Security Command Center 中支持的资产类型

本页面列出了 Security Command Center Assets API 支持的 Google Cloud 资产。Security Command Center Assets API 支持 Cloud Asset Inventory（Google 的集中式云管理资产目录）中的部分资产。

Security Command Center 中的资源类型使用的命名惯例与 Cloud Asset Inventory 不同。下表列出了支持的资源类型，并包括 Security Command Center 的资源类型格式。在 Security Command Center API 中列出资源时，资源类型非常有用。

表 1：支持的资产类型
服务 Cloud Asset Inventory 格式 Security Command Center 格式
App Engine appengine.googleapis.com/Application google.appengine.Application
appengine.googleapis.com/Service google.appengine.Service
appengine.googleapis.com/Version google.appengine.Version
Artifact Registry artifactregistry.googleapis.com/Repository google.artifactregistry.Repository
BigQuery bigquery.googleapis.com/Dataset google.cloud.bigquery.Dataset
Cloud Composer composer.googleapis.com/Environment google.composer.Environment
Cloud DNS dns.googleapis.com/ManagedZone google.cloud.dns.ManagedZone
dns.googleapis.com/Policy google.cloud.dns.Policy
Cloud Run functions cloudfunctions.googleapis.com/CloudFunction google.cloud.functions.CloudFunction
Cloud Key Management Service cloudkms.googleapis.com/CryptoKey google.cloud.kms.CryptoKey
cloudkms.googleapis.com/CryptoKeyVersion google.cloud.kms.CryptoKeyVersion
cloudkms.googleapis.com/ImportJob google.cloud.kms.ImportJob
cloudkms.googleapis.com/KeyRing google.cloud.kms.KeyRing
Cloud Logging logging.googleapis.com/LogBucket google.logging.LogBucket
logging.googleapis.com/LogMetric google.logging.LogMetric
logging.googleapis.com/LogSink google.logging.LogSink
Spanner spanner.googleapis.com/Database google.spanner.Database
spanner.googleapis.com/Instance google.spanner.Instance
Cloud SQL sqladmin.googleapis.com/Instance google.cloud.sql.Instance
Cloud Storage storage.googleapis.com/Bucket google.cloud.storage.Bucket
Compute Engine compute.googleapis.com/Address google.compute.Address
compute.googleapis.com/Autoscaler google.compute.Autoscaler
compute.googleapis.com/BackendBucket google.compute.BackendBucket
compute.googleapis.com/BackendService google.compute.BackendService
compute.googleapis.com/Commitment google.compute.Commitment
compute.googleapis.com/Disk google.compute.Disk
compute.googleapis.com/Firewall google.compute.Firewall
compute.googleapis.com/ForwardingRule google.compute.ForwardingRule
compute.googleapis.com/GlobalAddress google.compute.GlobalAddress
compute.googleapis.com/GlobalForwardingRule google.compute.GlobalForwardingRule
compute.googleapis.com/HealthCheck google.compute.HealthCheck
compute.googleapis.com/HttpHealthCheck google.compute.HttpHealthCheck
compute.googleapis.com/HttpsHealthCheck google.compute.HttpsHealthCheck
compute.googleapis.com/Image google.compute.Image
compute.googleapis.com/Instance google.compute.Instance
compute.googleapis.com/InstanceGroup google.compute.InstanceGroup
compute.googleapis.com/InstanceGroupManagers google.compute.InstanceGroupManager
compute.googleapis.com/InstanceTemplate google.compute.InstanceTemplate
compute.googleapis.com/InterconnectAttachment google.compute.InterconnectAttachment
compute.googleapis.com/License google.compute.License
compute.googleapis.com/Network google.compute.Network
compute.googleapis.com/NetworkEndpointGroup google.compute.NetworkEndpointGroup
compute.googleapis.com/NodeGroup google.compute.NodeGroup
compute.googleapis.com/NodeTemplate google.compute.NodeTemplate
compute.googleapis.com/PacketMirroring google.compute.PacketMirroring
compute.googleapis.com/Project google.compute.Project
compute.googleapis.com/RegionBackendService google.compute.RegionBackendService
compute.googleapis.com/RegionDisk google.compute.RegionDisk
compute.googleapis.com/Reservation google.compute.Reservation
compute.googleapis.com/ResourcePolicy google.compute.ResourcePolicy
compute.googleapis.com/Route google.compute.Route
compute.googleapis.com/Router google.compute.Router
compute.googleapis.com/SecurityPolicy google.compute.SecurityPolicy
compute.googleapis.com/Snapshot google.compute.Snapshot
compute.googleapis.com/SslCertificate google.compute.SslCertificate
compute.googleapis.com/SslPolicy google.compute.SslPolicy
compute.googleapis.com/Subnetwork google.compute.Subnetwork
compute.googleapis.com/TargetHttpProxy google.compute.TargetHttpProxy
compute.googleapis.com/TargetHttpsProxy google.compute.TargetHttpsProxy
compute.googleapis.com/TargetInstance google.compute.TargetInstance
compute.googleapis.com/TargetPool google.compute.TargetPool
compute.googleapis.com/TargetSslProxy google.compute.TargetSslProxy
compute.googleapis.com/TargetTcpProxy google.compute.TargetTcpProxy
compute.googleapis.com/TargetVpnGateway google.compute.TargetVpnGateway
compute.googleapis.com/UrlMap google.compute.UrlMap
compute.googleapis.com/VpnGateway google.compute.VpnGateway
compute.googleapis.com/VpnGateway google.compute.VpnGateway
compute.googleapis.com/VpnTunnel google.compute.VpnTunnel
Container Registry

注意：Container Registry 实现了 Docker HTTP API V2 且不提供公共 API。

 containerregistry.googleapis.com/Image google.containerregistry.Image
Dataflow dataflow.googleapis.com/Job google.dataflow.Job
Dataproc dataproc.googleapis.com/Cluster google.cloud.dataproc.Cluster
Google Kubernetes Engine container.googleapis.com/Cluster google.container.Cluster
rbac.authorization.k8s.io/ClusterRole google.container.ClusterRole
rbac.authorization.k8s.io/ClusterRoleBinding google.container.ClusterRoleBinding
k8s.io/Namespace google.container.Namespace
k8s.io/Node google.container.Node
k8s.io/Pod google.container.Pod
rbac.authorization.k8s.io/Role google.container.Role
rbac.authorization.k8s.io/RoleBinding google.container.RoleBinding
k8s.io/Service google.container.Service
Identity and Access Management iam.googleapis.com/Role google.iam.Role
iam.googleapis.com/ServiceAccount google.iam.ServiceAccount
iam.googleapis.com/ServiceAccountKey google.iam.ServiceAccountKey
Pub/Sub pubsub.googleapis.com/Snapshot google.pubsub.Snapshot
pubsub.googleapis.com/Subscription google.pubsub.Subscription
pubsub.googleapis.com/Topic google.pubsub.Topic
Resource Manager cloudresourcemanager.googleapis.com/Organization google.cloud.resourcemanager.Organization
cloudresourcemanager.googleapis.com/Folder google.cloud.resourcemanager.Folder
cloudresourcemanager.googleapis.com/Project google.cloud.resourcemanager.Project
无服务器 VPC 访问通道 vpcaccess.googleapis.com/Connector google.vpcaccess.Connector
服务使用工具 serviceusage.googleapis.com/Service google.serviceusage.Service
Vertex AI aiplatform.googleapis.com/BatchPredictionJob google.aiplatform.BatchPredictionJob
aiplatform.googleapis.com/CustomJob google.aiplatform.CustomJob
aiplatform.googleapis.com/Dataset google.aiplatform.Dataset
aiplatform.googleapis.com/Endpoint google.aiplatform.Endpoint
aiplatform.googleapis.com/HyperparameterTuningJob google.aiplatform.HyperparameterTuningJob
aiplatform.googleapis.com/Model google.aiplatform.Model
aiplatform.googleapis.com/SpecialistPool google.aiplatform.SpecialistPool
aiplatform.googleapis.com/TrainingPipeline google.aiplatform.TrainingPipeline