Cloud Asset Inventory release notes

The following resource types are now publicly available through the analyze policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning).

• Live Stream API
  • livestream.googleapis.com/Asset
  • livestream.googleapis.com/Channel
  • livestream.googleapis.com/Input
  • livestream.googleapis.com/Pool

The following resource types are now publicly available through the analyze policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning).

• Conversational Insights
  • contactcenterinsights.googleapis.com/IssueModel
  • contactcenterinsights.googleapis.com/PhraseMatcher
  • contactcenterinsights.googleapis.com/View
• Google Kubernetes Engine
  • admissionregistration.k8s.io/MutatingWebhookConfiguration
  • apps.k8s.io/DaemonSet
  • apps.k8s.io/StatefulSet
  • batch.k8s.io/CronJob
  • k8s.io/PersistentVolume
  • k8s.io/PersistentVolumeClaim
  • k8s.io/PodTemplate
  • k8s.io/ReplicationController
  • k8s.io/ResourceQuota
  • policy.k8s.io/PodDisruptionBudget
  • storage.k8s.io/StorageClass

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Infrastructure Manager
  • config.googleapis.com/Preview

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, and Feed APIs.

• Apigee API Hub
  • apihub.googleapis.com/ApiHubInstance

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, and Feed APIs.

• Cloud Build
  • cloudbuild.googleapis.com/Build

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Dataplex
  • dataplex.googleapis.com/AspectType
  • dataplex.googleapis.com/EntryGroup
  • dataplex.googleapis.com/EntryType

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Dataproc API
  • dataproc.googleapis.com/Session
• Identity Platform
  • identitytoolkit.googleapis.com/DefaultSupportedIdpConfig
  • identitytoolkit.googleapis.com/InboundSamlConfig
  • identitytoolkit.googleapis.com/OauthIdpConfig
  • identitytoolkit.googleapis.com/Tenant
• Vertex AI
  • aiplatform.googleapis.com/TuningJob

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Video Stitcher API
  • videostitcher.googleapis.com/CdnKey
  • videostitcher.googleapis.com/LiveConfig
  • videostitcher.googleapis.com/Slate
  • videostitcher.googleapis.com/VodConfig

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Network Services API
  • networkservices.googleapis.com/WasmPlugin
  • networkservices.googleapis.com/WasmPluginVersion
• Artifact Registry
  • artifactregistry.googleapis.com/Rule

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Data Lineage API
  • datalineage.googleapis.com/Process
• Cloud Logging
  • logging.googleapis.com/Link
• Cloud Next Generation Firewall Enterprise
  • networksecurity.googleapis.com/AddressGroup
• Gemini for Google Cloud API
  • cloudaicompanion.googleapis.com/CodeRepositoryIndex
  • cloudaicompanion.googleapis.com/RepositoryGroup

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Developer Connect
  • developerconnect.googleapis.com/Connection
  • developerconnect.googleapis.com/GitRepositoryLink
• Cloud Logging
  • logging.googleapis.com/LogView
  • logging.googleapis.com/Settings
  • logging.googleapis.com/RecentQuery
  • logging.googleapis.com/SavedQuery

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Secure Web Proxy
  • networksecurity.googleapis.com/FirewallEndpoint
  • networksecurity.googleapis.com/FirewallEndpointAssociation
  • networksecurity.googleapis.com/SecurityProfile
  • networksecurity.googleapis.com/SecurityProfileGroup
  • networkservices.googleapis.com/ServiceLbPolicy
  • networksecurity.googleapis.com/TlsInspectionPolicy

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Pub/Sub
  • pubsub.googleapis.com/Schema
• Secure Web Proxy
  • networksecurity.googleapis.com/GatewaySecurityPolicy
  • networksecurity.googleapis.com/GatewaySecurityPolicyRule
  • networksecurity.googleapis.com/UrlList

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• GKE On-prem API
  • gkeonprem.googleapis.com/BareMetalCluster
  • gkeonprem.googleapis.com/BareMetalNodePool
  • gkeonprem.googleapis.com/VmwareCluster
  • gkeonprem.googleapis.com/VmwareNodePool

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Cloud Controls Partner APIs
  • cloudcontrolspartner.googleapis.com/Partner
  • cloudcontrolspartner.googleapis.com/Customer
  • cloudcontrolspartner.googleapis.com/Workload

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Vertex AI
  • aiplatform.googleapis.com/NotebookExecutionJob

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Backup and DR Service
  • backupdr.googleapis.com/ManagementServer
• Google Kubernetes Engine
  • k8s.io/Endpoints

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Compute Engine
  • compute.googleapis.com/InstantSnapshot

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Cloud Monitoring
  • monitoring.googleapis.com/UptimeCheckConfig

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Secure Source Manager
  • securesourcemanager.googleapis.com/Instance

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Google Kubernetes Engine
  • admissionregistration.k8s.io/MutatingWebhookConfiguration
  • apps.k8s.io/DaemonSet
  • apps.k8s.io/StatefulSet
  • batch.k8s.io/CronJob
  • extensions.k8s.io/DaemonSet
  • k8s.io/PersistentVolume
  • k8s.io/PersistentVolumeClaim
  • k8s.io/PodTemplate
  • k8s.io/ReplicationController
  • k8s.io/ResourceQuota
  • policy.k8s.io/PodDisruptionBudget
  • storage.k8s.io/StorageClass
  • gateway.networking.k8s.io/Gateway
  • gateway.networking.k8s.io/GatewayClass
  • gateway.networking.k8s.io/HTTPRoute

The following resource types are now publicly available through the Analyze IAM Policies APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning).

• Cloud Config Manager API
  • config.googleapis.com/Deployment
• Cloud Monitoring
  • monitoring.googleapis.com/NotificationChannel
  • monitoring.googleapis.com/Snooze

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Cloud Monitoring
  • monitoring.googleapis.com/Dashboard
• Discovery Engine
  • discoveryengine.googleapis.com/Engine

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Compute Engine
  • compute.googleapis.com/StoragePool

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• AI Platform
  • aiplatform.googleapis.com/Index
  • aiplatform.googleapis.com/IndexEndpoint
• Compute Engine
  • compute.googleapis.com/NetworkAttachment

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Vertex AI Workbench
  • notebooks.googleapis.com/Instance

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• App Hub

  • apphub.googleapis.com/Application
  • apphub.googleapis.com/Service
  • apphub.googleapis.com/ServiceProjectAttachment
  • apphub.googleapis.com/Workload

• Integration Connectors

  • connectors.googleapis.com/EndpointAttachment
  • connectors.googleapis.com/EventSubscription
  • connectors.googleapis.com/ManagedZone

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Apigee
  • apigee.googleapis.com/Instance
  • apigee.googleapis.com/Organization

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Compute Engine
  • compute.googleapis.com/NetworkEdgeSecurityService
• Database Migration
  • datamigration.googleapis.com/ConversionWorkspace
• Redis
  • redis.googleapis.com/Cluster

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• NetApp
  • netapp.googleapis.com/Backup
  • netapp.googleapis.com/BackupPolicy
  • netapp.googleapis.com/BackupVault

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Cloud Configuration Manager API
  • config.googleapis.com/Deployment

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• GKE Hub
  • gkehub.googleapis.com/Fleet
  • gkehub.googleapis.com/Scope
  • gkehub.googleapis.com/Namespace
  • gkehub.googleapis.com/MembershipBinding
  • gkehub.googleapis.com/RBACRoleBinding
• AI Platform
  • aiplatform.googleapis.com/NotebookRuntime
  • aiplatform.googleapis.com/NotebookRuntimeTemplate

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Cloud SQL
  • sqladmin.googleapis.com/Backup
• Cloud Monitoring
  • monitoring.googleapis.com/NotificationChannel
  • monitoring.googleapis.com/Snooze
• VPC Service Controls Policy
  • accesscontextmanager.googleapis.com/AuthorizedOrgsDesc

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Live Stream API
  • livestream.googleapis.com/Asset
  • livestream.googleapis.com/Channel
  • livestream.googleapis.com/Input
  • livestream.googleapis.com/Pool

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Network Connectivity Center
  • networkconnectivity.googleapis.com/RouteTable
  • networkconnectivity.googleapis.com/HubRoute

The following resource types are now publicly available through the analyze policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning).

• Blockchain Node Engine
  • blockchainnodeengine.googleapis.com/BlockchainNode

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• BigQuery Data Transfer Service
  • bigquerydatatransfer.googleapis.com/TransferConfig
• Identity Platform
  • identitytoolkit.googleapis.com/Config

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Blockchain Node Engine
  • blockchainnodeengine.googleapis.com/BlockchainNode

The following resource types are now publicly available through the analyze policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning).

• GKE Enterprise
  • gkemulticloud.googleapis.com/AttachedCluster
  • gkemulticloud.googleapis.com/AwsCluster
  • gkemulticloud.googleapis.com/AwsNodePool
  • gkemulticloud.googleapis.com/AzureClient
  • gkemulticloud.googleapis.com/AzureCluster
  • gkemulticloud.googleapis.com/AzureNodePool

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Cloud Build
  • cloudbuild.googleapis.com/BitbucketServerConfig
  • cloudbuild.googleapis.com/BuildTrigger
  • cloudbuild.googleapis.com/GithubEnterpriseConfig
  • cloudbuild.googleapis.com/GlobalTriggerSettings
  • cloudbuild.googleapis.com/Installation
  • cloudbuild.googleapis.com/WorkerPool

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Kubernetes Resource Model
  • krmapihosting.googleapis.com/KrmApiHost

The following resource types are now publicly available through the analyze policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning).

• Google Cloud VMWare Engine
  • vmwareengine.googleapis.com/ExternalAccessRule
  • vmwareengine.googleapis.com/ExternalAddress
  • vmwareengine.googleapis.com/NetworkPeering
  • vmwareengine.googleapis.com/NetworkPolicy
  • vmwareengine.googleapis.com/PrivateCloud
  • vmwareengine.googleapis.com/Cluster
  • vmwareengine.googleapis.com/PrivateConnection
  • vmwareengine.googleapis.com/VmwareEngineNetwork
• Financial Services
  • financialservices.googleapis.com/Instance
• Discovery Engine
  • discoveryengine.googleapis.com/DataStore
  • discoveryengine.googleapis.com/Collection

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Google Cloud VMWare Engine
  • vmwareengine.googleapis.com/ExternalAccessRule
  • vmwareengine.googleapis.com/ExternalAddress
  • vmwareengine.googleapis.com/NetworkPeering
  • vmwareengine.googleapis.com/NetworkPolicy
  • vmwareengine.googleapis.com/PrivateCloud
  • vmwareengine.googleapis.com/Cluster
  • vmwareengine.googleapis.com/PrivateConnection
  • vmwareengine.googleapis.com/VmwareEngineNetwork

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• admissionregistration.k8s.io/ValidatingWebhookConfiguration

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed and Search (SearchAllResources, SearchAllIamPolicies) APIs.

• Financial Services
  • financialservices.googleapis.com/Dataset
  • financialservices.googleapis.com/BacktestResult
  • financialservices.googleapis.com/EngineConfig
  • financialservices.googleapis.com/Model
  • financialservices.googleapis.com/PredictionResult

The following resource types are now publicly available through the Search APIs (SearchAllResources, SearchAllIamPolicies):

• autoscaling.k8s.io/HorizontalPodAutoscaler
• k8s.io/ServiceAccount

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, and Feed APIs:

• ContactCenter AI Insights
  • contactcenterinsights.googleapis.com/IssueModel
  • contactcenterinsights.googleapis.com/PhraseMatcher
  • contactcenterinsights.googleapis.com/View

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, and Feed APIs.

• Identity and Access Management
  • iam.googleapis.com/PolicyV2

New searchable fields are now available.

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed API, and Search APIs (SearchAllResources, SearchAllIamPolicies).

• netapp.googleapis.com/StoragePool
• netapp.googleapis.com/Volume
• netapp.googleapis.com/Snapshot
• netapp.googleapis.com/ActiveDirectory
• netapp.googleapis.com/KmsConfig
• netapp.googleapis.com/Replication

New searchable fields are now available.

The following searchable fields are now publicly available through the resource search API (SearchAllResources).

• effectiveTagKeys
• effectiveTagValues
• effectiveTagValueIds

The following search result fields are now publicly available through the resource search API (SearchAllResources).

• tags
• effectiveTags

The following resource types are now publicly available through the analyze policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning).

• MachineImage for Compute Engine
  • compute.googleapis.com/MachineImage

The following resource types are now publicly available through the analyze policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning).

• Identity and Access Management
  • iam.googleapis.com/PolicyV2

The following resource types are now publicly available through the analyze policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning).

• Cloud Tasks

  • cloudtasks.googleapis.com/Queue

• Organization Policy

  • orgpolicy.googleapis.com/CustomConstraint

The following resource types are now publicly available through the Search APIs (SearchAllResources, SearchAllIamPolicies).

• Financial Services
  • financialservices.googleapis.com/Instance
• Discovery Engine
  • discoveryengine.googleapis.com/Collection
  • discoveryengine.googleapis.com/DataStore

The following resource types are now publicly available through the analyze policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning).

• Speaker ID
  • speakerid.googleapis.com/Settings

The following resource types are now publicly available through the Search APIs (SearchAllResources, SearchAllIamPolicies).

• IAM

  • iam.googleapis.com/PolicyV2

• Anthos Multi-Cloud (previously GKE Multi-Cloud)

  • gkemulticloud.googleapis.com/AwsCluster
  • gkemulticloud.googleapis.com/AzureCluster
  • gkemulticloud.googleapis.com/AzureClient
  • gkemulticloud.googleapis.com/AwsNodePool
  • gkemulticloud.googleapis.com/AttachedCluster
  • gkemulticloud.googleapis.com/AzureNodePool

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, and Feed APIs.

• Financial Services
  • financialservices.googleapis.com/Instance
• Discovery Engine
  • discoveryengine.googleapis.com/Collection
  • discoveryengine.googleapis.com/DataStore

The following resource types are now publicly available through the analyze policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning).

• Speaker ID
  • speakerid.googleapis.com/Speaker
  • speakerid.googleapis.com/Phrase

The following resource types are now publicly available through the analyze policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning).

• Dataform
  • dataform.googleapis.com/CompilationResult
  • dataform.googleapis.com/ReleaseConfig
  • dataform.googleapis.com/Repository
  • dataform.googleapis.com/WorkflowConfig
  • dataform.googleapis.com/WorkflowInvocation
  • dataform.googleapis.com/Workspace

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, and Feed APIs.

• GKE Multicloud
  • gkemulticloud.googleapis.com/AwsCluster
  • gkemulticloud.googleapis.com/AzureCluster
  • gkemulticloud.googleapis.com/AzureClient
  • gkemulticloud.googleapis.com/AwsNodePool
  • gkemulticloud.googleapis.com/AttachedCluster
  • gkemulticloud.googleapis.com/AzureNodePool

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed API, and Search APIs (SearchAllResources, SearchAllIamPolicies).

• MachineImage for Compute Engine
  • compute.googleapis.com/MachineImage

The following resource types are now publicly available through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed API.

• AlloyDB for PostgreSQL
  • alloydb.googleapis.com/Backup
  • alloydb.googleapis.com/Cluster
  • alloydb.googleapis.com/Instance

The following resource types are now publicly available through the analyze policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning).

• BigQuery Migration Service
  • bigquerymigration.googleapis.com/MigrationWorkflow

The following resource types are now publicly available through the analyze policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning).

• Network Connectivity
  • networkconnectivity.googleapis.com/PolicyBasedRoute
• Database migration
  • datamigration.googleapis.com/PrivateConnection

The following resource types are now publicly available through the analyze policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning).

• Service Directory
  • servicedirectory.googleapis.com/Endpoint
  • servicedirectory.googleapis.com/Service

Projects enrolled in the Security Command Center Premium tier now have access to SQL-like asset queries for that project. Previously asset queries were only available when an organization was enrolled in the Security Command Center Premium tier.

The following resource types are now publicly available through the analyze policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning).

• Cloud Spanner
  • spanner.googleapis.com/InstanceConfig

The following resource types are now publicly available through the Export APIs (ExportAssets, ListAssets, and BatchGetAssetsHistory), Feed API, and Search APIs (SearchAllResources, SearchAllIamPolicies).

• Dataplex
  • dataplex.googleapis.com/DataScan
  • dataplex.googleapis.com/Environment

The following resource types are now publicly available through the analyze policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning).

• Cloud KMS
  • cloudkms.googleapis.com/EkmConfig

The following resource types are now publicly available through the Export APIs (ExportAssets, ListAssets, and BatchGetAssetsHistory), Feed API, and Search APIs (SearchAllResources, SearchAllIamPolicies).

• CloudTasks
  • cloudtasks.googleapis.com/Queue

The following resource types are now publicly available through the analyze policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning).

• Workflows
  • workflows.googleapis.com/Workflow

The following resource types are now publicly available through the Export APIs (ExportAssets, ListAssets, and BatchGetAssetsHistory), Feed API, and Search APIs (SearchAllResources, SearchAllIamPolicies).

• Dataform
  • dataform.googleapis.com/CompilationResult
  • dataform.googleapis.com/ReleaseConfig
  • dataform.googleapis.com/Repository
  • dataform.googleapis.com/WorkflowConfig
  • dataform.googleapis.com/WorkflowInvocation
  • dataform.googleapis.com/Workspace

The following resource types are now publicly available through the Export APIs (ExportAssets, ListAssets, and BatchGetAssetsHistory), Feed API, and Search APIs (SearchAllResources, SearchAllIamPolicies).

• BigqueryMigration
  • bigquerymigration.googleapis.com/MigrationWorkflow

The following resource types are now publicly available through the Export APIs (ExportAssets, ListAssets, and BatchGetAssetsHistory) and Feed API.

• AI Platform
  • aiplatform.googleapis.com/NasJob

The following resource types are now publicly available through the Export APIs (ExportAssets, ListAssets, and BatchGetAssetsHistory), Feed API, and Search APIs (SearchAllResources, SearchAllIamPolicies).

• Network Connectivity
  • networkconnectivity.googleapis.com/PolicyBasedRoutes
• Workflows
  • workflows.googleapis.com/Workflow
• Database Migration Service
  • datamigration.googleapis.com/ConnectionProfile

The following resource types are now publicly available through the Export APIs (ExportAssets, ListAssets, and BatchGetAssetsHistory), Feed API, and Search APIs (SearchAllResources, SearchAllIamPolicies).

• Org Policies
  • orgpolicy.googleapis.com/CustomConstraint
• Service Directory
  • servicedirectory.googleapis.com/Endpoint
  • servicedirectory.googleapis.com/Service

The following resource types are now publicly available through the analyze policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning).

• Compute
  • compute.googleapis.com/PublicDelegatedPrefix
• AI Platform
  • aiplatform.googleapis.com/NasJob

The following resource types are now publicly available through the Export APIs (ExportAssets, ListAssets, and BatchGetAssetsHistory), Feed API, and Search APIs (SearchAllResources, SearchAllIamPolicies).

• Speech
  • speech.googleapis.com/Config
  • speech.googleapis.com/Recognizer
• Networkservices
  • networkservices.googleapis.com/EdgeCacheKeyset
  • networkservices.googleapis.com/EdgeCacheOrigin
  • networkservices.googleapis.com/EdgeCacheService

The following resource type is now publicly available through the Export APIs (ExportAssets, ListAssets, and BatchGetAssetsHistory), Feed API, and Search APIs (SearchAllResources, SearchAllIamPolicies).

• Cloud Spanner
  • spanner.googleapis.com/InstanceConfig

The following resource types are now publicly available through the Search APIs (SearchAllResources, SearchAllIamPolicies).

• Cloud Dataplex

  • dataplex.googleapis.com/DataTaxonomy
  • dataplex.googleapis.com/DataAttribute
  • dataplex.googleapis.com/DataAttributeBinding

• AI Platform

  • aiplatform.googleapis.com/NasJob

The following resource types are now publicly available through the Export APIs (ExportAssets, ListAssets, and BatchGetAssetsHistory), Feed API, and Search APIs (SearchAllResources, SearchAllIamPolicies).

• Cloud Key Management Service
  • cloudkms.googleapis.com/EkmConfig

The following resource types are now publicly available through the analyze policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning).

• Cloud Deploy
  • clouddeploy.googleapis.com/Release
  • clouddeploy.googleapis.com/Rollout

The following resource types are now publicly available through the analyze policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning).

• Service Directory
  • servicedirectory.googleapis.com/Namespace

The following resource types are now publicly available through the Export APIs (ExportAssets, ListAssets, and BatchGetAssetsHistory), Feed API, and Search APIs (SearchAllResources, SearchAllIamPolicies).

• Compute
  • compute.googleapis.com/PublicDelegatedPrefix

The following resource types are now publicly available through the analyze policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning).

• Cloud Deploy
  • clouddeploy.googleapis.com/DeliveryPipeline
  • clouddeploy.googleapis.com/Target

The following resource types are now publicly available through the Export APIs (ExportAssets, ListAssets, and BatchGetAssetsHistory), Feed API, and Search APIs (SearchAllResources, SearchAllIamPolicies).

• Container Registry
  • containerregistry.googleapis.com/Image

The following resource types are now publicly available through the analyze policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning).

• GKE Hub
  • gkehub.googleapis.com/Feature

The following resource types are now publicly available through the analyze policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning).

• Vertex AI

  • aiplatform.googleapis.com/Featurestore
  • aiplatform.googleapis.com/Tensorboard

• Transcoder

  • transcoder.googleapis.com/Job
  • transcoder.googleapis.com/JobTemplate

• Integration Connectors

  • connectors.googleapis.com/Connection

The following resource types are now publicly available through the Export APIs (ExportAssets, ListAssets, and BatchGetAssetsHistory), Feed API, and Search APIs (SearchAllResources, SearchAllIamPolicies).

• VertexAI
  • aiplatform.googleapis.com/Featurestore
  • aiplatform.googleapis.com/Tensorboard
• Cloud Filestore
  • file.googleapis.com/Snapshot

The following resource types are now publicly available through the Export APIs (ExportAssets, ListAssets, and BatchGetAssetsHistory), Feed API, and Search APIs (SearchAllResources, SearchAllIamPolicies).

• Transcoder
  • transcoder.googleapis.com/Job
  • transcoder.googleapis.com/JobTemplate

Preview: You can now query asset metadata via the Cloud Asset Inventory API or the Cloud console, without needing to export the data to a BigQuery table first. This feature is available as a preview for Security Command Center Premium customers.

• Documentation
• Go to Cloud Asset Inventory query in the Cloud console

The following resource types are now publicly available through the Export APIs (ExportAssets, ListAssets, and BatchGetAssetsHistory), Feed API, and Search APIs (SearchAllResources, SearchAllIamPolicies).

• Service Directory
  • servicedirectory.googleapis.com/Namespace

The following resource types are now publicly available through the analyze policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning).

• Org Policies
  • orgpolicy.googleapis.com/Policy

The following resource types are now publicly available through the Export APIs (ExportAssets, ListAssets, and BatchGetAssetsHistory), Feed API, and Search APIs (SearchAllResources, SearchAllIamPolicies).

• Cloud Domains
  • domains.googleapis.com/Registration
• Cloud Functions 2nd Gen
  • cloudfunctions.googleapis.com/Function

The following resource types are now publicly available through the Export APIs (ExportAssets, ListAssets, and BatchGetAssetsHistory), Feed API, and Search APIs (SearchAllResources, SearchAllIamPolicies):

• Networkservices
  • networkservices.googleapis.com/TlsRoute
  • networkservices.googleapis.com/TcpRoute
  • networkservices.googleapis.com/GrpcRoute
  • networkservices.googleapis.com/HttpRoute
  • networkservices.googleapis.com/Mesh
  • networkservices.googleapis.com/Gateway
  • networkservices.googleapis.com/ServiceBinding
  • networkservices.googleapis.com/EndpointPolicy

The following resource types are now publicly available through the analyze policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning).

• Backup for GKE
  • gkebackup.googleapis.com/BackupPlan
  • gkebackup.googleapis.com/Backup

The following resource types are now publicly available through the analyze policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning).

• Serverless VPC Access

  • vpcaccess.googleapis.com/Connector

• Cloud Monitoring

  • monitoring.googleapis.com/AlertPolicy

The following searchable fields are now publicly available through the resource search API (SearchAllResources).

• kmsKeys

The following resource types are now publicly available through the analyze policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning).

• Cloud IDs
  • ids.googleapis.com/Endpoint

The following resource types are now publicly available through the Analyze Policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning):

• Dataproc
  • dataproc.googleapis.com/AutoscalingPolicy
  • dataproc.googleapis.com/Batch
  • dataproc.googleapis.com/WorkflowTemplate

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory) , Feed API, and Search APIs (SearchAllResources and SearchAllIamPolicies):

• Cloud IDS (Cloud Intrusion Detection System)

  • ids.googleapis.com/Endpoint

• Speech-to-Text

  • speech.googleapis.com/CustomClass
  • speech.googleapis.com/PhraseSet

The following resource types are now publicly available through the Analyze Policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning):

• Firebase
  • firebase.googleapis.com/FirebaseProject
  • firebase.googleapis.com/FirebaseAppInfo

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory) , Feed API, and Search APIs (SearchAllResources and SearchAllIamPolicies):

• Backup for GKE
  • gkebackup.googleapis.com/BackupPlan
  • gkebackup.googleapis.com/Backup
  • gkebackup.googleapis.com/VolumeBackup
  • gkebackup.googleapis.com/RestorePlan
  • gkebackup.googleapis.com/Restore
  • gkebackup.googleapis.com/VolumeRestore

The following resource types are now publicly available through the Analyze Policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning):

• Firestore
  • firestore.googleapis.com/Database

The following resource types are now publicly available through the Analyze Policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning):

• Network Connectivity

  • networkconnectivity.googleapis.com/Hub
  • networkconnectivity.googleapis.com/Spoke

• Compute

  • compute.googleapis.com/ServiceAttachment

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory) , Feed API, and Search APIs (SearchAllResources and SearchAllIamPolicies):

• Dataproc
  • dataproc.googleapis.com/AutoscalingPolicy
  • dataproc.googleapis.com/Batch
  • dataproc.googleapis.com/WorkflowTemplate

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory) , Feed API, and Search APIs (SearchAllResources and SearchAllIamPolicies):

• Google Kubernetes Engine (GKE)

  • batch.k8s.io/Job
  • apps.k8s.io/ReplicaSet

• Compute

  • compute.googleapis.com/ServiceAttachment

The following resource types are now publicly available through the resource search API (SearchAllResources) and policy search API (SearchAllIamPolicies):

• Network Connectivity Center

  • networkconnectivity.googleapis.com/Hub
  • networkconnectivity.googleapis.com/Spoke

• Virtual Private Cloud (VPC)

  • vpcaccess.googleapis.com/Connector

• Firebase

  • firebase.googleapis.com/FirebaseProject
  • firebase.googleapis.com/FirebaseAppInfo

The following resource types are now publicly available through the Analyze Policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning):

• API keys
  • apikeys.googleapis.com/Key

The following resource types are now publicly available through the resource search API (SearchAllResources) and policy search API (SearchAllIamPolicies):

• Compute
  • compute.googleapis.com/FirewallPolicy

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory) , Feed API, and Search APIs (SearchAllResources and SearchAllIamPolicies):

• Cloud Run
  • run.googleapis.com/Execution
  • run.googleapis.com/Job
• API Keys
  • apikeys.googleapis.com/Key

The following resource types are now publicly available through the Analyze Policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning):

• Certificate Authority Service
  • privateca.googleapis.com/Certificate

The following resource types are now publicly available through the Analyze Policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning):

• Cloud KMS
  • cloudkms.googleapis.com/EkmConnection
• Cloud Run
  • run.googleapis.com/Job
  • run.googleapis.com/Execution

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory), the Feed API, and the Search APIs (SearchAllResources and SearchAllIamPolicies):

• Cloud Firestore
  • firestore.googleapis.com/Database

The following resource types are now publicly available through the Analyze Policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning):

• Datastream
  • datastream.googleapis.com/Stream
  • datastream.googleapis.com/ConnectionProfile
  • datastream.googleapis.com/PrivateConnection

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory), the Feed API, and the Search APIs (SearchAllResources and SearchAllIamPolicies):

• Cloud KMS
  • cloudkms.googleapis.com/EkmConnection

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory), the Feed API, and the Search APIs (SearchAllResources and SearchAllIamPolicies):

• Certificate Authority Service
  • privateca.googleapis.com/Certificate

The following searchable fields are now publicly available through the resource search API (SearchAllResources).

• tagKeys
• tagValues
• tagValueIds

The following resource types are now publicly available through the Analyze Policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning):

• Database Migration Service
  • datamigration.googleapis.com/MigrationJob
  • datamigration.googleapis.com/ConnectionProfile

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory), the Feed API, and the Search APIs (SearchAllResources and SearchAllIamPolicies):

• Org Policies
  • orgpolicy.googleapis.com/Policy
• BigQuery
  • All onboarded resources in the two new regions: aws-us-east-1; azure-eastus2.

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory) and the Feed API:

• Cloud Resource Manager Tags
  • cloudresourcemanager.googleapis.com/TagBinding

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory) and the Feed API:

• Dataplex
  • dataplex.googleapis.com/Lake
  • dataplex.googleapis.com/Task
  • dataplex.googleapis.com/Zone
  • dataplex.googleapis.com/Asset

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory), the Feed API, and the Search APIs (SearchAllResources and SearchAllIamPolicies):

• Datastream
  • datastream.googleapis.com/ConnectionProfile
  • datastream.googleapis.com/PrivateConnection
  • datastream.googleapis.com/Stream
• Anthos clusters on-prem
  • anthos.googleapis.com/ConnectedCluster
• Database Migration Service
  • datamigration.googleapis.com/ConnectionProfile
  • datamigration.googleapis.com/MigrationJob

The following resource types are now publicly available through the Analyze Policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning):

• Dialog ES API
  • dialogflow.googleapis.com/ConversationProfile
  • dialogflow.googleapis.com/KnowledgeBase
• Vertex AI
  • aiplatform.googleapis.com/PipelineJob
  • aiplatform.googleapis.com/MetadataStore
  • aiplatform.googleapis.com/ModelDeploymentMonitoringJob

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory), the Feed API, and the Search APIs (SearchAllResources and SearchAllIamPolicies):

• Dialog ES API
  • dialogflow.googleapis.com/ConversationProfile
  • dialogflow.googleapis.com/KnowledgeBase

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory) and the Feed API:

• Network Connectivity API
  • networkconnectivity.googleapis.com/Hub
  • networkconnectivity.googleapis.com/Spoke

The following resource types are now publicly available through the resource search API (SearchAllResources) and policy search API (SearchAllIamPolicies):

• Network Management API
  • networkmanagement.googleapis.com/ConnectivityTest

The following resource types are now publicly available through the Analyze Policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning):

• Certificate Authority Service
  • privateca.googleapis.com/CaPool
  • privateca.googleapis.com/CertificateAuthority
  • privateca.googleapis.com/CertificateRevocationList
  • privateca.googleapis.com/CertificateTemplate
• DLP
  • dlp.googleapis.com/DlpJob
  • dlp.googleapis.com/DeidentifyTemplate
  • dlp.googleapis.com/InspectTemplate
  • dlp.googleapis.com/JobTrigger
  • dlp.googleapis.com/StoredInfoType

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory) and the Feed API:

• Firestore
  • firestore.googleapis.com/Database

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory), the Feed API, and the Search APIs (SearchAllResources and SearchAllIamPolicies):

• Cloud Healthcare API
  • healthcare.googleapis.com/ConsentStore
  • healthcare.googleapis.com/Dataset
  • healthcare.googleapis.com/DicomStore
  • healthcare.googleapis.com/FhirStore
  • healthcare.googleapis.com/Hl7V2Store

The following resource types are now publicly available through the resource search API (SearchAllResources) and policy search API (SearchAllIamPolicies):

• Vertex AI
  • aiplatform.googleapis.com/PipelineJob

The following resource types are now publicly available through the resource search API (SearchAllResources) and policy search API (SearchAllIamPolicies):

• Vertex AI
  • aiplatform.googleapis.com/MetadataStore
  • aiplatform.googleapis.com/ModelDeploymentMonitoringJob

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory) and the Feed API:

• Google Kubernetes Engine
  • apps.k8s.io/Deployment
• Cloud Billing
  • cloudbilling.googleapis.com/ProjectBillingInfo

The following resource types are now publicly available through the resource search API (SearchAllResources) and policy search API (SearchAllIamPolicies):

• Cloud Billing
  • cloudbilling.googleapis.com/ProjectBillingInfo

The following resource types are now publicly available through the resource search API (SearchAllResources) and policy search API (SearchAllIamPolicies):

• Access Policy (VPC Service Controls Policy)
  • identity.accesscontextmanager.googleapis.com/AccessLevel
  • identity.accesscontextmanager.googleapis.com/AccessPolicy
  • identity.accesscontextmanager.googleapis.com/ServicePerimeter

The following resource types are now publicly available through the Analyze Policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning):

• Cloud Dataplex
  • dataplex.googleapis.com/Asset
  • dataplex.googleapis.com/Zone
  • dataplex.googleapis.com/Task
  • dataplex.googleapis.com/Lake

The following resource types are now publicly available through the Analyze Policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning):

• Game Services
  • gameservices.googleapis.com/GameServerCluster
  • gameservices.googleapis.com/Realm
  • gameservices.googleapis.com/GameServerConfig
  • gameservices.googleapis.com/GameServerDeployment

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory) and the Feed API:

• Cloud SQL
  • sqladmin.googleapis.com/BackupRun

The following resource types are now publicly available through the resource search API (SearchAllResources) and policy search API (SearchAllIamPolicies):

• Cloud OS Config
  • osconfig.googleapis.com/VulnerabilityReport
• Cloud Dataplex
  • dataplex.googleapis.com/Asset
  • dataplex.googleapis.com/Zone
  • dataplex.googleapis.com/Task
  • dataplex.googleapis.com/Lake

The following resource types are now publicly available through the Analyze Policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning):

• Dialogflow
  • dialogflow.googleapis.com/Agent
  • dialogflow.googleapis.com/LocationSettings
• Artifactregistry
  • artifactregistry.googleapis.com/DockerImage
• GKE
  • networking.k8s.io/NetworkPolicy
• DLP
  • dlp.googleapis.com/DlpJob
  • dlp.googleapis.com/DeidentifyTemplate
  • dlp.googleapis.com/InspectTemplate
  • dlp.googleapis.com/JobTrigger
  • dlp.googleapis.com/StoredInfoType
• Service Management
  • servicemanagement.googleapis.com/ManagedService

The following resource types are now publicly available through the resource search API (SearchAllResources) and policy search API (SearchAllIamPolicies):

• Game Service
  • gameservices.googleapis.com/GameServerCluster
  • gameservices.googleapis.com/GameServerConfig
  • gameservices.googleapis.com/GameServerDeployment
  • gameservices.googleapis.com/Realm

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory) and the Feed API:

• Data Loss Prevention
  • dlp.googleapis.com/DlpJob
  • dlp.googleapis.com/DeidentifyTemplate
  • dlp.googleapis.com/InspectTemplate
  • dlp.googleapis.com/JobTrigger
  • dlp.googleapis.com/StoredInfoType

The following resource types are now publicly available through the Analyze Policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning):

• Assured Workloads
  • assuredworkloads.googleapis.com/Workload
• DocumentAI
  • documentai.googleapis.com/ProcessorVersion

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory) and the Feed API:

• Vertex AI
  • aiplatform.googleapis.com/PipelineJob

The following resource types are now publicly available through the Analyze Policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning):

• BigQuery
  • bigquery.googleapis.com/Model
• Google Kubernetes Engine
  • apps.k8s.io/Deployment
  • apps.k8s.io/ReplicaSet
  • batch.k8s.io/Job

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory) and the Feed API:

• Cloud Resource Manager Tags
  • cloudresourcemanager.googleapis.com/TagKey
  • cloudresourcemanager.googleapis.com/TagValue
• Cloud OS Config
  • osconfig.googleapis.com/VulnerabilityReport

The following resource types are now publicly available through the resource search API (SearchAllResources) and policy search API (SearchAllIamPolicies):

• Metastore
  • metastore.googleapis.com/Service
  • metastore.googleapis.com/MetadataImport
  • metastore.googleapis.com/Backup

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory) and the Feed API:

• Metastore
  • metastore.googleapis.com/Service
  • metastore.googleapis.com/MetadataImport
  • metastore.googleapis.com/Backup

The following resource types are now publicly available through the resource search API (SearchAllResources) and policy search API (SearchAllIamPolicies):

• Monitoring
  • monitoring.googleapis.com/AlertPolicy

The following resource types are now publicly available through the resource search API (SearchAllResources) and policy search API (SearchAllIamPolicies):

• Service Management
  • servicemanagement.googleapis.com/ManagedService
• Certificate Authority Service
  • privateca.googleapis.com/CaPool
  • privateca.googleapis.com/CertificateAuthority
  • privateca.googleapis.com/CertificateRevocationList
  • privateca.googleapis.com/CertificateTemplate

The following resource types are now publicly available through the resource search API (SearchAllResources) and policy search API (SearchAllIamPolicies):

• Google Kubernetes Engine
  • networking.k8s.io/NetworkPolicy

Cloud Asset Inventory Console is now generally available.

This release enables you to view the following information for your Cloud deployment, using powerful search capabilities and easy filtering.

• Details and history of resources and IAM policies
• Machine type statistics
• Policy statistics
• Insights of your Cloud footprint
• IAM policies as a whole, or scoped to individual IAM policies' details

Learn more about searching resources and searching policies in the console.

The following resource types are now publicly available through the resource search API (SearchAllResources) and policy search API (SearchAllIamPolicies):

• BigQuery
  • bigquery.googleapis.com/Model
• Cloud SQL
  • sqladmin.googleapis.com/BackupRun

The following resource types are now publicly available through the Analyze Policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning):

• Cloud SQL
  • sqladmin.googleapis.com/BackupRun
• Artifact Registry
  • artifactregistry.googleapis.com/Repository
• Cloud Bigtable
  • bigtableadmin.googleapis.com/AppProfile
  • bigtableadmin.googleapis.com/Backup

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory) and the Feed API:

• Vertex AI
  • aiplatform.googleapis.com/MetadataStore
• Dialogflow
  • dialogflow.googleapis.com/Agent
  • dialogflow.googleapis.com/LocationSettings

The following resource types are now publicly available through the resource search API (SearchAllResources) and policy search API (SearchAllIamPolicies):

• Dialogflow
  • dialogflow.googleapis.com/Agent
  • dialogflow.googleapis.com/LocationSettings

The following resource types are now publicly available through the Analyze Policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning):

• Cloud OS Config
  • osconfig.googleapis.com/PatchDeployment
• Container
  • k8s.io/Service
• Vertex AI
  • aiplatform.googleapis.com/BatchPredictionJob
  • aiplatform.googleapis.com/CustomJob
  • aiplatform.googleapis.com/DataLabelingJob
  • aiplatform.googleapis.com/Dataset
  • aiplatform.googleapis.com/Endpoint
  • aiplatform.googleapis.com/HyperparameterTuningJob
  • aiplatform.googleapis.com/Model
  • aiplatform.googleapis.com/SpecialistPool
  • aiplatform.googleapis.com/TrainingPipeline

The following resource types are now publicly available through the Analyze Policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning):

• App Engine Memcache
  • memcache.googleapis.com/Instance
• Filestore
  • file.googleapis.com/Instance
  • file.googleapis.com/Backup

The following resource types are now publicly available through the resource search API (SearchAllResources), policy search API (SearchAllIamPolicies), and Analyze Policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning) : + Eventarc + eventarc.googleapis.com/Trigger

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory) and the Feed API:

• Vertex AI
  • aiplatform.googleapis.com/ModelDeploymentMonitoringJob

New resource types are now available.

The following resource types are now publicly available through the Analyze Policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning):

• Container
  • k8s.io/Node
  • k8s.io/Pod
  • k8s.io/Namespace
  • rbac.authorization.k8s.io/Role
  • rbac.authorization.k8s.io/RoleBinding
  • rbac.authorization.k8s.io/ClusterRole
  • rbac.authorization.k8s.io/ClusterRoleBinding

New resource types are now available.

The following resource types are now publicly available through the Analyze Policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning):

• Logging
  • logging.googleapis.com/LogBucket
  • logging.googleapis.com/LogSink
  • logging.googleapis.com/LogMetric

New resource types are now available.

The following resource types are now publicly available through the Analyze Policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning):

• Secret Manager
  • secretmanager.googleapis.com/Secret
  • secretmanager.googleapis.com/SecretVersion

New resource types are now available.

The following resource types are now publicly available through the Analyze Policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning):

• Spanner
  • spanner.googleapis.com/Database
  • spanner.googleapis.com/Instance
  • spanner.googleapis.com/Backup
• Document AI
  • documentai.googleapis.com/HumanReviewConfig
  • documentai.googleapis.com/LabelerPool
  • documentai.googleapis.com/Processor

New resource types are now available to allowlisted users.

The following resource types are now available to allowlisted users through the Export APIs (ExportAssets and BatchGetAssetsHistory) and the Feed API. To join the allowlist, follow these instructions.

• Firebase
  • firebase.googleapis.com/FirebaseProject
  • firebase.googleapis.com/FirebaseAppInfo

New resource types are now available.

The following resource types are now publicly available through the Analyze Policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning):

• Hub
  • gkehub.googleapis.com/Membership
• Managed Service For Microsoft Active Directory
  • managedservices.googapis.com/Domain
• API Gateway
  • apigateway.googleapis.com/Api
  • apigateway.googleapis.com/ApiConfig
  • apigateway.googleapis.com/Gateway

New resource types are now available.

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory) and the Feed API:

• Service Management
  • servicemanagement.googleapis.com/ManagedService

New resource types now available

The following resource types are now publicly available through the resource search API (SearchAllResources) and policy search API (SearchAllIamPolicies):

• Filestore
  • file.googleapis.com/Backup
  • file.googleapis.com/Instance
• Assured Workloads for Government
  • assuredworkloads.googleapis.com/Workload
• Eventarc
  • eventarc.googleapis.com/Trigger

New resource types now available

The following resource types are now publicly available through the resource search API (SearchAllResources) and policy search API (SearchAllIamPolicies):

• OSConfig
  • osconfig.googleapis.com/PatchDeployment
• OS inventory
  • compute.googleapis.com/Instance (OS inventory is attached on VM instance)
• Artifact Registry
  • artifactregistry.googleapis.com/DockerImage
  • artifactregistry.googleapis.com/Repository
• Cloud Logging
  • logging.googleapis.com/LogBucket
  • logging.googleapis.com/LogMetric
  • logging.googleapis.com/LogSink

The following resource types are now publicly available through the Analyze Policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning): + Cloud Redis + redis.googleapis.com/Instance

New resource types now available

The following resource types are now publicly available through the resource search API (SearchAllResources) and policy search API (SearchAllIamPolicies): + Secret Manager + secretmanager.googleapis.com/Secret + secretmanager.googleapis.com/SecretVersion

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory) and the Feed API: + Google Kubernetes Engine + networking.k8s.io/Networkpolicy

Full resource metadata is available in SearchAllResources. A new request parameter read_mask is available to allow you to select which fields to be returned in the search result. Please visit our user guide for more information.

Attached asset is available in SearchAllResources. Attached assets are the assets attached to a primary resource, for example the OS Inventory contains runtime information of Compute Instance. It allows customers to search and filter by the attributes of the primary resource (e.g., Compute Instance) and the attached assets (e.g., OS Inventory) in a single query.

New resource types are now available.

The following resource types are now publicly available through the resource search API (SearchAllResources) and policy search API (SearchAllIamPolicies):

• Managed Service For Microsoft Active Directory
  • managedservices.googapis.com/Domain

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory) and the Feed API:

• Secret Manager (Newly added real-time feed support)
  • secretmanager.googleapis.com/Secret
  • secretmanager.googleapis.com/SecretVersion

New resource types are now available.

The following resource types are now publicly available through the resource search API (SearchAllResources) and policy search API (SearchAllIamPolicies):

• Google Kubernetes Engine
  • apps.k8s.io/Deployment
  • apps.k8s.io/ReplicaSet
  • batch.k8s.io/Job
• Hub
  • gkehub.googleapis.com/Membership
• API Gateway
  • apigateway.googleapis.com/Api
  • apigateway.googleapis.com/ApiConfig
  • apigateway.googleapis.com/Gateway
• Document AI
  • documentai.googleapis.com/HumanReviewConfig
  • documentai.googleapis.com/LabelerPool
  • documentai.googleapis.com/Processor
• Vertex AI
  • aiplatform.googleapis.com/BatchPredictionJob
  • aiplatform.googleapis.com/CustomJob
  • aiplatform.googleapis.com/DataLabelingJob
  • aiplatform.googleapis.com/Dataset
  • aiplatform.googleapis.com/Endpoint
  • aiplatform.googleapis.com/HyperparameterTuningJob
  • aiplatform.googleapis.com/Model
  • aiplatform.googleapis.com/SpecialistPool
  • aiplatform.googleapis.com/TrainingPipeline

The following resource types are now publicly available through the Export APIs (ExportAssets, ListAssets, BatchGetAssetsHistory) and the Feed API:

• Serverless VPC Access
  • vpcaccess.googleapis.com/Connector
• Certificate Authority Service
  • privateca.googleapis.com/CaPool
  • privateca.googleapis.com/CertificateAuthority
  • privateca.googleapis.com/CertificateRevocationList
  • privateca.googleapis.com/CertificateTemplate

The following resource types are now publicly available through the Analyze Policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning):

• Cloud KMS
  • cloudkms.googleapis.com/KeyRing
  • cloudkms.googleapis.com/CryptoKey
  • cloudkms.googleapis.com/CryptoKeyVersion
  • cloudkms.googleapis.com/ImportJob
• Service Usage
  • serviceusage.googleapis.com/Service
• Cloud Data Fusion
  • datafusion.googleapis.com/Instance

New resource types are now available.

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory) and the Feed API:

• Cloud Redis
  • redis.googleapis.com/Instance

Cloud Asset Inventory Console Preview is now publicly available. It enables you to see insights about Google Cloud footprint, details and history of resources, and provides powerful and easy filtering and search capabilities.

New resource types are now available.

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory) and the Feed API:

• Cloud Bigtable
  • bigtableadmin.googleapis.com/AppProfile

New resource types are now available.

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory) and the Feed API:

• Artifact Registry
  • artifactregistry.googleapis.com/Repository

Policy Analyzer now supports evaluations on time-based conditions. See the user guide for more information.

Asset Insights are now available. See the user guide for more information.

New resource types are now available.

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory) and the Feed API:

• Cloud Bigtable
  • bigtableadmin.googleapis.com/Backup

New resource types are now available.

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory) and the Feed API:

• Cloud Monitoring
  • monitoring.googleapis.com/AlertPolicy
• Cloud Filestore
  • file.googleapis.com/Backup

New resource types are now available.

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory) and the Feed API:

• Cloud AI Platform (Unified)
  • aiplatform.googleapis.com/BatchPredictionJob
  • aiplatform.googleapis.com/CustomJob
  • aiplatform.googleapis.com/DataLabelingJob
  • aiplatform.googleapis.com/Dataset
  • aiplatform.googleapis.com/Endpoint
  • aiplatform.googleapis.com/HyperparameterTuningJob
  • aiplatform.googleapis.com/Model
  • aiplatform.googleapis.com/SpecialistPool
  • aiplatform.googleapis.com/TrainingPipeline

New resource types are now available.

The following resource types are now publicly available through the resource search API (SearchAllResources) and policy search API (SearchAllIamPolicies):

• Service Usage
  • serviceusage.googleapis.com/Service
• Cloud Data Fusion
  • datafusion.googleapis.com/Instance

The following resource types are now publicly available through the Export APIs (ExportAssets and BatchGetAssetsHistory) and the Feed API:

• Cloud Document AI
  • documentai.googleapis.com/HumanReviewConfig
  • documentai.googleapis.com/LabelerPool
  • documentai.googleapis.com/Processor

New resource types are now available.

The following resource types are now publicly available through the export API (ExportAssets and BatchGetAssetsHistory) and the Feed API:

• Cloud Memcache
  • memcache.googleapis.com/Instance
• Memorystore for Redis
  • redis.googleapis.com/Instance

The following resource types are now publicly available through the resource search API (SearchAllResources) and policy search API (SearchAllIamPolicies):

• Cloud Composer
  • composer.googleapis.com/Environment
• Cloud Run
  • run.googleapis.com/DomainMapping
  • run.googleapis.com/Revision
  • run.googleapis.com/Service
• Cloud KMS
  • cloudkms.googleapis.com/KeyRing
  • cloudkms.googleapis.com/CryptoKey
  • cloudkms.googleapis.com/CryptoKeyVersion
  • cloudkms.googleapis.com/ImportJob

The following resource types are now publicly available through the analyze policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning):

• Cloud Composer
  • composer.googleapis.com/Environment
• Cloud Run
  • run.googleapis.com/Service
  • run.googleapis.com/Revision
• Cloud TPU
  • tpu.googleapis.com/Node
• Cloud Storage
  • storage.googleapis.com/Bucket

Exporting asset relationships is now available in public preview through the Export API (ExportAssets). The following relationship types are available now:

• INSTANCE_TO_INSTANCEGROUP

The following searchable field is now publicly available through the resource search API (SearchAllResources):

• parentFullResourceName

New resource types now available.

The following resource types are now publicly available through the resource search API (SearchAllResources), policy search API (SearchAllIamPolicies), and analyze policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning):

• Cloud Functions
  • cloudfunctions.googleapis.com/CloudFunction
• Cloud SQL
  • sqladmin.googleapis.com/Instance
• Cloud TPU
  • tpu.googleapis.com/Node

The following resource types are now publicly available through the export API (ExportAssets and BatchGetAssetsHistory) and the Feed API:

• Artifact Registry
  • artifactregistry.googleapis.com/DockerImage
• Api Gateway
  • apigateway.googleapis.com/Api
  • apigateway.googleapis.com/ApiConfig
  • apigateway.googleapis.com/Gateway
• Assured Workloads for Government
  • assuredworkloads.googleapis.com/Workload

The following searchable fields are now publicly available through the resource search API (SearchAllResources):

• parentAssetType
• project
• folders
• organization

New resource types now available.

The following resource types are now publicly available through the resource search API (SearchAllResources), policy search API (SearchAllIamPolicies), and analyze policy APIs (AnalyzeIamPolicy and AnalyzeIamPolicyLongrunning).

• BigQuery

  • bigquery.googleapis.com/Table

• Cloud Bigtable

  • bigtableadmin.googleapis.com/Cluster
  • bigtableadmin.googleapis.com/Instance
  • bigtableadmin.googleapis.com/Table

• Pub/Sub

  • pubsub.googleapis.com/Topic
  • pubsub.googleapis.com/Subscription
  • pubsub.googleapis.com/Snapshot

• Compute Engine (Note that Compute Engine types cover zonal, regional, and global resources.)

  • compute.googleapis.com/Reservation
  • compute.googleapis.com/Commitment
  • compute.googleapis.com/ExternalVpnGateway
  • compute.googleapis.com/NetworkEndpointGroup
  • compute.googleapis.com/NodeGroup
  • compute.googleapis.com/NodeTemplate
  • compute.googleapis.com/PacketMirroring
  • compute.googleapis.com/Project
  • compute.googleapis.com/ResourcePolicy
  • compute.googleapis.com/SslPolicy
  • compute.googleapis.com/VpnGateway

• Dataflow

  • dataflow.googleapis.com/Job

New resource types now available.

The following resource types are now publicly available through the resource search API (SearchAllResources), and policy search API (SearchAllIamPolicies).

• Cloud SQL

  • sqladmin.googleapis.com/Instance

• Cloud Storage

  • storage.googleapis.com/Bucket

• Google Kubernetes Engine

  • container.googleapis.com/NodePool

New searchable fields now available.

The following searchable fields are now publicly available through the resource search API (SearchAllResources).

• kmsKey
• state
• createTime
• updateTime

New resource types now available.

The following resource types are now publicly available through the asset inventory APIs (ExportAssets and BatchGetAssetsHistory) and the Feed API.

• Service Directory
  • servicedirectory.googleapis.com/Namespace

Filestore resource type now available

The following Filestore resource type is now publicly available through the Cloud Asset APIs.

• file.googleapis.com/Instance

OS inventory management resource type now available

The following OS inventory management resource type is now publicly available through the Cloud Asset APIs.

• compute.googleapis.com/Instance

This resource type provides information on the operating system, installed packages, and available package updates for a Compute Engine VM instance.

Cloud TPU resource type now available

The following Cloud TPU resource type is now publicly available through the Cloud Asset APIs.

• tpu.googleapis.com/Node

Cloud Composer resource type now available

The following Cloud Composer resource type is now publicly available through the Cloud Asset APIs.

• composer.googleapis.com/Environment

Policy Analyzer API GA Release

You can now use the Policy Analyzer API to analyze IAM policies in your project, folder, or organization, and then write the results to a BigQuery table. Note that the Policy Analyzer in console remains in Preview release.

Secret Manager resource types now available

The following Secret Manager resource types are now publicly available through the Cloud Asset APIs.

• secretmanager.googleapis.com/Secret
• secretmanager.googleapis.com/SecretVersion

Compute resource types now available

The following Compute resource types are now publicly available through the Cloud Asset APIs.

• compute.googleapis.com/NodeGroup
• compute.googleapis.com/NodeTemplate
• compute.googleapis.com/ResourcePolicy

List Assets API Beta Release

You can now list assets within an organization, project, or folder and receive the results as a List API response with pagination support.

Cloud Functions resource type now available

The following Cloud Functions resource type is now publicly available through the Cloud Asset APIs.

• cloudfunctions.googleapis.com/CloudFunction

Game Servers resource types now available

The following Game Servers resource types are now publicly available through the Cloud Asset APIs.

• gameservices.googleapis.com/GameServerCluster
• gameservices.googleapis.com/Realm
• gameservices.googleapis.com/GameServerConfig
• gameservices.googleapis.com/GameServerDeployment

Cloud Dataflow resource type now available

The following Cloud Dataflow resource type is now publicly available through the Cloud Asset APIs.

• dataflow.googleapis.com/Job

Pub/Sub resource type now available

The following Pub/Sub resource type is now publicly available through the Cloud Asset APIs.

• pubsub.googleapis.com/Snapshot

Compute resource types now available

The following Compute resource types are now publicly available through the Cloud Asset APIs.

• compute.googleapis.com/VpnGateway
• compute.googleapis.com/ExternalVpnGateway

Managed Service for Microsoft Active Directory resource type now available

The following Managed Microsoft AD resource type is now publicly available through the Cloud Asset APIs.

• managedidentities.googleapis.com/Domain

Conditional real-time notifications

You can now configure your feeds so that you only receive notifications which match your customized conditions.

Resource and policy search GA release

You can now search resource metadata and IAM policies in your project, folder or organization.

Network Intelligence resource type now available

The following Network Intelligence resource type is now publicly available through the Cloud Asset APIs.

• networkmanagement.googleapis.com/ConnectivityTest

Cloud Run resource types now available

The following Cloud Run resource types are now publicly available through the Cloud Asset APIs.

• run.googleapis.com/DomainMapping
• run.googleapis.com/Revision
• run.googleapis.com/Service

Cloud Spanner resource type now available

The following Cloud Spanner resource type is now publicly available through the Cloud Asset APIs.

• spanner.googleapis.com/Backup

Cloud Key Management Service resource type now available

The following Cloud KMS resource type is now publicly available through the Cloud Asset APIs.

• cloudkms.googleapis.com/ImportJob

Cloud OS Config resource type now available

The following Cloud OS Config resource type is now publicly available through the Cloud Asset APIs.

• osconfig.googleapis.com/PatchDeployment

Policy Analyzer Beta Release

You can now analyze IAM policies in your folder or organization, and then write the results to Cloud Storage.

BigQuery export for org policies and access policies

You can now export org policies and access policies to BigQuery tables. See Exporting assets to BigQuery for more information.

Real-time asset monitoring for org policies and access policies

You can now subscribe to real-time notifications for changes to org policies and access policies. See Monitoring asset changes for more information.

Resource and policy search beta release

You can now search resource metadata and IAM policies in your project, folder or organization.

Real-time notifications GA

The ability to receive real-time notifications for asset changes is now generally available. You can monitor asset changes on a project by creating an activity feed, and then subscribe to the feed to receive real-time notifications about the changes.

Export to BigQuery GA

The ability to export asset metadata to BigQuery is now generally available. See the Exporting to BigQuery topic to learn more.

Real-time notifications for asset configuration changes Beta release

Beta release of the real-time notification feature for continuous asset monitoring.

Cloud Asset Inventory General Availability

Launched the new V1 version of the Cloud Asset API.

Cloud Asset Inventory Beta release

Cloud Asset Inventory is a storage service that keeps a five week history of Google Cloud asset metadata. It allows you to export all asset metadata at a certain timestamp or timeframe.