Asset types

This document lists the supported asset types in Cloud Asset Inventory. These include resource types, policy types, and runtime information types.

You can use these asset types with the following Cloud Asset Inventory operations:

You might also need to make use of asset names associated with these asset types when working with Cloud Asset Inventory.

Unless otherwise specified, all resource types are available in the export, list, monitor, search, and analysis APIs. Effective tags are supported only in the search APIs.

Resource types

Cloud Asset Inventory provides eventual consistency on current data and best-effort consistency on historical data. While rare, it's possible that Cloud Asset Inventory can miss some data updates.

Unless noted in the following table, almost all asset updates are available in minutes.

Cloud Asset Inventory uses the following asset types for the RESOURCE content type.

Service	Asset type
Access Approval	API reference `accessapproval.googleapis.com/AccessApprovalSettings` Not available in the analysis APIs.
Access Policy (Access Context Manager) To retrieve all access policies in the export, list, and monitor APIs: REST: Set the `contentType` to `ACCESS_POLICY`. gcloud CLI: Set the `--content-type` flag to `access-policy`.	`accesscontextmanager.googleapis.com/AuthorizedOrgsDesc` Not available in the analysis APIs. `identity.accesscontextmanager.googleapis.com/AccessLevel` `identity.accesscontextmanager.googleapis.com/AccessPolicy` `identity.accesscontextmanager.googleapis.com/ServicePerimeter`
AI Commerce Search API	API reference `retail.googleapis.com/Catalog`
AlloyDB for PostgreSQL	API reference `alloydb.googleapis.com/Backup` Not available in the analysis APIs. `alloydb.googleapis.com/Cluster` Not available in the analysis APIs. `alloydb.googleapis.com/Instance` Not available in the analysis APIs.
API Gateway	API reference `apigateway.googleapis.com/Api` `apigateway.googleapis.com/ApiConfig` `apigateway.googleapis.com/Gateway`
API keys The `location` field might not be populated for API keys assets.	API reference `apikeys.googleapis.com/Key`
Apigee	API reference `apigee.googleapis.com/ApiProxy` Effective tags aren't supported. Not available in the analysis APIs. `apigee.googleapis.com/ApiProxyRevision` Effective tags aren't supported. Not available in the analysis APIs. `apigee.googleapis.com/Environment` Effective tags aren't supported. Not available in the analysis APIs. `apigee.googleapis.com/Instance` Effective tags aren't supported. `apigee.googleapis.com/Organization` Effective tags aren't supported. `apigee.googleapis.com/SecurityAction` Not available in the analysis APIs. `apigee.googleapis.com/SecurityMonitoringCondition` Not available in the analysis APIs. `apigee.googleapis.com/SecurityProfileV2` Not available in the analysis APIs.
Apigee API hub	API reference `apihub.googleapis.com/ApiHubInstance`
App Design Center	API reference `designcenter.googleapis.com/Application` Effective tags aren't supported. `designcenter.googleapis.com/ApplicationTemplateRevision` Effective tags aren't supported. `designcenter.googleapis.com/Component` Effective tags aren't supported. `designcenter.googleapis.com/Connection` Effective tags aren't supported. `designcenter.googleapis.com/SharedTemplate` Effective tags aren't supported. `designcenter.googleapis.com/SharedTemplateRevision` Effective tags aren't supported.
App Engine The `location` field might not be populated for App Engine assets.	API reference `appengine.googleapis.com/Application` Searchable attributes: `defaultBucket` `defaultHostname` `appengine.googleapis.com/Service` `appengine.googleapis.com/Version` Searchable attributes: `versionUrl`
App Hub	API reference `apphub.googleapis.com/Application` Effective tags aren't supported. Not available in the analysis APIs. `apphub.googleapis.com/Service` Effective tags aren't supported. Not available in the analysis APIs. `apphub.googleapis.com/ServiceProjectAttachment` Effective tags aren't supported. Not available in the analysis APIs. `apphub.googleapis.com/Workload` Effective tags aren't supported. Not available in the analysis APIs.
App Lifecycle Manager	API reference `saasservicemgmt.googleapis.com/Release` Effective tags aren't supported. Not available in the analysis APIs. `saasservicemgmt.googleapis.com/Rollout` Effective tags aren't supported. Not available in the analysis APIs. `saasservicemgmt.googleapis.com/RolloutKind` Effective tags aren't supported. Not available in the analysis APIs. `saasservicemgmt.googleapis.com/Saas` Effective tags aren't supported. Not available in the analysis APIs. `saasservicemgmt.googleapis.com/Tenant` Effective tags aren't supported. Not available in the analysis APIs. `saasservicemgmt.googleapis.com/Unit` Effective tags aren't supported. Not available in the analysis APIs. `saasservicemgmt.googleapis.com/UnitKind` Effective tags aren't supported. Not available in the analysis APIs.
Application Integration	API reference `integrations.googleapis.com/AuthConfig` Not available in the analysis APIs. `integrations.googleapis.com/Certificate` Not available in the analysis APIs. `integrations.googleapis.com/Execution` Not available in the analysis APIs. `integrations.googleapis.com/Integration` Not available in the analysis APIs. `integrations.googleapis.com/IntegrationVersion` Not available in the analysis APIs. `integrations.googleapis.com/SfdcChannel` Not available in the analysis APIs. `integrations.googleapis.com/SfdcInstance` Not available in the analysis APIs. `integrations.googleapis.com/Suspension` Not available in the analysis APIs.
Artifact Registry	API reference `artifactregistry.googleapis.com/DockerImage` `artifactregistry.googleapis.com/MavenArtifact` Not available in the analysis APIs. `artifactregistry.googleapis.com/NpmPackage` Not available in the analysis APIs. `artifactregistry.googleapis.com/PythonPackage` Not available in the analysis APIs. `artifactregistry.googleapis.com/Repository` `artifactregistry.googleapis.com/Rule` Not available in the analysis APIs.
Assured Workloads	API reference `assuredworkloads.googleapis.com/Workload`
Backup and DR Service	API reference `backupdr.googleapis.com/Backup` Not available in the analysis APIs. `backupdr.googleapis.com/BackupPlan` Effective tags aren't supported. Not available in the analysis APIs. `backupdr.googleapis.com/BackupPlanAssociation` Effective tags aren't supported. Not available in the analysis APIs. `backupdr.googleapis.com/BackupPlanRevision` Effective tags aren't supported. Not available in the analysis APIs. `backupdr.googleapis.com/BackupVault` Not available in the analysis APIs. `backupdr.googleapis.com/DataSource` Not available in the analysis APIs. `backupdr.googleapis.com/DataSourceReference` Not available in the analysis APIs. `backupdr.googleapis.com/ManagementServer` Effective tags aren't supported.
Backup for GKE	API reference `gkebackup.googleapis.com/Backup` `gkebackup.googleapis.com/BackupPlan` `gkebackup.googleapis.com/Restore` `gkebackup.googleapis.com/RestorePlan` `gkebackup.googleapis.com/VolumeBackup` `gkebackup.googleapis.com/VolumeRestore`
Batch	API reference `batch.googleapis.com/Job` Not available in the analysis APIs.
BigQuery	API reference `bigquery.googleapis.com/Dataset` Effective tags aren't supported. `bigquery.googleapis.com/Model` Effective tags aren't supported. `bigquery.googleapis.com/Routine` Effective tags aren't supported. `bigquery.googleapis.com/RowAccessPolicy` Effective tags aren't supported. `bigquery.googleapis.com/Table` Effective tags aren't supported.
BigQuery Data Transfer Service BigQuery Data Transfer Service asset change history might be incomplete. Data freshness is synchronized every 7 hours. If a sync fails, freshness is delayed until the next successful sync.	API reference `bigquerydatatransfer.googleapis.com/TransferConfig`
BigQuery Migration Service	API reference `bigquerymigration.googleapis.com/MigrationWorkflow`
BigQuery Reservation API	API reference `bigqueryreservation.googleapis.com/BiReservation` Not available in the analysis APIs. `bigqueryreservation.googleapis.com/CapacityCommitment` Not available in the analysis APIs. `bigqueryreservation.googleapis.com/Reservation` Not available in the analysis APIs. `bigqueryreservation.googleapis.com/ReservationAssignment` Not available in the analysis APIs. `bigqueryreservation.googleapis.com/ReservationGroup` Not available in the analysis APIs.
BigQuery sharing	API reference `analyticshub.googleapis.com/DataExchange` Not available in the analysis APIs. `analyticshub.googleapis.com/Listing` Not available in the analysis APIs.
Bigtable	API reference `bigtableadmin.googleapis.com/AppProfile` `bigtableadmin.googleapis.com/AuthorizedView` Not available in the analysis APIs. `bigtableadmin.googleapis.com/Backup` `bigtableadmin.googleapis.com/Cluster` `bigtableadmin.googleapis.com/Instance` `bigtableadmin.googleapis.com/LogicalView` Not available in the analysis APIs. `bigtableadmin.googleapis.com/MaterializedView` Not available in the analysis APIs. `bigtableadmin.googleapis.com/SchemaBundle` Not available in the analysis APIs. `bigtableadmin.googleapis.com/Table`
Binary Authorization	API reference `binaryauthorization.googleapis.com/Attestor` Not available in the analysis APIs. `binaryauthorization.googleapis.com/PlatformPolicy` Not available in the analysis APIs. `binaryauthorization.googleapis.com/Policy` Not available in the analysis APIs.
Blockchain Node Engine	API reference `blockchainnodeengine.googleapis.com/BlockchainNode`
Certificate Authority Service	API reference `privateca.googleapis.com/CaPool` `privateca.googleapis.com/Certificate` `privateca.googleapis.com/CertificateAuthority` `privateca.googleapis.com/CertificateRevocationList` IAM policies might be missing for this asset type. `privateca.googleapis.com/CertificateTemplate`
Certificate Manager	API reference `certificatemanager.googleapis.com/Certificate` Not available in the analysis APIs. `certificatemanager.googleapis.com/CertificateIssuanceConfig` Not available in the analysis APIs. `certificatemanager.googleapis.com/CertificateMap` Not available in the analysis APIs. `certificatemanager.googleapis.com/CertificateMapEntry` Not available in the analysis APIs. `certificatemanager.googleapis.com/DnsAuthorization` Not available in the analysis APIs. `certificatemanager.googleapis.com/TrustConfig` Not available in the analysis APIs.
Chrome Enterprise Premium	API reference `beyondcorp.googleapis.com/AppConnection` `beyondcorp.googleapis.com/AppConnector` `beyondcorp.googleapis.com/AppGateway` `beyondcorp.googleapis.com/ClientConnectorService` `beyondcorp.googleapis.com/ClientGateway`
Cloud Asset Inventory	API reference `cloudasset.googleapis.com/Feed` Effective tags aren't supported. Not available in the analysis APIs.
Cloud Billing

Asset types Stay organized with collections Save and categorize content based on your preferences.

Resource types

Asset types