Community
Questions Library
Docs
Blog
Events
Swag
Github
Slack
JupiterOne
Discussions
Release Notes
Contact Us
Google Cloud - AskJ1 Community
<main> <article class="userContent"> <h2 data-id="google-cloud-jupiterone-integration-benefits">Google Cloud + JupiterOne Integration Benefits</h2> <ul><li>Visualize Google Cloud resources in the JupiterOne graph.</li> <li>Map Google users to employees in your JupiterOne account.</li> <li><p>Monitor visibility and governance of your Google Cloud environment by<br> leveraging hundreds of out of the box queries.</p></li> <li><p>Monitor compliance against the Google Cloud CIS Framework and other security<br> benchmarks using the JupiterOne compliance app.</p></li> <li><p>Monitor changes to your Google Cloud resources using multiple JupiterOne alert<br> rule packs specific to Google Cloud.</p></li> </ul><h2 data-id="how-it-works">How it Works</h2> <ul><li><p>JupiterOne periodically fetches users and cloud resources from Google Cloud to<br> update the graph.</p></li> <li><p>Write JupiterOne queries to review and monitor updates to the graph, or<br> leverage existing queries.</p></li> <li><p>Configure alerts to take action when the JupiterOne graph changes, or leverage<br> existing alerts.</p></li> </ul><h2 data-id="requirements">Requirements</h2> <ul><li><p>JupiterOne requires the contents of a Google Cloud service account key file<br> with the correct API services enabled (see the <strong>Integration Walkthrough</strong>).</p></li> <li><p>You must have permission in JupiterOne to install new integrations.</p></li> </ul><h2 data-id="support">Support</h2> <p>If you need help with this integration, please contact<br><a rel="nofollow" href="https://support.jupiterone.io">JupiterOne Support</a>.</p> <h2 data-id="integration-walkthrough">Integration Walkthrough</h2> <p>Customers authorize access by creating a<br><a rel="nofollow" href="https://cloud.google.com/iam/docs/creating-managing-service-accounts">Google Cloud service account</a><br> and providing the service account key to JupiterOne.</p> <h3 data-id="in-google-cloud">In Google Cloud</h3> <p>A<br><a rel="nofollow" href="https://cloud.google.com/iam/docs/creating-managing-service-accounts">Google Cloud service account</a><br> and a<br><a rel="nofollow" href="https://cloud.google.com/iam/docs/creating-managing-service-account-keys">Google Cloud service account key</a><br> must be created in order to run the integration. The service account key is used<br> to authenticate on behalf of the integration's Google Cloud project and ingest<br> data into JupiterOne.</p> <p>Google Cloud has most API services disabled by default. When a Google Cloud<br> service API is disabled, the JupiterOne integration will not ingest the data<br> from that API. The following Google Cloud service APIs must be enabled to ingest<br> all of the supported data into JupiterOne:</p> <table><thead><tr><th>Service Name</th> <th>Service API</th> </tr></thead><tbody><tr><td><a rel="nofollow" href="https://console.developers.google.com/apis/library/accesscontextmanager.googleapis.com">Access Context Manager</a></td> <td>accesscontextmanager.googleapis.com</td> </tr><tr><td><a rel="nofollow" href="https://console.developers.google.com/apis/library/apigateway.googleapis.com">API Gateway</a></td> <td>apigateway.googleapis.com</td> </tr><tr><td><a rel="nofollow" href="https://console.developers.google.com/apis/library/appengine.googleapis.com">App Engine Admin</a></td> <td>appengine.googleapis.com</td> </tr><tr><td><a rel="nofollow" href="https://console.developers.google.com/apis/library/bigquery.googleapis.com">BigQuery</a></td> <td>bigquery.googleapis.com</td> </tr><tr><td><a rel="nofollow" href="https://console.developers.google.com/apis/library/binaryauthorization.googleapis.com">Binary Authorization</a></td> <td>binaryauthorization.googleapis.com</td> </tr><tr><td><a rel="nofollow" href="https://console.developers.google.com/apis/library/privateca.googleapis.com">Certificate Authority Service</a></td> <td>privateca.googleapis.com</td> </tr><tr><td><a rel="nofollow" href="https://console.developers.google.com/apis/library/cloudasset.googleapis.com">Cloud Asset</a></td> <td>cloudasset.googleapis.com</td> </tr><tr><td><a rel="nofollow" href="https://console.developers.google.com/apis/library/dns.googleapis.com">Cloud DNS</a></td> <td>dns.googleapis.com</td> </tr><tr><td><a rel="nofollow" href="https://console.developers.google.com/apis/library/cloudfunctions.googleapis.com">Cloud Functions</a></td> <td>cloudfunctions.googleapis.com</td> </tr><tr><td><a rel="nofollow" href="https://console.developers.google.com/apis/library/cloudkms.googleapis.com">Cloud Key Management Service (KMS)</a></td> <td>cloudkms.googleapis.com</td> </tr><tr><td><a rel="nofollow" href="https://console.developers.google.com/apis/library/logging.googleapis.com">Cloud Logging</a></td> <td>logging.googleapis.com</td> </tr><tr><td><a rel="nofollow" href="https://console.developers.google.com/apis/library/memcache.googleapis.com">Cloud Memorystore for Memcached</a></td> <td>memcache.googleapis.com</td> </tr><tr><td><a rel="nofollow" href="https://console.developers.google.com/apis/library/pubsub.googleapis.com">Cloud Pub/Sub</a></td> <td>pubsub.googleapis.com</td> </tr><tr><td><a rel="nofollow" href="https://console.developers.google.com/apis/library/cloudresourcemanager.googleapis.com">Cloud Resource Manager</a></td> <td>cloudresourcemanager.googleapis.com</td> </tr><tr><td><a rel="nofollow" href="https://console.developers.google.com/apis/library/run.googleapis.com">Cloud Run</a></td> <td>run.googleapis.com</td> </tr><tr><td><a rel="nofollow" href="https://console.developers.google.com/apis/library/spanner.googleapis.com">Cloud Spanner</a></td> <td>spanner.googleapis.com</td> </tr><tr><td><a rel="nofollow" href="https://console.developers.google.com/apis/library/sqladmin.googleapis.com">Cloud SQL Admin</a></td> <td>sqladmin.googleapis.com</td> </tr><tr><td><a rel="nofollow" href="https://console.developers.google.com/apis/library/storage.googleapis.com">Cloud Storage</a></td> <td>storage.googleapis.com</td> </tr><tr><td><a rel="nofollow" href="https://console.developers.google.com/apis/library/compute.googleapis.com">Compute Engine</a></td> <td>compute.googleapis.com</td> </tr><tr><td><a rel="nofollow" href="https://console.developers.google.com/apis/library/redis.googleapis.com">Google Cloud Memorystore for Redis</a></td> <td>redis.googleapis.com</td> </tr><tr><td><a rel="nofollow" href="https://console.developers.google.com/apis/library/iam.googleapis.com">Identity and Access Management (IAM)</a></td> <td>iam.googleapis.com</td> </tr><tr><td><a rel="nofollow" href="https://console.developers.google.com/apis/library/container.googleapis.com">Kubernetes Engine</a></td> <td>container.googleapis.com</td> </tr><tr><td><a rel="nofollow" href="https://console.developers.google.com/apis/library/serviceusage.googleapis.com">Service Usage</a></td> <td>serviceusage.googleapis.com</td> </tr><tr><td><a rel="nofollow" href="https://console.developers.google.com/apis/library/monitoring.googleapis.com">Stackdriver Monitoring</a></td> <td>monitoring.googleapis.com</td> </tr><tr><td><a rel="nofollow" href="https://console.cloud.google.com/apis/library/secretmanager.googleapis.com">Secret Manager</a></td> <td>secretmanager.googleapis.com</td> </tr><tr><td><a rel="nofollow" href="https://console.cloud.google.com/apis/library/sourcerepo.googleapis.com">Cloud Source Repositories</a></td> <td>sourcerepo.googleapis.com</td> </tr></tbody></table><p>Google Cloud service APIs can be enabled using one of the following methods:</p> <h4 data-id="enabling-google-cloud-service-api-from-google-cloud-console">Enabling Google Cloud Service API from Google Cloud Console</h4> <ol><li>Click on the service name link that you'd like to enable from the table<br> above</li> <li>Select your Google Cloud project from the project dropdown menu</li> <li>Click the "Enable" button</li> </ol><h4 data-id="enabling-google-cloud-service-api-from-gcloud-cli">Enabling Google Cloud Service API from <code class="code codeInline" spellcheck="false" tabindex="0">gcloud</code> CLI</h4> <p>Instructions on how to set up<br> the<a rel="nofollow" href="https://cloud.google.com/sdk/gcloud"><code class="code codeInline" spellcheck="false" tabindex="0">gcloud</code> CLI</a> can be found in the<br><a rel="nofollow" href="https://github.com/JupiterOne/graph-google-cloud/blob/master/docs/development.md">JupiterOne Google Cloud integration developer documentation</a>.</p> <p>After setting up the <a rel="nofollow" href="https://cloud.google.com/sdk/gcloud"><code class="code codeInline" spellcheck="false" tabindex="0">gcloud</code> CLI</a>, you<br> can run the following command to enable all services that the JupiterOne<br> integration supports:</p> <p><strong>NOTE</strong>: You can only enable 20 services at a time.</p> <pre class="code codeBlock" spellcheck="false" tabindex="0">gcloud services enable \ accesscontextmanager.googleapis.com \ apigateway.googleapis.com \ appengine.googleapis.com \ bigquery.googleapis.com \ binaryauthorization.googleapis.com \ privateca.googleapis.com \ cloudasset.googleapis.com \ dns.googleapis.com \ cloudfunctions.googleapis.com \ cloudkms.googleapis.com \ logging.googleapis.com \ memcache.googleapis.com \ pubsub.googleapis.com \ cloudresourcemanager.googleapis.com \ run.googleapis.com \ spanner.googleapis.com \ sqladmin.googleapis.com \ storage.googleapis.com \ compute.googleapis.com \ redis.googleapis.com \ iam.googleapis.com \ container.googleapis.com \ serviceusage.googleapis.com \ monitoring.googleapis.com \ secretmanager.googleapis.com \ sourcerepo.googleapis.com </pre> <h4 data-id="creating-google-cloud-project-service-account">Creating Google Cloud project service account</h4> <ul><li>See the<br><a rel="nofollow" href="https://cloud.google.com/iam/docs/creating-managing-service-accounts#creating">Google Cloud service account documentation</a><br> for more information on how to create a service account in the project that<br> you would like to ingest data from.</li> </ul><p>We must assign the correct permissions to the newly created service account for<br> the integration to be run. We recommend using the following roles managed by<br> Google Cloud:</p> <ul><li><a rel="nofollow" href="https://cloud.google.com/iam/docs/understanding-roles#iam.securityReviewer"><code class="code codeInline" spellcheck="false" tabindex="0">Security Reviewer</code></a></li> <li><a rel="nofollow" href="https://cloud.google.com/iam/docs/understanding-roles#iam.organizationRoleViewer"><code class="code codeInline" spellcheck="false" tabindex="0">Organization Role Viewer</code></a></li> <li><a rel="nofollow" href="https://cloud.google.com/bigquery/docs/access-control#bigquery.metadataViewer"><code class="code codeInline" spellcheck="false" tabindex="0">BigQuery Metadata Viewer</code></a></li> <li><a rel="nofollow" href="https://cloud.google.com/secret-manager/docs/creating-and-accessing-secrets#access"><code class="code codeInline" spellcheck="false" tabindex="0">Secret Manager Secret Accessor</code></a></li> </ul><p>Some additional data may be optionally ingested by the JupiterOne Google Cloud<br> integration by configuring a custom role with the following permissions:</p> <pre class="code codeBlock" spellcheck="false" tabindex="0">appengine.applications.get binaryauthorization.policy.get cloudasset.assets.searchAllIamPolicies compute.projects.get orgpolicy.policy.get </pre> <p>For BigQuery, the following <em>additional</em> permissions are needed to ingest<br> BigQuery datasets, models, and tables respectively:</p> <pre class="code codeBlock" spellcheck="false" tabindex="0">bigquery.datasets.get bigquery.models.getMetadata bigquery.tables.get </pre> <p>See the<br><a rel="nofollow" href="https://cloud.google.com/iam/docs/creating-custom-roles#creating_a_custom_role">Google Cloud custom role documentation</a><br> for additional information on how custom roles can be configured and assigned.</p> <p>NOTE: You may also create a service account using the <a rel="nofollow" href="https://cloud.google.com/sdk/gcloud"><code class="code codeInline" spellcheck="false" tabindex="0">gcloud</code> CLI</a>. There is documentation on <br> how to leverage the CLI in the<br><a rel="nofollow" href="https://github.com/JupiterOne/graph-google-cloud/blob/master/docs/development.md">JupiterOne Google Cloud integration developer documentation</a>.</p> <h4 data-id="generate-a-service-account-key">Generate a service account key</h4> <ul><li>See the<br><a rel="nofollow" href="https://cloud.google.com/iam/docs/creating-managing-service-account-keys#creating_service_account_keys">Google Cloud service account key documentation</a><br> for more information on how to create a service account key for the service<br> account that you would like to ingest data using.</li> </ul><p>NOTE: You may also create a service account key using the<br><a rel="nofollow" href="https://cloud.google.com/sdk/gcloud"><code class="code codeInline" spellcheck="false" tabindex="0">gcloud</code> CLI</a>. There is documentation on<br> how to leverage the CLI in the<br><a rel="nofollow" href="https://github.com/JupiterOne/graph-google-cloud/blob/master/docs/development.md">Google Cloud integration developer documentation</a>.</p> <h4 data-id="jupiterone-google-cloud-organization">JupiterOne + Google Cloud Organization</h4> <p>Given the correct permissions, JupiterOne has the ability to automatically<br> discover each project under a Google Cloud organization and configure<br> integration instances for each of the projects.</p> <h5 data-id="setup">Setup</h5> <ol><li>Select one Google Cloud project to configure a service account for<br> JupiterOne.</li> <li>Create the service account without a role. Copy the email address of the new<br> service account (e.g. <code class="code codeInline" spellcheck="false" tabindex="0">my-sa@my-j1-project.iam.gserviceaccount.com</code>).</li> <li>Generate and copy a new service account key.</li> <li><p>Enable all service APIs in the "main" project and each "child" project that<br> you'd like JupiterOne to access. Documentation for enabling service APIs is<br> described in an earlier section of this document.</p> <p><strong>NOTE</strong>: The "Cloud Asset" and "Identity and Access Management (IAM)"<br> APIs only need to be enabled in the "main" project.</p></li> <li>Switch to the organization that you'd like to create individual integration<br> instances for each project</li> <li><a rel="nofollow" href="https://cloud.google.com/iam/docs/creating-custom-roles">Create a new custom role</a><br> with the following permissions:</li> </ol><pre class="code codeBlock" spellcheck="false" tabindex="0">resourcemanager.folders.get resourcemanager.folders.list resourcemanager.organizations.get resourcemanager.projects.get resourcemanager.projects.list serviceusage.services.list resourcemanager.organizations.getIamPolicy cloudasset.assets.searchAllIamPolicies </pre> <p>The integration will also try to ingest organization policy for<br> "storage.publicAccessPrevention" to precisely calculate storage buckets public<br> access, it is therefore recommended that the following permission is also<br> included in the custom role above:</p> <pre class="code codeBlock" spellcheck="false" tabindex="0">orgpolicy.policy.get </pre> <ol><li><p>Navigate to the Cloud Resource Manager for that organization and<br><a rel="nofollow" href="https://cloud.google.com/resource-manager/docs/access-control-org#grant-access">add a new member to the organization</a>.<br> The new member email address is the email address of the service account<br> that was created earlier. Select the new organization role that was created<br> above, as well as the Google Cloud managed role "Security Reviewer"<br> (<code class="code codeInline" spellcheck="false" tabindex="0">roles/iam.securityReviewer</code>) or an alternative JupiterOne custom role that<br> you've created.</p></li> <li><p>Navigate to the JupiterOne Google Cloud integration configuration page to<br> begin configuring the "main" integration instance.</p></li> </ol><p>Use the generated service account key as the value for the "Service Account Key<br> File" field.</p> <p><strong>NOTE</strong>: The "Polling Interval" that is selected for the "main" integration<br> instances will be the same polling interval that is used for each of the child<br> integration instances.</p> <ol><li>Select the "Configure Organization Projects" checkbox.</li> <li>Place the numerical value of the Google Cloud organization into the<br> "Organization ID" text field (e.g. "1234567890").</li> <li>Click <code class="code codeInline" spellcheck="false" tabindex="0">CREATE CONFIGURATION</code>.</li> </ol><p><strong>NOTE</strong>: Depending on how many projects exist under a Google Cloud<br> organization, the auto-configuration process may take a few minutes to complete.<br> When the process has been completed, you will see your new integration instances<br> on the JupiterOne Google Cloud integration list page.</p> <h3 data-id="in-jupiterone">In JupiterOne</h3> <ol><li>From the top navigation of the J1 Search homepage, select <strong>Integrations</strong>.</li> <li>Scroll to the <strong>Google Cloud</strong> integration tile and click it.</li> <li>Click the <strong>Add Configuration</strong> button and configure the following settings:</li> </ol><ul><li><p>Enter the <strong>Account Name</strong> by which you'd like to identify this Google Cloud<br> account in JupiterOne. Ingested entities will have this value stored in<br><code class="code codeInline" spellcheck="false" tabindex="0">tag.AccountName</code> when <strong>Add AccountName Tag</strong> is enabled.</p></li> <li><p>Enter a <strong>Description</strong> that will assist your team to identify<br> the integration instance.</p></li> <li><p>Select a <strong>Polling Interval</strong> that you feel is sufficient for your monitoring<br> needs. You can leave this as <code class="code codeInline" spellcheck="false" tabindex="0">DISABLED</code> and manually execute the integration.</p></li> <li><p>Enter the <strong>Service Account Key File</strong> contents of the Google Cloud service<br> account.</p></li> <li><p>Add any tags you want to use to simplify data management and queries.</p></li> </ul><ol start="4"><li><p>Optionally, enter a project ID to target for data ingestion. The default is the project ID specified in the service account key file.</p></li> <li><p>Select <strong>Configure Organization Projects</strong> if you want J1 to auto-configure all projects in your organization. J1 applies the configuration to all other projects that do not have optional <code class="code codeInline" spellcheck="false" tabindex="0">j1-integration: SKIP</code> tag applied to the project in your infrastructure-as-code. Do not use the optional project ID if you want to use this feature.</p></li> <li><p>Optionally, enter a numerical folder ID if you want to specify that J1 is to only ingest projects in a specific folder and any of its subfolders. If you have enabled <strong>Configure Organization Projects</strong>, J1 only auto-configures projects in this specified folder.</p></li> <li><p>Click <strong>Create</strong> after you have provided all the configuration values.</p></li> </ol><h2 data-id="how-to-uninstall">How to Uninstall</h2> <ol><li>From the top navigation of the J1 Search homepage, select <strong>Integrations</strong>.</li> <li>Scroll to the <strong>Google Cloud</strong> integration tile and click it.</li> <li>Identify and click the <strong>integration to delete</strong>.</li> <li>Click the <strong>trash can</strong> icon.</li> <li>Click the <strong>Remove</strong> button to delete the integration.</li> </ol><p><br></p> <h2 data-id="data-model">Data Model</h2> <h3 data-id="entities">Entities</h3> <p>The following entities are created:</p> <table><thead><tr><th>Resources</th> <th>Entity <code class="code codeInline" spellcheck="false" tabindex="0">_type</code></th> <th>Entity <code class="code codeInline" spellcheck="false" tabindex="0">_class</code></th> </tr></thead><tbody><tr><td>Access Context Manager Access Level</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_access_context_manager_access_level</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Ruleset</code></td> </tr><tr><td>Access Context Manager Access Policy</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_access_context_manager_access_policy</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">AccessPolicy</code></td> </tr><tr><td>Access Context Manager Service Perimeter</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_access_context_manager_service_perimeter</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Configuration</code></td> </tr><tr><td>Access Context Manager Service Perimeter Api Operation</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_access_context_manager_service_perimeter_api_operation</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Configuration</code></td> </tr><tr><td>Access Context Manager Service Perimeter Egress Policy</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_access_context_manager_service_perimeter_egress_policy</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">ControlPolicy</code></td> </tr><tr><td>Access Context Manager Service Perimeter Ingress Policy</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_access_context_manager_service_perimeter_ingress_policy</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">ControlPolicy</code></td> </tr><tr><td>Access Context Manager Service Perimeter Method Selector</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_access_context_manager_service_perimeter_method_selector</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Configuration</code></td> </tr><tr><td>Api Gateway Api</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_api_gateway_api</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Service</code></td> </tr><tr><td>Api Gateway Api Config</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_api_gateway_api_config</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Configuration</code></td> </tr><tr><td>Api Gateway Gateway</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_api_gateway_gateway</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Gateway</code></td> </tr><tr><td>AppEngine Application</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_app_engine_application</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Application</code></td> </tr><tr><td>AppEngine Instance</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_app_engine_instance</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Host</code></td> </tr><tr><td>AppEngine Service</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_app_engine_service</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Container</code></td> </tr><tr><td>AppEngine Version</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_app_engine_version</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Service</code></td> </tr><tr><td>Audit Config</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_audit_config</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Configuration</code></td> </tr><tr><td>Big Query Dataset</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_bigquery_dataset</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">DataStore</code>, <code class="code codeInline" spellcheck="false" tabindex="0">Database</code></td> </tr><tr><td>Big Query Model</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_bigquery_model</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Model</code></td> </tr><tr><td>Big Query Table</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_bigquery_table</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">DataCollection</code></td> </tr><tr><td>Bigtable AppProfile</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_bigtable_app_profile</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Configuration</code></td> </tr><tr><td>Bigtable Backup</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_bigtable_backup</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Backup</code></td> </tr><tr><td>Bigtable Cluster</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_bigtable_cluster</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Cluster</code></td> </tr><tr><td>Bigtable Instance</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_bigtable_instance</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Database</code></td> </tr><tr><td>Bigtable Table</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_bigtable_table</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">DataCollection</code></td> </tr><tr><td>Billing Account</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_billing_account</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Account</code></td> </tr><tr><td>Billing Budget</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_billing_budget</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Ruleset</code></td> </tr><tr><td>Binary Authorization Policy</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_binary_authorization_policy</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">AccessPolicy</code></td> </tr><tr><td>Cloud API Service</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_api_service</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Service</code></td> </tr><tr><td>Cloud Build</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_build</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Workflow</code></td> </tr><tr><td>Cloud Build BitBucket Server Config</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_bitbucket_server_config</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Configuration</code></td> </tr><tr><td>Cloud Build BitBucket Server Repo</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_bitbucket_server_repo</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">CodeRepo</code></td> </tr><tr><td>Cloud Build GitHub Enterprise Config</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_github_enterprise_config</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Configuration</code></td> </tr><tr><td>Cloud Build Trigger</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_build_trigger</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Rule</code></td> </tr><tr><td>Cloud Build Worker Pool</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_build_worker_pool</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Cluster</code></td> </tr><tr><td>Cloud Function</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_function</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Function</code></td> </tr><tr><td>Cloud Run Configuration</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_run_configuration</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Configuration</code></td> </tr><tr><td>Cloud Run Route</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_run_route</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Configuration</code></td> </tr><tr><td>Cloud Run Service</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_run_service</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Service</code></td> </tr><tr><td>Cloud Source Repository</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_source_repository</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">CodeRepo</code></td> </tr><tr><td>Cloud Storage Bucket</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_storage_bucket</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">DataStore</code></td> </tr><tr><td>Compute Address</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_address</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">IpAddress</code></td> </tr><tr><td>Compute Backend Bucket</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_backend_bucket</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Gateway</code></td> </tr><tr><td>Compute Backend Service</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_backend_service</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Service</code></td> </tr><tr><td>Compute Disk</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_disk</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">DataStore</code>, <code class="code codeInline" spellcheck="false" tabindex="0">Disk</code></td> </tr><tr><td>Compute Firewalls</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_firewall</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Firewall</code></td> </tr><tr><td>Compute Forwarding Rule</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_forwarding_rule</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Configuration</code></td> </tr><tr><td>Compute Global Address</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_global_address</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">IpAddress</code></td> </tr><tr><td>Compute Global Forwarding Rule</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_global_forwarding_rule</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Configuration</code></td> </tr><tr><td>Compute Image</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_image</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Image</code></td> </tr><tr><td>Compute Instance</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_instance</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Host</code></td> </tr><tr><td>Compute Instance Group</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_instance_group</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Group</code></td> </tr><tr><td>Compute Instance Group Named Port</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_instance_group_named_port</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Configuration</code></td> </tr><tr><td>Compute Networks</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_network</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Network</code></td> </tr><tr><td>Compute Project</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_project</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Project</code></td> </tr><tr><td>Compute Region Health Check</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_health_check</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Service</code></td> </tr><tr><td>Compute Region Load Balancer</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_url_map</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Gateway</code></td> </tr><tr><td>Compute Region Target HTTP Proxy</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_target_http_proxy</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Gateway</code></td> </tr><tr><td>Compute Region Target HTTPS Proxy</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_target_https_proxy</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Gateway</code></td> </tr><tr><td>Compute SSL Policy</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_ssl_policy</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Policy</code></td> </tr><tr><td>Compute Snapshot</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_snapshot</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Image</code></td> </tr><tr><td>Compute Subnetwork</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_subnetwork</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Network</code></td> </tr><tr><td>Compute Target SSL Proxy</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_target_ssl_proxy</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Gateway</code></td> </tr><tr><td>Container Cluster</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_container_cluster</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Cluster</code></td> </tr><tr><td>Container Node Pool</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_container_node_pool</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Group</code></td> </tr><tr><td>DNS Managed Zone</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_dns_managed_zone</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">DomainZone</code></td> </tr><tr><td>DNS Policy</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_dns_policy</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Ruleset</code></td> </tr><tr><td>Dataproc Cluster</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_dataproc_cluster</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Cluster</code></td> </tr><tr><td>Folder</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_folder</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Group</code></td> </tr><tr><td>IAM Binding</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_iam_binding</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">AccessPolicy</code></td> </tr><tr><td>IAM Custom Role</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_iam_role</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">AccessRole</code></td> </tr><tr><td>IAM Service Account</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_iam_service_account</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">User</code></td> </tr><tr><td>IAM Service Account Key</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_iam_service_account_key</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">AccessKey</code></td> </tr><tr><td>KMS Crypto Key</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_kms_crypto_key</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Key</code>, <code class="code codeInline" spellcheck="false" tabindex="0">CryptoKey</code></td> </tr><tr><td>KMS Key Ring</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_kms_key_ring</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Vault</code></td> </tr><tr><td>Logging Metric</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_logging_metric</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Configuration</code></td> </tr><tr><td>Logging Project Sink</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_logging_project_sink</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Logs</code></td> </tr><tr><td>Memcache Instance</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_memcache_instance</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Database</code>, <code class="code codeInline" spellcheck="false" tabindex="0">DataStore</code>, <code class="code codeInline" spellcheck="false" tabindex="0">Cluster</code></td> </tr><tr><td>Memcache Instance Node</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_memcache_instance_node</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Database</code>, <code class="code codeInline" spellcheck="false" tabindex="0">DataStore</code>, <code class="code codeInline" spellcheck="false" tabindex="0">Host</code></td> </tr><tr><td>Monitoring Alert Policy</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_monitoring_alert_policy</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Policy</code></td> </tr><tr><td>Organization</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_organization</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Organization</code></td> </tr><tr><td>Private CA Certificate</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_privateca_certificate</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Certificate</code></td> </tr><tr><td>Private CA Certificate Authority</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_privateca_certificate_authority</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Service</code></td> </tr><tr><td>Project</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_project</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Account</code></td> </tr><tr><td>PubSub Subscription</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_pubsub_subscription</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Service</code></td> </tr><tr><td>PubSub Topic</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_pubsub_topic</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Channel</code></td> </tr><tr><td>Redis Instance</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_redis_instance</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Database</code>, <code class="code codeInline" spellcheck="false" tabindex="0">DataStore</code>, <code class="code codeInline" spellcheck="false" tabindex="0">Host</code></td> </tr><tr><td>SQL Admin MySQL Instance</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_sql_mysql_instance</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Database</code></td> </tr><tr><td>SQL Admin Postgres Instance</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_sql_postgres_instance</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Database</code></td> </tr><tr><td>SQL Admin SQL Server Instance</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_sql_sql_server_instance</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Database</code></td> </tr><tr><td>Secret</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_secret_manager_secret</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Group</code></td> </tr><tr><td>Secret Version</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_secret_manager_secret_version</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Secret</code></td> </tr><tr><td>Spanner Instance</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_spanner_instance</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Database</code>, <code class="code codeInline" spellcheck="false" tabindex="0">Cluster</code></td> </tr><tr><td>Spanner Instance Config</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_spanner_instance_config</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Configuration</code></td> </tr><tr><td>Spanner Instance Database</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_spanner_database</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Database</code></td> </tr></tbody></table><h3 data-id="relationships">Relationships</h3> <p>The following relationships are created:</p> <table><thead><tr><th>Source Entity <code class="code codeInline" spellcheck="false" tabindex="0">_type</code></th> <th>Relationship <code class="code codeInline" spellcheck="false" tabindex="0">_class</code></th> <th>Target Entity <code class="code codeInline" spellcheck="false" tabindex="0">_type</code></th> </tr></thead><tbody><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_access_context_manager_access_policy</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_access_context_manager_access_level</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_access_context_manager_access_policy</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_access_context_manager_service_perimeter</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_access_context_manager_service_perimeter_api_operation</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_access_context_manager_service_perimeter_method_selector</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_access_context_manager_service_perimeter_egress_policy</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_access_context_manager_service_perimeter_api_operation</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_access_context_manager_service_perimeter</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_access_context_manager_service_perimeter_egress_policy</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_access_context_manager_service_perimeter</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_access_context_manager_service_perimeter_ingress_policy</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_access_context_manager_service_perimeter_ingress_policy</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_access_context_manager_service_perimeter_api_operation</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_access_context_manager_service_perimeter</code></td> <td><strong>LIMITS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_api_service</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_access_context_manager_service_perimeter</code></td> <td><strong>PROTECTS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_project</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_api_gateway_api_config</code></td> <td><strong>USES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_iam_service_account</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_api_gateway_api</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_api_gateway_gateway</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_api_gateway_api</code></td> <td><strong>USES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_api_gateway_api_config</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_app_engine_application</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_app_engine_service</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_app_engine_application</code></td> <td><strong>USES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_storage_bucket</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_app_engine_service</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_app_engine_version</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_app_engine_version</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_app_engine_instance</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_bigquery_dataset</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_bigquery_model</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_bigquery_dataset</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_bigquery_table</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_bigquery_dataset</code></td> <td><strong>USES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_kms_crypto_key</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_bigtable_cluster</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_bigtable_backup</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_bigtable_cluster</code></td> <td><strong>USES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_kms_crypto_key</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_bigtable_instance</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_bigtable_app_profile</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_bigtable_instance</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_bigtable_cluster</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_bigtable_instance</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_bigtable_table</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_bigtable_table</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_bigtable_backup</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_billing_account</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_billing_budget</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_api_service</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_iam_role</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_api_service</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">resource</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_api_service</code></td> <td><strong>USES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_audit_config</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_audit_config</code></td> <td><strong>ALLOWS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_domain</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_audit_config</code></td> <td><strong>ALLOWS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_group</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_audit_config</code></td> <td><strong>ALLOWS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_iam_service_account</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_audit_config</code></td> <td><strong>ALLOWS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_user</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_bitbucket_server_config</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_bitbucket_server_repo</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_build_trigger</code></td> <td><strong>TRIGGERS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_build</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_build</code></td> <td><strong>USES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_source_repository</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_build</code></td> <td><strong>USES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_storage_bucket</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">internet</code></td> <td><strong>ALLOWS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_firewall</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_folder</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_folder</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_function</code></td> <td><strong>USES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_iam_service_account</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_organization</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_folder</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_project</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_api_service</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_project</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_billing_budget</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_project</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_binary_authorization_policy</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_run_service</code></td> <td><strong>MANAGES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_run_configuration</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_run_service</code></td> <td><strong>MANAGES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_run_route</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_backend_bucket</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_storage_bucket</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_backend_service</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_health_check</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_backend_service</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_instance_group</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_backend_service</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_target_ssl_proxy</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_disk</code></td> <td><strong>CREATED</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_snapshot</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_disk</code></td> <td><strong>USES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_image</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_disk</code></td> <td><strong>USES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_kms_crypto_key</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_firewall</code></td> <td><strong>PROTECTS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_network</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_forwarding_rule</code></td> <td><strong>CONNECTS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_backend_service</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_forwarding_rule</code></td> <td><strong>CONNECTS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_network</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_forwarding_rule</code></td> <td><strong>CONNECTS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_subnetwork</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_forwarding_rule</code></td> <td><strong>CONNECTS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_target_http_proxy</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_forwarding_rule</code></td> <td><strong>CONNECTS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_target_https_proxy</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_forwarding_rule</code></td> <td><strong>USES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_address</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_global_forwarding_rule</code></td> <td><strong>CONNECTS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_backend_service</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_global_forwarding_rule</code></td> <td><strong>CONNECTS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_network</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_global_forwarding_rule</code></td> <td><strong>CONNECTS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_subnetwork</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_global_forwarding_rule</code></td> <td><strong>CONNECTS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_target_http_proxy</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_global_forwarding_rule</code></td> <td><strong>CONNECTS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_target_https_proxy</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_image</code></td> <td><strong>USES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_image</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_image</code></td> <td><strong>USES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_kms_crypto_key</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_instance_group</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_instance</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_instance_group</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_instance_group_named_port</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_instance</code></td> <td><strong>TRUSTS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_iam_service_account</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_instance</code></td> <td><strong>USES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_address</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_instance</code></td> <td><strong>USES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_disk</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_network</code></td> <td><strong>CONNECTS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_network</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_network</code></td> <td><strong>CONTAINS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_subnetwork</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_network</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_address</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_network</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_dns_policy</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_network</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_firewall</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_network</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_global_address</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_project</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_instance</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_snapshot</code></td> <td><strong>CREATED</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_image</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_subnetwork</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_address</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_subnetwork</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_global_address</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_subnetwork</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_instance</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_target_https_proxy</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_ssl_policy</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_target_ssl_proxy</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_ssl_policy</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_url_map</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_backend_bucket</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_url_map</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_backend_service</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_url_map</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_target_http_proxy</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_url_map</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_target_https_proxy</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_container_cluster</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_container_node_pool</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_container_node_pool</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_instance_group</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_dataproc_cluster</code></td> <td><strong>USES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_image</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_dataproc_cluster</code></td> <td><strong>USES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_kms_crypto_key</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_dataproc_cluster</code></td> <td><strong>USES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_storage_bucket</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_folder</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_project</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_iam_binding</code></td> <td><strong>ALLOWS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">resource</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_iam_binding</code></td> <td><strong>ASSIGNED</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_authenticated_users</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_iam_binding</code></td> <td><strong>ASSIGNED</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_domain</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_iam_binding</code></td> <td><strong>ASSIGNED</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">everyone</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_iam_binding</code></td> <td><strong>ASSIGNED</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_group</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_iam_binding</code></td> <td><strong>ASSIGNED</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_iam_role</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_iam_binding</code></td> <td><strong>ASSIGNED</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_iam_service_account</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_iam_binding</code></td> <td><strong>ASSIGNED</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_user</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_iam_binding</code></td> <td><strong>USES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_iam_role</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_iam_service_account</code></td> <td><strong>CREATED</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_app_engine_version</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_iam_service_account</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_iam_service_account_key</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_kms_key_ring</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_kms_crypto_key</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_logging_metric</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_monitoring_alert_policy</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_logging_project_sink</code></td> <td><strong>USES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_storage_bucket</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_memcache_instance</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_memcache_instance_node</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_memcache_instance</code></td> <td><strong>USES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_network</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_organization</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_project</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_privateca_certificate_authority</code></td> <td><strong>CREATED</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_privateca_certificate</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_privateca_certificate_authority</code></td> <td><strong>USES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_storage_bucket</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_pubsub_subscription</code></td> <td><strong>USES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_pubsub_topic</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_pubsub_topic</code></td> <td><strong>USES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_kms_crypto_key</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_redis_instance</code></td> <td><strong>USES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_network</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_secret_manager_secret</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_secret_manager_secret_version</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_spanner_database</code></td> <td><strong>USES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_kms_crypto_key</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_spanner_instance</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_spanner_database</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_spanner_instance</code></td> <td><strong>USES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_spanner_instance_config</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_sql_mysql_instance</code></td> <td><strong>USES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_kms_crypto_key</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_sql_postgres_instance</code></td> <td><strong>USES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_kms_crypto_key</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_sql_sql_server_instance</code></td> <td><strong>USES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_kms_crypto_key</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_user</code></td> <td><strong>CREATED</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_app_engine_version</code></td> </tr></tbody></table><h3 data-id="mapped-relationships">Mapped Relationships</h3> <p>The following mapped relationships are created:</p> <table><thead><tr><th>Source Entity <code class="code codeInline" spellcheck="false" tabindex="0">_type</code></th> <th>Relationship <code class="code codeInline" spellcheck="false" tabindex="0">_class</code></th> <th>Target Entity <code class="code codeInline" spellcheck="false" tabindex="0">_type</code></th> <th>Direction</th> </tr></thead><tbody><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_build_trigger</code></td> <td><strong>USES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">*github_repo*</code></td> <td>FORWARD</td> </tr></tbody></table><p><br></p> </article> </main>
.png)