Cloud Asset API

The Cloud Asset API manages the history and inventory of Trusted Cloud resources.

Service: cloudasset.googleapis.com

To call this service, we recommend that you use the Google-provided client libraries. If your application needs to use your own libraries to call this service, use the following information when you make the API requests.

Discovery document

A Discovery Document is a machine-readable specification for describing and consuming REST APIs. It is used to build client libraries, IDE plugins, and other tools that interact with Google APIs. One service may provide multiple discovery documents. This service provides the following discovery document:

Service endpoint

A service endpoint is a base URL that specifies the network address of an API service. One service might have multiple service endpoints. This service has the following service endpoint and all URIs below are relative to this service endpoint:

  • https://cloudasset.s3nsapis.fr

REST Resource: v1

Methods
analyzeIamPolicy GET /v1/{analysisQuery.scope=*/*}:analyzeIamPolicy
Analyzes IAM policies to answer which identities have what accesses on which resources.
analyzeIamPolicyLongrunning POST /v1/{analysisQuery.scope=*/*}:analyzeIamPolicyLongrunning
Analyzes IAM policies asynchronously to answer which identities have what accesses on which resources, and writes the analysis results to a Trusted Cloud Storage or a BigQuery destination.
analyzeMove GET /v1/{resource=*/*}:analyzeMove
Analyze moving a resource to a specified destination without kicking off the actual move.
analyzeOrgPolicies GET /v1/{scope=*/*}:analyzeOrgPolicies
Analyzes organization policies under a scope.
analyzeOrgPolicyGovernedAssets GET /v1/{scope=*/*}:analyzeOrgPolicyGovernedAssets
Analyzes organization policies governed assets (Trusted Cloud resources or policies) under a scope.
analyzeOrgPolicyGovernedContainers GET /v1/{scope=*/*}:analyzeOrgPolicyGovernedContainers
Analyzes organization policies governed containers (projects, folders or organization) under a scope.
batchGetAssetsHistory GET /v1/{parent=*/*}:batchGetAssetsHistory
Batch gets the update history of assets that overlap a time window.
exportAssets POST /v1/{parent=*/*}:exportAssets
Exports assets with time and resource types to a given Cloud Storage location/BigQuery table.
queryAssets POST /v1/{parent=*/*}:queryAssets
Issue a job that queries assets using a SQL statement compatible with BigQuery SQL.
searchAllIamPolicies GET /v1/{scope=*/*}:searchAllIamPolicies
Searches all IAM policies within the specified scope, such as a project, folder, or organization.
searchAllResources GET /v1/{scope=*/*}:searchAllResources
Searches all Trusted Cloud resources within the specified scope, such as a project, folder, or organization.

REST Resource: v1.assets

Methods
list GET /v1/{parent=*/*}/assets
Lists assets with time and resource types and returns paged results in response.

REST Resource: v1.effectiveIamPolicies

Methods
batchGet GET /v1/{scope=*/*}/effectiveIamPolicies:batchGet
Gets effective IAM policies for a batch of resources.

REST Resource: v1.feeds

Methods
create POST /v1/{parent=*/*}/feeds
Creates a feed in a parent project/folder/organization to listen to its asset updates.
delete DELETE /v1/{name=*/*/feeds/*}
Deletes an asset feed.
get GET /v1/{name=*/*/feeds/*}
Gets details about an asset feed.
list GET /v1/{parent=*/*}/feeds
Lists all asset feeds in a parent project/folder/organization.
patch PATCH /v1/{feed.name=*/*/feeds/*}
Updates an asset feed configuration.

REST Resource: v1.savedQueries

Methods
create POST /v1/{parent=*/*}/savedQueries
Creates a saved query in a parent project/folder/organization.
delete DELETE /v1/{name=*/*/savedQueries/*}
Deletes a saved query.
get GET /v1/{name=*/*/savedQueries/*}
Gets details about a saved query.
list GET /v1/{parent=*/*}/savedQueries
Lists all saved queries in a parent project/folder/organization.
patch PATCH /v1/{savedQuery.name=*/*/savedQueries/*}
Updates a saved query.