This page provides a reference table of service methods and permissions that can be restricted using Ingress and Egress rules.
Supported methods
| Service Name | Action Type | Action |
|---|---|---|
artifactregistry.googleapis.com |
METHOD | ArtifactRegistry.CreateRepository |
| METHOD | ArtifactRegistry.CreateTag | |
| METHOD | ArtifactRegistry.DeleteRepository | |
| METHOD | ArtifactRegistry.DeleteTag | |
| METHOD | ArtifactRegistry.GetRepository | |
| METHOD | ArtifactRegistry.GetTag | |
| METHOD | ArtifactRegistry.GetVersion | |
| METHOD | artifactregistry.googleapis.com/AptDelete | |
| METHOD | artifactregistry.googleapis.com/AptRead | |
| METHOD | artifactregistry.googleapis.com/AptWrite | |
| METHOD | artifactregistry.googleapis.com/DockerDelete | |
| METHOD | artifactregistry.googleapis.com/DockerRead | |
| METHOD | artifactregistry.googleapis.com/DockerWrite | |
| METHOD | artifactregistry.googleapis.com/GoDelete | |
| METHOD | artifactregistry.googleapis.com/GooGetDelete | |
| METHOD | artifactregistry.googleapis.com/GooGetRead | |
| METHOD | artifactregistry.googleapis.com/GooGetWrite | |
| METHOD | artifactregistry.googleapis.com/GoRead | |
| METHOD | artifactregistry.googleapis.com/GoWrite | |
| METHOD | artifactregistry.googleapis.com/KfpDelete | |
| METHOD | artifactregistry.googleapis.com/KfpRead | |
| METHOD | artifactregistry.googleapis.com/KfpWrite | |
| METHOD | artifactregistry.googleapis.com/MavenRead | |
| METHOD | artifactregistry.googleapis.com/MavenWrite | |
| METHOD | artifactregistry.googleapis.com/NPMRead | |
| METHOD | artifactregistry.googleapis.com/NPMWrite | |
| METHOD | artifactregistry.googleapis.com/PythonDelete | |
| METHOD | artifactregistry.googleapis.com/PythonRead | |
| METHOD | artifactregistry.googleapis.com/PythonWrite | |
| METHOD | artifactregistry.googleapis.com/ScottyAgentRead | |
| METHOD | artifactregistry.googleapis.com/ScottyAgentWrite | |
| METHOD | artifactregistry.googleapis.com/YumDelete | |
| METHOD | artifactregistry.googleapis.com/YumRead | |
| METHOD | artifactregistry.googleapis.com/YumWrite | |
| METHOD | ArtifactRegistry.ListFiles | |
| METHOD | ArtifactRegistry.ListPackages | |
| METHOD | ArtifactRegistry.ListRepositories | |
| METHOD | ArtifactRegistry.ListVersions | |
| METHOD | ArtifactRegistry.SetIamPolicy | |
| METHOD | ArtifactRegistry.TestIamPermissions | |
| METHOD | ArtifactRegistry.UpdateRepository | |
| METHOD | ArtifactRegistry.UpdateTag | |
| METHOD | Locations.GetLocation | |
| METHOD | Locations.ListLocations | |
bigquery.googleapis.com |
METHOD | BigQueryRead.CreateReadSession |
| METHOD | BigQueryRead.ReadRows | |
| METHOD | BigQueryRead.SplitReadStream | |
| METHOD | BigQueryStorage.BatchCreateReadSessionStreams | |
| METHOD | BigQueryStorage.CreateReadSession | |
| METHOD | BigQueryStorage.FinalizeStream | |
| METHOD | BigQueryStorage.ReadRows | |
| METHOD | BigQueryStorage.SplitReadStream | |
| METHOD | BigQueryWrite.AppendRows | |
| METHOD | BigQueryWrite.BatchCommitWriteStreams | |
| METHOD | BigQueryWrite.CreateWriteStream | |
| METHOD | BigQueryWrite.FinalizeWriteStream | |
| METHOD | BigQueryWrite.FlushRows | |
| METHOD | BigQueryWrite.GetWriteStream | |
| METHOD | ConnectionService.CreateConnection | |
| METHOD | ConnectionService.DeleteConnection | |
| METHOD | ConnectionService.GetConnection | |
| METHOD | ConnectionService.GetConnectionShortLivedToken | |
| METHOD | ConnectionService.GetIamPolicy | |
| METHOD | ConnectionService.ListConnections | |
| METHOD | ConnectionService.SetIamPolicy | |
| METHOD | ConnectionService.TestIamPermissions | |
| METHOD | ConnectionService.UpdateConnection | |
| METHOD | ConnectionService.UpdateConnectionCredential | |
| METHOD | DatasetService.DeleteDataset | |
| METHOD | DatasetService.GetDataset | |
| METHOD | DatasetService.InsertDataset | |
| METHOD | DatasetService.ListDatasets | |
| METHOD | DatasetService.PatchDataset | |
| METHOD | DatasetService.UndeleteDataset | |
| METHOD | DatasetService.UpdateDataset | |
| METHOD | Discovery.GetDiscovery | |
| METHOD | Discovery.GetDiscoveryRest | |
| METHOD | IAMPolicy.GetIamPolicy | |
| METHOD | IAMPolicy.SetIamPolicy | |
| METHOD | IAMPolicy.TestIamPermissions | |
| METHOD | JobService.CancelJob | |
| METHOD | JobService.DeleteJob | |
| METHOD | JobService.GetJob | |
| METHOD | JobService.GetQueryResults | |
| METHOD | JobService.InsertJob | |
| METHOD | JobService.ListJobs | |
| METHOD | JobService.Query | |
| METHOD | Locations.GetLocation | |
| METHOD | Locations.ListLocations | |
| METHOD | ModelService.DeleteModel | |
| METHOD | ModelService.GetModel | |
| METHOD | ModelService.ListModels | |
| METHOD | ModelService.PatchModel | |
| METHOD | ProjectService.GetServiceAccount | |
| METHOD | ProjectService.ListProjects | |
| METHOD | ReservationService.CreateAssignment | |
| METHOD | ReservationService.CreateCapacityCommitment | |
| METHOD | ReservationService.CreateReservation | |
| METHOD | ReservationService.CreateReservationGroup | |
| METHOD | ReservationService.DeleteAssignment | |
| METHOD | ReservationService.DeleteCapacityCommitment | |
| METHOD | ReservationService.DeleteReservation | |
| METHOD | ReservationService.DeleteReservationGroup | |
| METHOD | ReservationService.FailoverReservation | |
| METHOD | ReservationService.GetBiReservation | |
| METHOD | ReservationService.GetCapacityCommitment | |
| METHOD | ReservationService.GetIamPolicy | |
| METHOD | ReservationService.GetReservation | |
| METHOD | ReservationService.GetReservationGroup | |
| METHOD | ReservationService.ListAssignments | |
| METHOD | ReservationService.ListCapacityCommitments | |
| METHOD | ReservationService.ListReservationGroups | |
| METHOD | ReservationService.ListReservations | |
| METHOD | ReservationService.MergeCapacityCommitments | |
| METHOD | ReservationService.MoveAssignment | |
| METHOD | ReservationService.SearchAllAssignments | |
| METHOD | ReservationService.SetIamPolicy | |
| METHOD | ReservationService.SplitCapacityCommitment | |
| METHOD | ReservationService.TestIamPermissions | |
| METHOD | ReservationService.UpdateAssignment | |
| METHOD | ReservationService.UpdateBiReservation | |
| METHOD | ReservationService.UpdateCapacityCommitment | |
| METHOD | ReservationService.UpdateReservation | |
| METHOD | ReservationService.UpdateReservationGroup | |
| METHOD | ReservationService.UpgradeEdition | |
| METHOD | RoutineService.DeleteRoutine | |
| METHOD | RoutineService.GetRoutine | |
| METHOD | RoutineService.InsertRoutine | |
| METHOD | RoutineService.ListRoutines | |
| METHOD | RoutineService.PatchRoutine | |
| METHOD | RoutineService.UpdateRoutine | |
| METHOD | RowAccessPolicyService.BatchDeleteRowAccessPolicies | |
| METHOD | RowAccessPolicyService.CreateRowAccessPolicy | |
| METHOD | RowAccessPolicyService.DeleteRowAccessPolicy | |
| METHOD | RowAccessPolicyService.GetRowAccessPolicy | |
| METHOD | RowAccessPolicyService.ListRowAccessPolicies | |
| METHOD | RowAccessPolicyService.UpdateRowAccessPolicy | |
| METHOD | SavedQueryService.CreateSavedQuery | |
| METHOD | SavedQueryService.DeleteSavedQuery | |
| METHOD | SavedQueryService.ListSavedQueries | |
| METHOD | SavedQueryService.UpdateSavedQuery | |
| METHOD | TableDataService.InsertAll | |
| METHOD | TableDataService.List | |
| METHOD | TableService.DeleteTable | |
| METHOD | TableService.GetTable | |
| METHOD | TableService.InsertTable | |
| METHOD | TableService.ListTables | |
| METHOD | TableService.PatchTable | |
| METHOD | TableService.UpdateTable | |
| PERMISSION | bigquery.capacityCommitments.list | |
| PERMISSION | bigquery.connections.create (DEPRECATED: using this permission has no effect on ingress and egress rules. Use ConnectionService.CreateConnection method instead.) | |
| PERMISSION | bigquery.connections.delete (DEPRECATED: using this permission has no effect on ingress and egress rules. Use ConnectionService.DeleteConnection method instead.) | |
| PERMISSION | bigquery.connections.get (DEPRECATED: using this permission has no effect on ingress and egress rules. Use ConnectionService.GetConnection method instead.) | |
| PERMISSION | bigquery.connections.getIamPolicy (DEPRECATED: using this permission has no effect on ingress and egress rules. Use ConnectionService.GetIamPolicy method instead.) | |
| PERMISSION | bigquery.connections.list (DEPRECATED: using this permission has no effect on ingress and egress rules. Use ConnectionService.ListConnections method instead.) | |
| PERMISSION | bigquery.connections.setIamPolicy (DEPRECATED: using this permission has no effect on ingress and egress rules. Use ConnectionService.SetIamPolicy method instead.) | |
| PERMISSION | bigquery.connections.update (DEPRECATED: using this permission has no effect on ingress and egress rules. Use ConnectionService.UpdateConnection method instead.) | |
| PERMISSION | bigquery.connections.use | |
| PERMISSION | bigquery.dataPolicies.create | |
| PERMISSION | bigquery.dataPolicies.delete | |
| PERMISSION | bigquery.dataPolicies.get | |
| PERMISSION | bigquery.dataPolicies.getIamPolicy | |
| PERMISSION | bigquery.dataPolicies.list | |
| PERMISSION | bigquery.dataPolicies.maskedGet | |
| PERMISSION | bigquery.dataPolicies.setIamPolicy | |
| PERMISSION | bigquery.dataPolicies.update | |
| PERMISSION | bigquery.dataQnaIndexes.get | |
| PERMISSION | bigquery.dataQnaIndexes.updateData | |
| PERMISSION | bigquery.dataQnaQuestions.create | |
| PERMISSION | bigquery.dataQnaReports.get | |
| PERMISSION | bigquery.dataQnaReports.list | |
| PERMISSION | bigquery.datasets.create | |
| PERMISSION | bigquery.datasets.delete | |
| PERMISSION | bigquery.datasets.get | |
| PERMISSION | bigquery.datasets.update | |
| PERMISSION | bigquery.jobs.create | |
| PERMISSION | bigquery.jobs.get | |
| PERMISSION | bigquery.jobs.list | |
| PERMISSION | bigquery.jobs.listAll | |
| PERMISSION | bigquery.jobs.listExecutionMetadata | |
| PERMISSION | bigquery.jobs.update | |
| PERMISSION | bigquery.models.create | |
| PERMISSION | bigquery.models.delete | |
| PERMISSION | bigquery.models.getData | |
| PERMISSION | bigquery.models.getMetadata | |
| PERMISSION | bigquery.models.list | |
| PERMISSION | bigquery.models.updateMetadata | |
| PERMISSION | bigquery.reservationAssignments.list | |
| PERMISSION | bigquery.reservations.list | |
| PERMISSION | bigquery.routines.create | |
| PERMISSION | bigquery.routines.delete | |
| PERMISSION | bigquery.routines.get | |
| PERMISSION | bigquery.routines.list | |
| PERMISSION | bigquery.routines.update | |
| PERMISSION | bigquery.rowAccessPolicies.create | |
| PERMISSION | bigquery.rowAccessPolicies.delete | |
| PERMISSION | bigquery.rowAccessPolicies.get | |
| PERMISSION | bigquery.rowAccessPolicies.getFilteredData | |
| PERMISSION | bigquery.rowAccessPolicies.getIamPolicy | |
| PERMISSION | bigquery.rowAccessPolicies.list | |
| PERMISSION | bigquery.rowAccessPolicies.overrideTimeTravelRestrictions | |
| PERMISSION | bigquery.rowAccessPolicies.setIamPolicy | |
| PERMISSION | bigquery.rowAccessPolicies.update | |
| PERMISSION | bigquery.tables.commitWriteStream | |
| PERMISSION | bigquery.tables.create | |
| PERMISSION | bigquery.tables.createSnapshot | |
| PERMISSION | bigquery.tables.delete | |
| PERMISSION | bigquery.tables.deleteSnapshot | |
| PERMISSION | bigquery.tables.export | |
| PERMISSION | bigquery.tables.get | |
| PERMISSION | bigquery.tables.getData | |
| PERMISSION | bigquery.tables.getIamPolicy | |
| PERMISSION | bigquery.tables.list | |
| PERMISSION | bigquery.tables.restoreSnapshot | |
| PERMISSION | bigquery.tables.setCategory | |
| PERMISSION | bigquery.tables.setIamPolicy | |
| PERMISSION | bigquery.tables.update | |
| PERMISSION | bigquery.tables.updateData | |
| PERMISSION | bigquery.tables.updateTag | |
| PERMISSION | bigquery.transfers.get | |
| PERMISSION | bigquery.transfers.update | |
| PERMISSION | bigquery.vpcsc.importData | |
| PERMISSION | datacatalog.categories.fineGrainedGet | |
| PERMISSION | datacatalog.taxonomies.get | |
blockchainnodeengine.googleapis.com |
METHOD | Blockchain.UseBlockchain |
| METHOD | BlockchainNodeEngine.CreateBlockchainNode | |
| METHOD | BlockchainNodeEngine.DeleteBlockchainNode | |
| METHOD | BlockchainNodeEngine.GetBlockchainNode | |
| METHOD | BlockchainNodeEngine.ListBlockchainNodes | |
| METHOD | BlockchainNodeEngine.UpdateBlockchainNode | |
| METHOD | Discovery.GetDiscovery | |
| METHOD | Discovery.GetDiscoveryRest | |
| METHOD | Locations.GetLocation | |
| METHOD | Locations.ListLocations | |
| METHOD | Operations.CancelOperation | |
| METHOD | Operations.DeleteOperation | |
| METHOD | Operations.GetOperation | |
| METHOD | Operations.ListOperations | |
| METHOD | Operations.WaitOperation | |
cloudresourcemanager.googleapis.com |
METHOD | Projects.SetIamPolicy |
| METHOD | TagBindings.CreateTagBinding | |
| METHOD | TagBindings.DeleteTagBinding | |
| METHOD | TagBindings.ListEffectiveTags | |
| METHOD | TagBindings.ListTagBindings | |
| METHOD | TagHolds.CreateTagHold | |
| METHOD | TagHolds.DeleteTagHold | |
| METHOD | TagHolds.ListTagHolds | |
| METHOD | TagKeys.CreateTagKey | |
| METHOD | TagKeys.DeleteTagKey | |
| METHOD | TagKeys.GetIamPolicy | |
| METHOD | TagKeys.GetTagKey | |
| METHOD | TagKeys.ListTagKeys | |
| METHOD | TagKeys.SetIamPolicy | |
| METHOD | TagKeys.TestIamPermissions | |
| METHOD | TagKeys.UpdateTagKey | |
| METHOD | TagValues.CreateTagValue | |
| METHOD | TagValues.DeleteTagValue | |
| METHOD | TagValues.GetIamPolicy | |
| METHOD | TagValues.GetTagValue | |
| METHOD | TagValues.ListTagValues | |
| METHOD | TagValues.SetIamPolicy | |
| METHOD | TagValues.TestIamPermissions | |
| METHOD | TagValues.UpdateTagValue | |
compute.googleapis.com |
METHOD | AcceleratorTypesService.AggregatedList |
| METHOD | AcceleratorTypesService.Get | |
| METHOD | AcceleratorTypesService.List | |
| METHOD | AllocationsService.AggregatedList | |
| METHOD | AllocationsService.Delete | |
| METHOD | AllocationsService.Get | |
| METHOD | AllocationsService.GetPolicy | |
| METHOD | AllocationsService.Insert | |
| METHOD | AllocationsService.List | |
| METHOD | AllocationsService.Resize | |
| METHOD | AllocationsService.SetPolicy | |
| METHOD | AllocationsService.TestPermissions | |
| METHOD | AllocationsService.Update | |
| METHOD | AutoscalersService.AggregatedList | |
| METHOD | AutoscalersService.Delete | |
| METHOD | AutoscalersService.Get | |
| METHOD | AutoscalersService.Insert | |
| METHOD | AutoscalersService.List | |
| METHOD | AutoscalersService.Patch | |
| METHOD | AutoscalersService.TestPermissions | |
| METHOD | AutoscalersService.Update | |
| METHOD | BackendBucketsService.AddSignedUrlKey | |
| METHOD | BackendBucketsService.Delete | |
| METHOD | BackendBucketsService.DeleteSignedUrlKey | |
| METHOD | BackendBucketsService.Get | |
| METHOD | BackendBucketsService.GetPolicy | |
| METHOD | BackendBucketsService.Insert | |