The Cloud Asset API manages the history and inventory of Google Cloud resources.
- REST Resource: v1p7beta1
- REST Resource: v1p7beta1.operations
- REST Resource: v1p2beta1.feeds
- REST Resource: v1p2beta1.operations
- REST Resource: v1p1beta1.iamPolicies
- REST Resource: v1p1beta1.resources
- REST Resource: v1
- REST Resource: v1.assets
- REST Resource: v1.effectiveIamPolicies
- REST Resource: v1.feeds
- REST Resource: v1.operations
- REST Resource: v1.savedQueries
Service: cloudasset.googleapis.com
To call this service, we recommend that you use the Google-provided client libraries. If your application needs to use your own libraries to call this service, use the following information when you make the API requests.
Discovery document
A Discovery Document is a machine-readable specification for describing and consuming REST APIs. It is used to build client libraries, IDE plugins, and other tools that interact with Google APIs. One service may provide multiple discovery documents. This service provides the following discovery documents:
- https://cloudasset.googleapis.com/$discovery/rest?version=v1
- https://cloudasset.googleapis.com/$discovery/rest?version=v1p7beta1
- https://cloudasset.googleapis.com/$discovery/rest?version=v1p2beta1
- https://cloudasset.googleapis.com/$discovery/rest?version=v1p1beta1
Service endpoint
A service endpoint is a base URL that specifies the network address of an API service. One service might have multiple service endpoints. This service has the following service endpoint and all URIs below are relative to this service endpoint:
https://cloudasset.googleapis.com
REST Resource: v1p7beta1
Methods | |
---|---|
exportAssets |
POST /v1p7beta1/{parent=*/*}:exportAssets Exports assets with time and resource types to a given Cloud Storage location/BigQuery table. |
REST Resource: v1p7beta1.operations
Methods | |
---|---|
get |
GET /v1p7beta1/{name=*/*/operations/*/**} Gets the latest state of a long-running operation. |
REST Resource: v1p2beta1.feeds
Methods | |
---|---|
create |
POST /v1p2beta1/{parent=*/*}/feeds Creates a feed in a parent project/folder/organization to listen to its asset updates. |
delete |
DELETE /v1p2beta1/{name=*/*/feeds/*} Deletes an asset feed. |
get |
GET /v1p2beta1/{name=*/*/feeds/*} Gets details about an asset feed. |
list |
GET /v1p2beta1/{parent=*/*}/feeds Lists all asset feeds in a parent project/folder/organization. |
patch |
PATCH /v1p2beta1/{feed.name=*/*/feeds/*} Updates an asset feed configuration. |
REST Resource: v1p2beta1.operations
Methods | |
---|---|
get |
GET /v1p2beta1/{name=*/*/operations/*/**} Gets the latest state of a long-running operation. |
REST Resource: v1p1beta1.iamPolicies
Methods | |
---|---|
searchAll |
GET /v1p1beta1/{scope=*/*}/iamPolicies:searchAll Searches all the IAM policies within a given accessible Resource Manager scope (project/folder/organization). |
REST Resource: v1p1beta1.resources
Methods | |
---|---|
searchAll |
GET /v1p1beta1/{scope=*/*}/resources:searchAll Searches all the resources within a given accessible Resource Manager scope (project/folder/organization). |
REST Resource: v1
Methods | |
---|---|
analyzeIamPolicy |
GET /v1/{analysisQuery.scope=*/*}:analyzeIamPolicy Analyzes IAM policies to answer which identities have what accesses on which resources. |
analyzeIamPolicyLongrunning |
POST /v1/{analysisQuery.scope=*/*}:analyzeIamPolicyLongrunning Analyzes IAM policies asynchronously to answer which identities have what accesses on which resources, and writes the analysis results to a Google Cloud Storage or a BigQuery destination. |
analyzeMove |
GET /v1/{resource=*/*}:analyzeMove Analyze moving a resource to a specified destination without kicking off the actual move. |
analyzeOrgPolicies |
GET /v1/{scope=*/*}:analyzeOrgPolicies Analyzes organization policies under a scope. |
analyzeOrgPolicyGovernedAssets |
GET /v1/{scope=*/*}:analyzeOrgPolicyGovernedAssets Analyzes organization policies governed assets (Google Cloud resources or policies) under a scope. |
analyzeOrgPolicyGovernedContainers |
GET /v1/{scope=*/*}:analyzeOrgPolicyGovernedContainers Analyzes organization policies governed containers (projects, folders or organization) under a scope. |
batchGetAssetsHistory |
GET /v1/{parent=*/*}:batchGetAssetsHistory Batch gets the update history of assets that overlap a time window. |
exportAssets |
POST /v1/{parent=*/*}:exportAssets Exports assets with time and resource types to a given Cloud Storage location/BigQuery table. |
queryAssets |
POST /v1/{parent=*/*}:queryAssets Issue a job that queries assets using a SQL statement compatible with BigQuery SQL. |
searchAllIamPolicies |
GET /v1/{scope=*/*}:searchAllIamPolicies Searches all IAM policies within the specified scope, such as a project, folder, or organization. |
searchAllResources |
GET /v1/{scope=*/*}:searchAllResources Searches all Google Cloud resources within the specified scope, such as a project, folder, or organization. |
REST Resource: v1.assets
Methods | |
---|---|
list |
GET /v1/{parent=*/*}/assets Lists assets with time and resource types and returns paged results in response. |
REST Resource: v1.effectiveIamPolicies
Methods | |
---|---|
batchGet |
GET /v1/{scope=*/*}/effectiveIamPolicies:batchGet Gets effective IAM policies for a batch of resources. |
REST Resource: v1.feeds
Methods | |
---|---|
create |
POST /v1/{parent=*/*}/feeds Creates a feed in a parent project/folder/organization to listen to its asset updates. |
delete |
DELETE /v1/{name=*/*/feeds/*} Deletes an asset feed. |
get |
GET /v1/{name=*/*/feeds/*} Gets details about an asset feed. |
list |
GET /v1/{parent=*/*}/feeds Lists all asset feeds in a parent project/folder/organization. |
patch |
PATCH /v1/{feed.name=*/*/feeds/*} Updates an asset feed configuration. |
REST Resource: v1.operations
Methods | |
---|---|
get |
GET /v1/{name=*/*/operations/*/**} Gets the latest state of a long-running operation. |
REST Resource: v1.savedQueries
Methods | |
---|---|
create |
POST /v1/{parent=*/*}/savedQueries Creates a saved query in a parent project/folder/organization. |
delete |
DELETE /v1/{name=*/*/savedQueries/*} Deletes a saved query. |
get |
GET /v1/{name=*/*/savedQueries/*} Gets details about a saved query. |
list |
GET /v1/{parent=*/*}/savedQueries Lists all saved queries in a parent project/folder/organization. |
patch |
PATCH /v1/{savedQuery.name=*/*/savedQueries/*} Updates a saved query. |