed APIs:

• ContactCenter AI Insights
  • contactcenterinsights.googleapis.com/IssueModel
  • contactcenterinsights.googleapis.com/PhraseMatcher
  • contactcenterinsights.googleapis.com/View

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, and Feed APIs.

• Identity and Access Management
  • iam.googleapis.com/PolicyV2

New searchable fields are now available.

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed API, and Search APIs (SearchAllResources, SearchAllIamPolicies).

• netapp.googleapis.com/StoragePool
• netapp.googleapis.com/Volume
• netapp.googleapis.com/Snapshot
• netapp.googleapis.com/ActiveDirectory
• netapp.googleapis.com/KmsConfig
• netapp.googleapis.com/Replication

New searchable fields are now available.

The following searchable fields are now publicly available through the resource search API (SearchAllResources).

• effectiveTagKeys
• effectiveTagValues
• effectiveTagValueIds

The following search result fields are now publicly available through the resource search API (SearchAllResources).

• tags
• effectiveTags

The following resource types are now publicly available through the analyze policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning).

• MachineImage for Compute Engine
  • compute.googleapis.com/MachineImage

The following resource types are now publicly available through the analyze policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning).

• Identity and Access Management
  • iam.googleapis.com/PolicyV2

The following resource types are now publicly available through the analyze policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning).

• Cloud Tasks

  • cloudtasks.googleapis.com/Queue

• Organization Policy

  • orgpolicy.googleapis.com/CustomConstraint

The following resource types are now publicly available through the analyze policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning).

• Speaker ID
  • speakerid.googleapis.com/Settings

The following resource types are now publicly available through the Search APIs (SearchAllResources, SearchAllIamPolicies).

• Financial Services
  • financialservices.googleapis.com/Instance
• Discovery Engine
  • discoveryengine.googleapis.com/Collection
  • discoveryengine.googleapis.com/DataStore

The following resource types are now publicly available through the Search APIs (SearchAllResources, SearchAllIamPolicies).

• IAM

  • iam.googleapis.com/PolicyV2

• Anthos Multi-Cloud (previously GKE Multi-Cloud)

  • gkemulticloud.googleapis.com/AwsCluster
  • gkemulticloud.googleapis.com/AzureCluster
  • gkemulticloud.googleapis.com/AzureClient
  • gkemulticloud.googleapis.com/AwsNodePool
  • gkemulticloud.googleapis.com/AttachedCluster
  • gkemulticloud.googleapis.com/AzureNodePool

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, and Feed APIs.

• Financial Services
  • financialservices.googleapis.com/Instance
• Discovery Engine
  • discoveryengine.googleapis.com/Collection
  • discoveryengine.googleapis.com/DataStore

The following resource types are now publicly available through the analyze policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning).

• Speaker ID
  • speakerid.googleapis.com/Speaker
  • speakerid.googleapis.com/Phrase

The following resource types are now publicly available through the analyze policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning).

• Dataform
  • dataform.googleapis.com/CompilationResult
  • dataform.googleapis.com/ReleaseConfig
  • dataform.googleapis.com/Repository
  • dataform.googleapis.com/WorkflowConfig
  • dataform.googleapis.com/WorkflowInvocation
  • dataform.googleapis.com/Workspace

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, and Feed APIs.

• GKE Multicloud
  • gkemulticloud.googleapis.com/AwsCluster
  • gkemulticloud.googleapis.com/AzureCluster
  • gkemulticloud.googleapis.com/AzureClient
  • gkemulticloud.googleapis.com/AwsNodePool
  • gkemulticloud.googleapis.com/AttachedCluster
  • gkemulticloud.googleapis.com/AzureNodePool

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed API, and Search APIs (SearchAllResources, SearchAllIamPolicies).

• MachineImage for Compute Engine
  • compute.googleapis.com/MachineImage

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed API.

• AlloyDB for PostgreSQL
  • alloydb.googleapis.com/Backup
  • alloydb.googleapis.com/Cluster
  • alloydb.googleapis.com/Instance

The following resource types are now publicly available through the analyze policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning).

• BigQuery Migration Service
  • bigquerymigration.googleapis.com/MigrationWorkflow

The following resource types are now publicly available through the analyze policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning).

• Network Connectivity
  • networkconnectivity.googleapis.com/PolicyBasedRoute
• Database migration
  • datamigration.googleapis.com/PrivateConnection

The following resource types are now publicly available through the analyze policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning).

• Service Directory
  • servicedirectory.googleapis.com/Endpoint
  • servicedirectory.googleapis.com/Service

Projects enrolled in the Security Command Center Premium tier now have access to SQL-like asset queries for that project. Previously asset queries were only available when an organization was enrolled in the Security Command Center Premium tier.

The following resource types are now publicly available through the analyze policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning).

• Cloud Spanner
  • spanner.googleapis.com/InstanceConfig

The following resource types are now publicly available through the analyze policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning).

• Cloud KMS
  • cloudkms.googleapis.com/EkmConfig

The following resource types are now publicly available through the Export APIs (ExportAssets, ListAssets, and BatchGetAssetsHistory), Feed API, and Search APIs (SearchAllResources, SearchAllIamPolicies).

• Dataplex
  • dataplex.googleapis.com/DataScan
  • dataplex.googleapis.com/Environment

The following resource types are now publicly available through the analyze policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning).

• Workflows
  • workflows.googleapis.com/Workflow

The following resource types are now publicly available through the Export APIs (ExportAssets, ListAssets, and BatchGetAssetsHistory), Feed API, and Search APIs (SearchAllResources, SearchAllIamPolicies).

• CloudTasks
  • cloudtasks.googleapis.com/Queue

The following resource types are now publicly available through the Export APIs (ExportAssets, ListAssets, and BatchGetAssetsHistory), Feed API, and Search APIs (SearchAllResources, SearchAllIamPolicies).

• Dataform
  • dataform.googleapis.com/CompilationResult
  • dataform.googleapis.com/ReleaseConfig
  • dataform.googleapis.com/Repository
  • dataform.googleapis.com/WorkflowConfig
  • dataform.googleapis.com/WorkflowInvocation
  • dataform.googleapis.com/Workspace

The following resource types are now publicly available through the Export APIs (ExportAssets, ListAssets, and BatchGetAssetsHistory), Feed API, and Search APIs (SearchAllResources, SearchAllIamPolicies).

• BigqueryMigration
  • bigquerymigration.googleapis.com/MigrationWorkflow

The following resource types are now publicly available through the Export APIs (ExportAssets, ListAssets, and BatchGetAssetsHistory) and Feed API.

• AI Platform
  • aiplatform.googleapis.com/NasJob

The following resource types are now publicly available through the Export APIs (ExportAssets, ListAssets, and BatchGetAssetsHistory), Feed API, and Search APIs (SearchAllResources, SearchAllIamPolicies).

• Network Connectivity
  • networkconnectivity.googleapis.com/PolicyBasedRoutes
• Workflows
  • workflows.googleapis.com/Workflow
• Database Migration Service
  • datamigration.googleapis.com/ConnectionProfile

The following resource types are now publicly available through the Export APIs (ExportAssets, ListAssets, and BatchGetAssetsHistory), Feed API, and Search APIs (SearchAllResources, SearchAllIamPolicies).

• Org Policies
  • orgpolicy.googleapis.com/CustomConstraint
• Service Directory
  • servicedirectory.googleapis.com/Endpoint
  • servicedirectory.googleapis.com/Service

The following resource types are now publicly available through the analyze policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning).

• Compute
  • compute.googleapis.com/PublicDelegatedPrefix
• AI Platform
  • aiplatform.googleapis.com/NasJob

The following resource types are now publicly available through the Export APIs (ExportAssets, ListAssets, and BatchGetAssetsHistory), Feed API, and Search APIs (SearchAllResources, SearchAllIamPolicies).

• Speech
  • speech.googleapis.com/Config
  • speech.googleapis.com/Recognizer
• Networkservices
  • networkservices.googleapis.com/EdgeCacheKeyset
  • networkservices.googleapis.com/EdgeCacheOrigin
  • networkservices.googleapis.com/EdgeCacheService

The following resource type is now publicly available through the Export APIs (ExportAssets, ListAssets, and BatchGetAssetsHistory), Feed API, and Search APIs (SearchAllResources, SearchAllIamPolicies).

• Cloud Spanner
  • spanner.googleapis.com/InstanceConfig

The following resource types are now publicly available through the Search APIs (SearchAllResources, SearchAllIamPolicies).

• Cloud Dataplex

  • dataplex.googleapis.com/DataTaxonomy
  • dataplex.googleapis.com/DataAttribute
  • dataplex.googleapis.com/DataAttributeBinding

• AI Platform

  • aiplatform.googleapis.com/NasJob

The following resource types are now publicly available through the Export APIs (ExportAssets, ListAssets, and BatchGetAssetsHistory), Feed API, and Search APIs (SearchAllResources, SearchAllIamPolicies).

• Cloud Key Management Service
  • cloudkms.googleapis.com/EkmConfig

The following resource types are now publicly available through the analyze policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning).

• Cloud Deploy
  • clouddeploy.googleapis.com/Release
  • clouddeploy.googleapis.com/Rollout

The following resource types are now publicly available through the Export APIs (ExportAssets, ListAssets, and BatchGetAssetsHistory), Feed API, and Search APIs (SearchAllResources, SearchAllIamPolicies).

• Compute
  • compute.googleapis.com/PublicDelegatedPrefix

The following resource types are now publicly available through the analyze policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning).

• Service Directory
  • servicedirectory.googleapis.com/Namespace

The following resource types are now publicly available through the Export APIs (ExportAssets, ListAssets, and BatchGetAssetsHistory), Feed API, and Search APIs (SearchAllResources, SearchAllIamPolicies).

• Container Registry
  • containerregistry.googleapis.com/Image

The following resource types are now publicly available through the analyze policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning).

• Cloud Deploy
  • clouddeploy.googleapis.com/DeliveryPipeline
  • clouddeploy.googleapis.com/Target

The following resource types are now publicly available through the analyze policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning).

• GKE Hub
  • gkehub.googleapis.com/Feature

The following resource types are now publicly available through the analyze policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning).

• Vertex AI

  • aiplatform.googleapis.com/Featurestore
  • aiplatform.googleapis.com/Tensorboard

• Transcoder

  • transcoder.googleapis.com/Job
  • transcoder.googleapis.com/JobTemplate

• Integration Connectors

  • connectors.googleapis.com/Connection

The following resource types are now publicly available through the Export APIs (ExportAssets, ListAssets, and BatchGetAssetsHistory), Feed API, and Search APIs (SearchAllResources, SearchAllIamPolicies).

• VertexAI
  • aiplatform.googleapis.com/Featurestore
  • aiplatform.googleapis.com/Tensorboard
• Cloud Filestore
  • file.googleapis.com/Snapshot

The following resource types are now publicly available through the Export APIs (ExportAssets, ListAssets, and BatchGetAssetsHistory), Feed API, and Search APIs (SearchAllResources, SearchAllIamPolicies).

• Transcoder
  • transcoder.googleapis.com/Job
  • transcoder.googleapis.com/JobTemplate

Preview: You can now query asset metadata via the Cloud Asset Inventory API or the Cloud console, without needing to export the data to a BigQuery table first. This feature is available as a preview for Security Command Center Premium customers.

• Documentation
• Go to Cloud Asset Inventory query in the Cloud console

The following resource types are now publicly available through the Export APIs (ExportAssets, ListAssets, and BatchGetAssetsHistory), Feed API, and Search APIs (SearchAllResources, SearchAllIamPolicies).

• Service Directory
  • servicedirectory.googleapis.com/Namespace

The following resource types are now publicly available through the analyze policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning).

• Org Policies
  • orgpolicy.googleapis.com/Policy

The following resource types are now publicly available through the Export APIs (ExportAssets, ListAssets, and BatchGetAssetsHistory), Feed API, and Search APIs (SearchAllResources, SearchAllIamPolicies).

• Cloud Domains
  • domains.googleapis.com/Registration
• Cloud Functions 2nd Gen
  • cloudfunctions.googleapis.com/Function

The following resource types are now publicly available through the Export APIs (ExportAssets, ListAssets, and BatchGetAssetsHistory), Feed API, and Search APIs (SearchAllResources, SearchAllIamPolicies):

• Networkservices
  • networkservices.googleapis.com/TlsRoute
  • networkservices.googleapis.com/TcpRoute
  • networkservices.googleapis.com/GrpcRoute
  • networkservices.googleapis.com/HttpRoute
  • networkservices.googleapis.com/Mesh
  • networkservices.googleapis.com/Gateway
  • networkservices.googleapis.com/ServiceBinding
  • networkservices.googleapis.com/EndpointPolicy

The following resource types are now publicly available through the analyze policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning).

• Backup for GKE
  • gkebackup.googleapis.com/BackupPlan
  • gkebackup.googleapis.com/Backup

The following resource types are now publicly available through the analyze policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning).

• Serverless VPC Access

  • vpcaccess.googleapis.com/Connector

• Cloud Monitoring

  • monitoring.googleapis.com/AlertPolicy

The following resource types are now publicly available through the analyze policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning).

• Cloud IDs
  • ids.googleapis.com/Endpoint

The following searchable fields are now publicly available through the resource search API (SearchAllResources).

• kmsKeys

The following resource types are now publicly available through the Analyze Policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning):

• Dataproc
  • dataproc.googleapis.com/AutoscalingPolicy
  • dataproc.googleapis.com/Batch
  • dataproc.googleapis.com/WorkflowTemplate

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory) , Feed API, and Search APIs (SearchAllResources and SearchAllIamPolicies):

• Cloud IDS (Cloud Intrusion Detection System)

  • ids.googleapis.com/Endpoint

• Speech-to-Text

  • speech.googleapis.com/CustomClass
  • speech.googleapis.com/PhraseSet

The following resource types are now publicly available through the Analyze Policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning):

• Firebase
  • firebase.googleapis.com/FirebaseProject
  • firebase.googleapis.com/FirebaseAppInfo

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory) , Feed API, and Search APIs (SearchAllResources and SearchAllIamPolicies):

• Backup for GKE
  • gkebackup.googleapis.com/BackupPlan
  • gkebackup.googleapis.com/Backup
  • gkebackup.googleapis.com/VolumeBackup
  • gkebackup.googleapis.com/RestorePlan
  • gkebackup.googleapis.com/Restore
  • gkebackup.googleapis.com/VolumeRestore

The following resource types are now publicly available through the Analyze Policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning):

• Firestore
  • firestore.googleapis.com/Database

The following resource types are now publicly available through the Analyze Policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning):

• Network Connectivity

  • networkconnectivity.googleapis.com/Hub
  • networkconnectivity.googleapis.com/Spoke

• Compute

  • compute.googleapis.com/ServiceAttachment

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory) , Feed API, and Search APIs (SearchAllResources and SearchAllIamPolicies):

• Dataproc
  • dataproc.googleapis.com/AutoscalingPolicy
  • dataproc.googleapis.com/Batch
  • dataproc.googleapis.com/WorkflowTemplate

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory) , Feed API, and Search APIs (SearchAllResources and SearchAllIamPolicies):

• Google Kubernetes Engine (GKE)

  • batch.k8s.io/Job
  • apps.k8s.io/ReplicaSet

• Compute

  • compute.googleapis.com/ServiceAttachment

The following resource types are now publicly available through the resource search API (SearchAllResources) and policy search API (SearchAllIamPolicies):

• Network Connectivity Center

  • networkconnectivity.googleapis.com/Hub
  • networkconnectivity.googleapis.com/Spoke

• Virtual Private Cloud (VPC)

  • vpcaccess.googleapis.com/Connector

• Firebase

  • firebase.googleapis.com/FirebaseProject
  • firebase.googleapis.com/FirebaseAppInfo

The following resource types are now publicly available through the Analyze Policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning):

• API keys
  • apikeys.googleapis.com/Key

The following resource types are now publicly available through the resource search API (SearchAllResources) and policy search API (SearchAllIamPolicies):

• Compute
  • compute.googleapis.com/FirewallPolicy

The following resource types are now publicly available through the Analyze Policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning):

• Certificate Authority Service
  • privateca.googleapis.com/Certificate

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory) , Feed API, and Search APIs (SearchAllResources and SearchAllIamPolicies):

• Cloud Run
  • run.googleapis.com/Execution
  • run.googleapis.com/Job
• API Keys
  • apikeys.googleapis.com/Key

The following resource types are now publicly available through the Analyze Policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning):

• Cloud KMS
  • cloudkms.googleapis.com/EkmConnection
• Cloud Run
  • run.googleapis.com/Job
  • run.googleapis.com/Execution

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory), the Feed API, and the Search APIs (SearchAllResources and SearchAllIamPolicies):

• Cloud Firestore
  • firestore.googleapis.com/Database

The following resource types are now publicly available through the Analyze Policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning):

• Datastream
  • datastream.googleapis.com/Stream
  • datastream.googleapis.com/ConnectionProfile
  • datastream.googleapis.com/PrivateConnection

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory), the Feed API, and the Search APIs (SearchAllResources and SearchAllIamPolicies):

• Cloud KMS
  • cloudkms.googleapis.com/EkmConnection

Documentation for Policy Analyzer has moved to the Policy Intelligence documentation.

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory), the Feed API, and the Search APIs (SearchAllResources and SearchAllIamPolicies):

• Certificate Authority Service
  • privateca.googleapis.com/Certificate

The following searchable fields are now publicly available through the resource search API (SearchAllResources).

• tagKeys
• tagValues
• tagValueIds

The following resource types are now publicly available through the Analyze Policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning):

• Database Migration Service
  • datamigration.googleapis.com/MigrationJob
  • datamigration.googleapis.com/ConnectionProfile

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory) and the Feed API:

• Cloud Resource Manager Tags
  • cloudresourcemanager.googleapis.com/TagBinding

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory), the Feed API, and the Search APIs (SearchAllResources and SearchAllIamPolicies):

• Org Policies
  • orgpolicy.googleapis.com/Policy
• BigQuery
  • All onboarded resources in the two new regions: aws-us-east-1; azure-eastus2.

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory) and the Feed API:

• Dataplex
  • dataplex.googleapis.com/Lake
  • dataplex.googleapis.com/Task
  • dataplex.googleapis.com/Zone
  • dataplex.googleapis.com/Asset

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory), the Feed API, and the Search APIs (SearchAllResources and SearchAllIamPolicies):

• Datastream
  • datastream.googleapis.com/ConnectionProfile
  • datastream.googleapis.com/PrivateConnection
  • datastream.googleapis.com/Stream
• Anthos clusters on-prem
  • anthos.googleapis.com/ConnectedCluster
• Database Migration Service
  • datamigration.googleapis.com/ConnectionProfile
  • datamigration.googleapis.com/MigrationJob

The following resource types are now publicly available through the Analyze Policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning):

• Dialog ES API
  • dialogflow.googleapis.com/ConversationProfile
  • dialogflow.googleapis.com/KnowledgeBase
• Vertex AI
  • aiplatform.googleapis.com/PipelineJob
  • aiplatform.googleapis.com/MetadataStore
  • aiplatform.googleapis.com/ModelDeploymentMonitoringJob

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory), the Feed API, and the Search APIs (SearchAllResources and SearchAllIamPolicies):

• Dialog ES API
  • dialogflow.googleapis.com/ConversationProfile
  • dialogflow.googleapis.com/KnowledgeBase

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory) and the Feed API:

• Network Connectivity API
  • networkconnectivity.googleapis.com/Hub
  • networkconnectivity.googleapis.com/Spoke

The following resource types are now publicly available through the resource search API (SearchAllResources) and policy search API (SearchAllIamPolicies):

• Network Management API
  • networkmanagement.googleapis.com/ConnectivityTest

The following resource types are now publicly available through the Analyze Policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning):

• Certificate Authority Service
  • privateca.googleapis.com/CaPool
  • privateca.googleapis.com/CertificateAuthority
  • privateca.googleapis.com/CertificateRevocationList
  • privateca.googleapis.com/CertificateTemplate
• DLP
  • dlp.googleapis.com/DlpJob
  • dlp.googleapis.com/DeidentifyTemplate
  • dlp.googleapis.com/InspectTemplate
  • dlp.googleapis.com/JobTrigger
  • dlp.googleapis.com/StoredInfoType

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory) and the Feed API:

• Firestore
  • firestore.googleapis.com/Database

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory), the Feed API, and the Search APIs (SearchAllResources and SearchAllIamPolicies):

• Cloud Healthcare API
  • healthcare.googleapis.com/ConsentStore
  • healthcare.googleapis.com/Dataset
  • healthcare.googleapis.com/DicomStore
  • healthcare.googleapis.com/FhirStore
  • healthcare.googleapis.com/Hl7V2Store

The following resource types are now publicly available through the resource search API (SearchAllResources) and policy search API (SearchAllIamPolicies):

• Vertex AI
  • aiplatform.googleapis.com/PipelineJob

The following resource types are now publicly available through the resource search API (SearchAllResources) and policy search API (SearchAllIamPolicies):

• Vertex AI
  • aiplatform.googleapis.com/MetadataStore
  • aiplatform.googleapis.com/ModelDeploymentMonitoringJob

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory) and the Feed API:

• Google Kubernetes Engine
  • apps.k8s.io/Deployment
• Cloud Billing
  • cloudbilling.googleapis.com/ProjectBillingInfo

The following resource types are now publicly available through the resource search API (SearchAllResources) and policy search API (SearchAllIamPolicies):

• Cloud Billing
  • cloudbilling.googleapis.com/ProjectBillingInfo

The following resource types are now publicly available through the resource search API (SearchAllResources) and policy search API (SearchAllIamPolicies):

• Access Policy (VPC Service Controls Policy)
  • identity.accesscontextmanager.googleapis.com/AccessLevel
  • identity.accesscontextmanager.googleapis.com/AccessPolicy
  • identity.accesscontextmanager.googleapis.com/ServicePerimeter

The following resource types are now publicly available through the Analyze Policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning):

• Cloud Dataplex
  • dataplex.googleapis.com/Asset
  • dataplex.googleapis.com/Zone
  • dataplex.googleapis.com/Task
  • dataplex.googleapis.com/Lake

The following resource types are now publicly available through the Analyze Policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning):

• Game Services
  • gameservices.googleapis.com/GameServerCluster
  • gameservices.googleapis.com/Realm
  • gameservices.googleapis.com/GameServerConfig
  • gameservices.googleapis.com/GameServerDeployment

The following resource types are now publicly available through the resource search API (SearchAllResources) and policy search API (SearchAllIamPolicies):

• Cloud OS Config
  • osconfig.googleapis.com/VulnerabilityReport
• Cloud Dataplex
  • dataplex.googleapis.com/Asset
  • dataplex.googleapis.com/Zone
  • dataplex.googleapis.com/Task
  • dataplex.googleapis.com/Lake

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory) and the Feed API:

• Cloud SQL
  • sqladmin.googleapis.com/BackupRun

The following resource types are now publicly available through the Analyze Policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning):

• Dialogflow
  • dialogflow.googleapis.com/Agent
  • dialogflow.googleapis.com/LocationSettings
• Artifactregistry
  • artifactregistry.googleapis.com/DockerImage
• GKE
  • networking.k8s.io/NetworkPolicy
• DLP
  • dlp.googleapis.com/DlpJob
  • dlp.googleapis.com/DeidentifyTemplate
  • dlp.googleapis.com/InspectTemplate
  • dlp.googleapis.com/JobTrigger
  • dlp.googleapis.com/StoredInfoType
• Service Management
  • servicemanagement.googleapis.com/ManagedService

The following resource types are now publicly available through the resource search API (SearchAllResources) and policy search API (SearchAllIamPolicies):

• Game Service
  • gameservices.googleapis.com/GameServerCluster
  • gameservices.googleapis.com/GameServerConfig
  • gameservices.googleapis.com/GameServerDeployment
  • gameservices.googleapis.com/Realm

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory) and the Feed API:

• Data Loss Prevention
  • dlp.googleapis.com/DlpJob
  • dlp.googleapis.com/DeidentifyTemplate
  • dlp.googleapis.com/InspectTemplate
  • dlp.googleapis.com/JobTrigger
  • dlp.googleapis.com/StoredInfoType

The following resource types are now publicly available through the Analyze Policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning):

• Assured Workloads
  • assuredworkloads.googleapis.com/Workload
• DocumentAI
  • documentai.googleapis.com/ProcessorVersion

The following resource types are now publicly available through the Analyze Policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning):

• BigQuery
  • bigquery.googleapis.com/Model
• Google Kubernetes Engine
  • apps.k8s.io/Deployment
  • apps.k8s.io/ReplicaSet
  • batch.k8s.io/Job

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory) and the Feed API:

• Vertex AI
  • aiplatform.googleapis.com/PipelineJob

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory) and the Feed API:

• Cloud Resource Manager Tags
  • cloudresourcemanager.googleapis.com/TagKey
  • cloudresourcemanager.googleapis.com/TagValue
• Cloud OS Config
  • osconfig.googleapis.com/VulnerabilityReport

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory) and the Feed API:

• Metastore
  • metastore.googleapis.com/Service
  • metastore.googleapis.com/MetadataImport
  • metastore.googleapis.com/Backup

The following resource types are now publicly available through the resource search API (SearchAllResources) and policy search API (SearchAllIamPolicies):

• Metastore
  • metastore.googleapis.com/Service
  • metastore.googleapis.com/MetadataImport
  • metastore.googleapis.com/Backup

The following resource types are now publicly available through the resource search API (SearchAllResources) and policy search API (SearchAllIamPolicies):

• Monitoring
  • monitoring.googleapis.com/AlertPolicy

The following resource types are now publicly available through the resource search API (SearchAllResources) and policy search API (SearchAllIamPolicies):

• Service Management
  • servicemanagement.googleapis.com/ManagedService
• Certificate Authority Service
  • privateca.googleapis.com/CaPool
  • privateca.googleapis.com/CertificateAuthority
  • privateca.googleapis.com/CertificateRevocationList
  • privateca.googleapis.com/CertificateTemplate

The following resource types are now publicly available through the resource search API (SearchAllResources) and policy search API (SearchAllIamPolicies):

• Google Kubernetes Engine
  • networking.k8s.io/NetworkPolicy

Cloud Asset Inventory Console is now generally available.

This release enables you to view the following information for your Cloud deployment, using powerful search capabilities and easy filtering.

• Details and history of resources and IAM policies
• Machine type statistics
• Policy statistics
• Insights of your Cloud footprint
• IAM policies as a whole, or scoped to individual IAM policies' details

Learn more about searching resources and searching policies in the console.

The following resource types are now publicly available through the Analyze Policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning):

• Cloud SQL
  • sqladmin.googleapis.com/BackupRun
• Artifact Registry
  • artifactregistry.googleapis.com/Repository
• Cloud Bigtable
  • bigtableadmin.googleapis.com/AppProfile
  • bigtableadmin.googleapis.com/Backup

The following resource types are now publicly available through the resource search API (SearchAllResources) and policy search API (SearchAllIamPolicies):

• BigQuery
  • bigquery.googleapis.com/Model
• Cloud SQL
  • sqladmin.googleapis.com/BackupRun

The following resource types are now publicly available through the resource search API (SearchAllResources) and policy search API (SearchAllIamPolicies):

• Dialogflow
  • dialogflow.googleapis.com/Agent
  • dialogflow.googleapis.com/LocationSettings

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory) and the Feed API:

• Vertex AI
  • aiplatform.googleapis.com/MetadataStore
• Dialogflow
  • dialogflow.googleapis.com/Agent
  • dialogflow.googleapis.com/LocationSettings

The following resource types are now publicly available through the Analyze Policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning):

• Cloud OS Config
  • osconfig.googleapis.com/PatchDeployment
• Container
  • k8s.io/Service
• Vertex AI
  • aiplatform.googleapis.com/BatchPredictionJob
  • aiplatform.googleapis.com/CustomJob
  • aiplatform.googleapis.com/DataLabelingJob
  • aiplatform.googleapis.com/Dataset
  • aiplatform.googleapis.com/Endpoint
  • aiplatform.googleapis.com/HyperparameterTuningJob
  • aiplatform.googleapis.com/Model
  • aiplatform.googleapis.com/SpecialistPool
  • aiplatform.googleapis.com/TrainingPipeline

The following resource types are now publicly available through the Analyze Policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning):

• App Engine Memcache
  • memcache.googleapis.com/Instance
• Filestore
  • file.googleapis.com/Instance
  • file.googleapis.com/Backup

The following resource types are now publicly available through the resource search API (SearchAllResources), policy search API (SearchAllIamPolicies), and Analyze Policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning) : + Eventarc + eventarc.googleapis.com/Trigger

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory) and the Feed API:

• Vertex AI
  • aiplatform.googleapis.com/ModelDeploymentMonitoringJob

New resource types are now available.

The following resource types are now publicly available through the Analyze Policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning):

• Container
  • k8s.io/Node
  • k8s.io/Pod
  • k8s.io/Namespace
  • rbac.authorization.k8s.io/Role
  • rbac.authorization.k8s.io/RoleBinding
  • rbac.authorization.k8s.io/ClusterRole
  • rbac.authorization.k8s.io/ClusterRoleBinding

New resource types are now available.

The following resource types are now publicly available through the Analyze Policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning):

• Logging
  • logging.googleapis.com/LogBucket
  • logging.googleapis.com/LogSink
  • logging.googleapis.com/LogMetric

The Policy Analyzer page in the Cloud Console has been updated. To learn how to use the new UI, see Analyzing IAM policies.

New resource types are now available.

The following resource types are now publicly available through the Analyze Policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning):

• Secret Manager