What is Cloud Asset Inventory?
Cloud Asset Inventory is a metadata inventory service from Google Cloud that provides a complete overview of all resources in your organization. It captures configurations, IAM policies, and relationships between resources in real-time and historically.
Core Features
- Real-time inventory of all Google Cloud resources
- Historical snapshots and change tracking
- Powerful search API with SQL-like syntax
- Export to BigQuery for advanced analytics
- IAM policy analysis across all resources
Typical Use Cases
Compliance Audits: Proof of configuration of all resources at a specific point in time for regulatory requirements.
Security Posture Management: Identification of resources with insecure configurations such as publicly accessible storage buckets.
Cost Optimization: Analysis of unused or oversized resources by combining with billing data.
Benefits
- No installation or agent deployment required
- Automatic capture of all new resources
- BigQuery integration for complex analyses
- Support for custom compliance rules
Integration with innFactory
As a Google Cloud partner, innFactory supports you with Cloud Asset Inventory: architecture, migration, operations, and cost optimization.
Available Tiers & Options
Standard
- Fully managed
- Real-time updates
- Historical data
- Export costs for large data volumes
Typical Use Cases
Technical Specifications
Frequently Asked Questions
What is Cloud Asset Inventory?
Cloud Asset Inventory is a service for real-time monitoring of all resources and IAM policies in Google Cloud, including historical change tracking.
Which resource types are supported?
The service supports all Google Cloud resources such as Compute Engine, GKE, Cloud Storage, BigQuery, as well as IAM policies and organization policies.
How does historical analysis work?
Cloud Asset Inventory stores snapshots of all resource configurations and enables queries at any point in time in the past.
Can I search for compliance violations?
Yes, with the Search API you can search for resources that do not meet certain criteria, such as missing labels or public bucket permissions.
