Google Cloud

What ConfigView collects from Google Cloud 62

• Projects

  Retrieve and manage Google Cloud Projects information.

• Organizations

  Retrieve and manage Google Cloud Organizations information.

• Folders

  Retrieve and manage Google Cloud Folders information.

• Billing Accounts

  Retrieve and manage Billing Accounts information.

• APIs Enabled (per Project)

  Retrieve and manage APIs Enabled per Project information.

• IAM Bindings (Org + Folder + Project)

  Retrieve and manage IAM Bindings information.

• Service Accounts

  Retrieve and manage Service Accounts information.

• Service Account Keys

  Retrieve and manage Service Account Keys information.

• IAM Principals (Derived)

  Retrieve and manage IAM Principals (Derived) information.

• Cloud Identity Users

  Retrieve and manage Cloud Identity Users information.

• Compute Instances (VMs)

  Retrieve and manage Compute Engine VMs information.

• Compute Disks

  Retrieve and manage Compute Disks information.

• Compute Networks (VPCs)

  Retrieve and manage Compute Networks information.

• Compute Subnetworks

  Retrieve and manage Compute Subnetworks information.

• Compute Firewalls

  Retrieve and manage Compute Firewalls information.

• Compute External IPs

  Retrieve and manage Compute External IPs information.

• Load Balancers (Forwarding Rules)

  Retrieve and manage Load Balancers information.

• Cloud Storage Buckets

  Retrieve and manage Cloud Storage Buckets information.

• Cloud SQL Instances

  Retrieve and manage Cloud SQL Instances information.

• BigQuery Datasets

  Retrieve and manage BigQuery Datasets information.

• Cloud Run Services

  Retrieve and manage Cloud Run Services information.

• GKE Clusters

  Retrieve and manage GKE Clusters information.

• Cloud Functions

  Retrieve and manage Cloud Functions information.

• Pub/Sub Topics

  Retrieve and manage Pub/Sub Topics information.

• Cloud DNS Zones

  Retrieve and manage Cloud DNS Zones information.

• KMS Crypto Keys

  Retrieve and manage KMS Crypto Keys information.

• Secret Manager Secrets (Metadata)

  Retrieve and manage Secret Manager Secrets information.

• Billing Cost — Summary (Monthly)

  Monthly cost by project and service from the BigQuery billing export.

• Billing Cost — Detailed (Daily / SKU / Resource)

  Per-resource, per-SKU daily cost from the detailed billing export.

• Billing Pricing (Rate Card)

  List and negotiated SKU prices for the services you actually use.

• Billing Budgets

  Budget amounts, thresholds, and scope filters for the billing account.

• Billing — Projects on Account

  Which projects bill to the account and whether billing is enabled.

• Audit Logs — Admin Activity

  Who created, changed, or deleted resources across the organization.

• Compute Snapshots

  Persistent disk snapshots and instant snapshots, with the source disk, billed storage bytes, and whether a schedule created them.

• Compute Images

  Custom disk images and machine images, including deprecation state, family, and the licenses baked into them.

• Committed Use Discounts

  Committed use discount contracts with their term, plan, resource amounts, and start/end dates.

• Compute Reservations

  Zonal capacity reservations with reserved versus in-use counts — capacity billed whether or not a VM consumes it.

• Hyperdisk Storage Pools

  Hyperdisk storage pools with provisioned versus used capacity and IOPS. Pools bill on provisioned size, not consumption.

• Resource Policies (Snapshot Schedules)

  Snapshot schedules, instance schedules, and placement policies, with their retention rules — the backup side of disk coverage.

• Compute Licenses

  Premium OS and BYOL licenses (Windows Server, RHEL, SQL Server) attached to images and disks, with their charge model.

• Firewall Policies (Hierarchical + Network)

  Hierarchical and network firewall policies with their rules and associations — the modern layer above legacy VPC firewall rules.

• Cloud Armor Security Policies

  Cloud Armor security policies, their rules and match expressions, and edge security services.

• SSL Certificates

  Load balancer SSL certificates — self-managed and Google-managed — with expiry, subject domains, and provisioning status.

• SSL Policies (TLS Profiles)

  TLS profiles applied to HTTPS/SSL proxies, including minimum TLS version and the enabled cipher features.

• VPC Routes

  Static and system VPC routes with destination range, priority, and next hop — including default routes to the internet gateway.

• Cloud Routers (NAT + BGP)

  Cloud Routers with their BGP peers and Cloud NAT gateway configuration, including which subnets egress through NAT.

• Cloud VPN (Gateways + Tunnels)

  HA and classic VPN gateways, peer gateways, and tunnels with their status, IKE version, and peer IPs.

• Interconnects + Attachments

  Dedicated and Partner Interconnects, their VLAN attachments, and cross-site networking — the physical hybrid connectivity map.

• Packet Mirroring

  Packet mirroring policies — what traffic is being copied, from which sources, to which collector load balancer.

• Zone Instance Settings (Default Metadata)

  Per-zone default instance metadata — where org-wide defaults such as enable-oslogin are set for every VM created in a zone.

• Instance Templates

  Instance templates with the machine type, image, service account, and metadata every managed VM is stamped from.

• Instance Groups (Managed + Unmanaged)

  Managed and unmanaged instance groups with size, target size, base instance name, and the template each MIG runs.

• Autoscalers

  Autoscaler policies with min/max replicas, cooldown, and the signals they scale on — why VM counts move on their own.

• Backend Services + Buckets

  Load balancer backend services and backend buckets with their protocol, health checks, CDN settings, and attached backends.

• URL Maps

  HTTP(S) load balancer URL maps — host rules, path matchers, and the default service every unmatched request falls through to.

• Load Balancer Targets + Proxies

  Every load balancer target type — HTTP(S), TCP, SSL and gRPC proxies plus target pools and instances — linking forwarding rules to backends.

• Health Checks

  Load balancer and MIG health checks, including the legacy HTTP/HTTPS kinds, with interval, timeout, and thresholds.

• Network Endpoint Groups

  NEGs of every kind — zonal, serverless, internet, and Private Service Connect — with the service they front.

• Private Service Connect Attachments

  Private Service Connect service and network attachments, including which consumer projects are accepted or rejected.

• Sole-Tenant Node Groups

  Sole-tenant node groups and templates with node count and autoscaling policy — dedicated hardware billed per node, not per VM.

• Public IP Prefixes (BYOIP)

  Bring-your-own-IP advertised and delegated prefixes with their CIDR range and advertisement status.

• Compute Project Settings

  Per-project Compute Engine settings — Shared VPC host status, the default service account, default network tier, and Cloud Armor tier.