The "assets" collection of methods.
Lists assets with time and resource types and returns paged results in response.
A base abstract class for CloudAsset requests.
The CloudAsset Service.
Available OAuth 2.0 scopes for use with the Cloud Asset API.
Available OAuth 2.0 scope constants for use with the Cloud Asset API.
The "effectiveIamPolicies" collection of methods.
Gets effective IAM policies for a batch of resources.
The "feeds" collection of methods.
Creates a feed in a parent project/folder/organization to listen to its asset updates.
Deletes an asset feed.
Gets details about an asset feed.
Lists all asset feeds in a parent project/folder/organization.
Updates an asset feed configuration.
The "operations" collection of methods.
Gets the latest state of a long-running operation. Clients can use this method to poll the operation result at intervals as recommended by the API service.
The "savedQueries" collection of methods.
Creates a saved query in a parent project/folder/organization.
Deletes a saved query.
Gets details about a saved query.
Lists all saved queries in a parent project/folder/organization.
Updates a saved query.
The "v1" collection of methods.
Analyzes IAM policies asynchronously to answer which identities have what accesses on which resources, and writes the analysis results to a Google Cloud Storage or a BigQuery destination. For Cloud Storage destination, the output format is the JSON format that represents a AnalyzeIamPolicyResponse. This method implements the google.longrunning.Operation, which allows you to track the operation status. We recommend intervals of at least 2 seconds with exponential backoff retry to poll the operation result. The metadata contains the metadata for the long-running operation.
Analyzes IAM policies to answer which identities have what accesses on which resources.
Analyze moving a resource to a specified destination without kicking off the actual move. The analysis is best effort depending on the user's permissions of viewing different hierarchical policies and configurations. The policies and configuration are subject to change before the actual resource migration takes place.
Analyzes organization policies under a scope.
Analyzes organization policies governed assets (GCP resources or policies) under a scope. This RPC supports custom constraints and the following 10 canned constraints: * storage.uniformBucketLevelAccess * iam.disableServiceAccountKeyCreation * iam.allowedPolicyMemberDomains * compute.vmExternalIpAccess * appengine.enforceServiceAccountActAsCheck * gcp.resourceLocations * compute.trustedImageProjects * compute.skipDefaultNetworkCreation * compute.requireOsLogin * compute.disableNestedVirtualization This RPC only returns either: * resources of types supported by searchable asset types, or * IAM policies.
Analyzes organization policies governed containers (projects, folders or organization) under a scope.
Batch gets the update history of assets that overlap a time window. For IAM_POLICY content, this API outputs history when the asset and its attached IAM POLICY both exist. This can create gaps in the output history. Otherwise, this API outputs history with asset in both non-delete or deleted status. If a specified asset does not exist, this API returns an INVALID_ARGUMENT error.
Exports assets with time and resource types to a given Cloud Storage location/BigQuery table. For Cloud Storage location destinations, the output format is newline-delimited JSON. Each line represents a google.cloud.asset.v1.Asset in the JSON format; for BigQuery table destinations, the output table stores the fields in asset Protobuf as columns. This API implements the google.longrunning.Operation API, which allows you to keep track of the export. We recommend intervals of at least 2 seconds with exponential retry to poll the export operation result. For regular-size resource parent, the export operation usually finishes within 5 minutes.
Issue a job that queries assets using a SQL statement compatible with BigQuery Standard
SQL. If the query execution
finishes within timeout and there's no pagination, the full query results will be returned in the
QueryAssetsResponse. Otherwise, full query results can be obtained by issuing extra requests with the
job_reference from the a previous
QueryAssets call. Note, the query result has approximately 10 GB
limitation enforced by BigQuery https://cloud.google.com/bigquery/docs/best-practices-performance-output,
queries return larger results will result in errors.
Searches all IAM policies within the specified scope, such as a project, folder, or organization. The caller
must be granted the
cloudasset.assets.searchAllIamPolicies permission on the desired scope, otherwise the
request will be rejected.
Searches all Cloud resources within the specified scope, such as a project, folder, or organization. The
caller must be granted the
cloudasset.assets.searchAllResources permission on the desired scope, otherwise
the request will be rejected.
Asset content type. If not specified, no content but the asset name will be returned.
Data format for response.
V1 error format.
Analysis view indicating what information should be included in the analysis response. If unspecified, the default view is FULL.
Optional. The content type.