Docs Connect your cloud
Connect your cloud · Google Cloud
Google Cloud coverage catalog
Every resource type Kumo.io reads from Google Cloud — 92 types across 30 GCP services — rendered from the machine-readable catalog our CI enforces against the crawlers themselves. If it says stable here, a crawler ships behind it.
92 resource types30 GCP services16 connection typesconformance-tested against crawlers
What "coverage" means here
This catalog is rendered from Kumo.io's declarative provider definition — the same document our conformance tests hold the crawlers to, in both directions: a crawler emitting an undeclared type fails our build, and a stable row with no crawler behind it fails it too. experimental rows are declared ahead of implementation: their scopes report as skipped rather than silently missing.
92
resource types
30
GCP services
92
stable
0
experimental
16
connection types
Don't see a service you need? Coverage grows continuously. Tell us what's missing; the catalog is how we prioritize.
Resource types by service
compute · 50appengine · 3run · 3bigquery · 2bigtable · 2cloudkms · 2container · 2dns · 2logging · 2monitoring · 2pubsub · 2spanner · 2artifactregistry · 1certificatemanager · 1cloudfunctions · 1cloudscheduler · 1cloudtasks · 1composer · 1dataflow · 1dataproc · 1eventarc · 1file · 1firestore · 1iam · 1redis · 1secretmanager · 1sql · 1storage · 1vpcaccess · 1workflows · 1
compute · 50 types
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| External IP Address | compute.address | network.elastic_ip | stable |
| Autoscaler | compute.autoscaler | compute.autoscaler | stable |
| Backend Bucket | compute.backend_bucket | network.target_group | stable |
| Backend Service | compute.backend_service | network.target_group | stable |
| Persistent Disk | compute.disk | storage.volume | stable |
| External VPN Gateway | compute.external_vpn_gateway | network.customer_gateway | stable |
| Firewall Rule | compute.firewall | network.firewall_rule | stable |
| Forwarding Rule (Load Balancer) | compute.forwarding_rule | network.load_balancer | stable |
| Global IP Address | compute.global_address | network.elastic_ip | stable |
| Global Forwarding Rule | compute.global_forwarding_rule | network.load_balancer | stable |
| Health Check | compute.health_check | network.health_check | stable |
| HTTP Health Check (Legacy) | compute.http_health_check | network.health_check | stable |
| HTTPS Health Check (Legacy) | compute.https_health_check | network.health_check | stable |
| Compute Image | compute.image | storage.snapshot | stable |
| Compute Instance | compute.instance | compute.instance | stable |
| Instance Group | compute.instance_group | compute.node_group | stable |
| Instance Group Manager | compute.instance_group_manager | compute.auto_scaling_group | stable |
| Instance Template | compute.instance_template | compute.launch_template | stable |
| Cloud Interconnect | compute.interconnect | network.interconnect | stable |
| Interconnect Attachment (VLAN) | compute.interconnect_attachment | network.interconnect | stable |
| VPC Network | compute.network | network.vpc | stable |
| Network Endpoint Group | compute.network_endpoint_group | network.target_group | stable |
| Sole-tenant Node Group | compute.node_group | compute.node_group | stable |
| Packet Mirroring | compute.packet_mirroring | network.network_policy | stable |
| Regional Backend Service | compute.region_backend_service | network.target_group | stable |
| Regional Disk | compute.region_disk | storage.volume | stable |
| Regional Health Check | compute.region_health_check | network.health_check | stable |
| Regional SSL Certificate | compute.region_ssl_certificate | security.certificate | stable |
| Regional Target HTTP Proxy | compute.region_target_http_proxy | network.listener | stable |
| Regional Target HTTPS Proxy | compute.region_target_https_proxy | network.listener | stable |
| Regional URL Map | compute.region_url_map | network.listener_rule | stable |
| Route | compute.route | network.route_table | stable |
| Cloud Router | compute.router | network.router | stable |
| Cloud Armor Security Policy | compute.security_policy | network.security_group | stable |
| Service Attachment (PSC) | compute.service_attachment | network.vpc_endpoint | stable |
| Compute Snapshot | compute.snapshot | storage.snapshot | stable |
| SSL Certificate | compute.ssl_certificate | security.certificate | stable |
| SSL Policy | compute.ssl_policy | security.tls_policy | stable |
| Subnetwork | compute.subnetwork | network.subnet | stable |
| Target gRPC Proxy | compute.target_grpc_proxy | network.listener | stable |
| Target HTTP Proxy | compute.target_http_proxy | network.listener | stable |
| Target HTTPS Proxy | compute.target_https_proxy | network.listener | stable |
| Target Instance | compute.target_instance | network.target_group | stable |
| Target Pool | compute.target_pool | network.target_group | stable |
| Target SSL Proxy | compute.target_ssl_proxy | network.listener | stable |
| Target TCP Proxy | compute.target_tcp_proxy | network.listener | stable |
| Target VPN Gateway (Classic) | compute.target_vpn_gateway | network.vpn_gateway | stable |
| URL Map (HTTP Load Balancer) | compute.url_map | network.listener_rule | stable |
| Cloud VPN Gateway | compute.vpn_gateway | network.vpn_gateway | stable |
| Cloud VPN Tunnel | compute.vpn_tunnel | network.vpn_connection | stable |
appengine · 3 types
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| App Engine Application | appengine.application | compute.cluster | stable |
| App Engine Service | appengine.service | compute.service | stable |
| App Engine Version | appengine.version | compute.service | stable |
run · 3 types
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Cloud Run Domain Mapping | run.domain_mapping | api.domain | stable |
| Cloud Run Job | run.job | automation.job | stable |
| Cloud Run Service | run.service | compute.service | stable |
bigquery · 2 types
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| BigQuery Dataset | bigquery.dataset | database.dataset | stable |
| BigQuery Table | bigquery.table | database.table | stable |
bigtable · 2 types
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Bigtable Instance | bigtable.instance | database.instance | stable |
| Bigtable Table | bigtable.table | database.table | stable |
cloudkms · 2 types
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| KMS Crypto Key | cloudkms.crypto_key | security.key | stable |
| KMS Key Ring | cloudkms.key_ring | security.key | stable |
container · 2 types
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| GKE Cluster | container.cluster | compute.cluster | stable |
| GKE Node Pool | container.node_pool | compute.node_group | stable |
dns · 2 types
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Cloud DNS Zone | dns.managed_zone | network.dns_zone | stable |
| DNS Record Set | dns.resource_record_set | network.dns_record | stable |
logging · 2 types
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Logging Bucket | logging.log_bucket | observability.log_group | stable |
| Log-based Metric | logging.log_metric | observability.metric | stable |
monitoring · 2 types
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Alert Policy | monitoring.alert_policy | observability.alarm | stable |
| Uptime Check | monitoring.uptime_check | observability.monitor | stable |
pubsub · 2 types
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Pub/Sub Subscription | pubsub.subscription | messaging.subscription | stable |
| Pub/Sub Topic | pubsub.topic | messaging.topic | stable |
spanner · 2 types
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Spanner Database | spanner.database | database.database | stable |
| Cloud Spanner Instance | spanner.instance | database.instance | stable |
artifactregistry · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Artifact Registry Repository | artifactregistry.repository | storage.container_repository | stable |
certificatemanager · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Certificate Manager Certificate | certificatemanager.certificate | security.certificate | stable |
cloudfunctions · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Cloud Function | cloudfunctions.function | compute.function | stable |
cloudscheduler · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Cloud Scheduler Job | cloudscheduler.job | automation.job | stable |
cloudtasks · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Cloud Tasks Queue | cloudtasks.queue | messaging.queue | stable |
composer · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Cloud Composer Environment | composer.environment | analytics.workspace | stable |
dataflow · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Dataflow Job | dataflow.job | analytics.job | stable |
dataproc · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Dataproc Cluster | dataproc.cluster | compute.cluster | stable |
eventarc · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Eventarc Trigger | eventarc.trigger | messaging.subscription | stable |
file · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Filestore Instance | file.instance | storage.filesystem | stable |
firestore · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Firestore Database | firestore.database | database.instance | stable |
iam · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Service Account | iam.service_account | identity.role | stable |
redis · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Memorystore Redis Instance | redis.instance | database.instance | stable |
secretmanager · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Secret Manager Secret | secretmanager.secret | security.secret | stable |
sql · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Cloud SQL Instance | sql.instance | database.instance | stable |
storage · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Storage Bucket | storage.bucket | storage.bucket | stable |
vpcaccess · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Serverless VPC Access Connector | vpcaccess.connector | network.vpc_endpoint | stable |
workflows · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Cloud Workflow | workflows.workflow | automation.job | stable |
Connections between resources
Topology is more than inventory: 16 declared connection types link resources into the graph — attachment, containment, traffic paths, dependency — with 57 declarative edge-derivation rules computing relationships from crawled attributes.
| Connection family | Types |
|---|---|
| structural | 10 |
| security | 2 |
| identity | 2 |
| dependency | 1 |
| network | 1 |
Sensitive fields, classified at the source
The definition also carries the base sensitivity table: attribute rows and pattern
fallbacks that classify sensitive configuration at ingestion, before anything is stored.
Tenant policy can tighten these classifications — never relax the
secret/credential classes. See
Redaction and sensitive fields
for the full data-handling model.