IAM 條件的資源屬性

本主題列出可用於條件中資源屬性的值,包括資源服務、資源類型的字串值,以及資源名稱字串的格式。

您可以使用資源屬性,變更角色繫結提供的授權範圍。如果角色包含適用於不同類型資源的權限,條件可以根據資源服務、資源類型和資源名稱,授予角色的部分權限。

本頁列出的 Google Cloud 服務和資源類型皆提供資源屬性。其他服務和資源類型無法辨識資源屬性。

如要進一步瞭解 Identity and Access Management (IAM) 條件,請參閱下列資源:

資源服務值

下表列出資源服務屬性可包含的值。

資源服務價值 REST 參考資料
agentregistry.googleapis.com API 參考資料
apigee.googleapis.com API 參考資料
apihub.googleapis.com API 參考資料
backupdr.googleapis.com API 參考資料
bigquery.googleapis.com API 參考資料
bigqueryreservation.googleapis.com API 參考資料
bigtableadmin.googleapis.com API 參考資料
binaryauthorization.googleapis.com API 參考資料
ces.googleapis.com API 參考資料
clouddeploy.googleapis.com API 參考資料
cloudkms.googleapis.com API 參考資料
cloudresourcemanager.googleapis.com API 參考資料
compute.googleapis.com API 參考資料
container.googleapis.com API 參考資料
connectors.googleapis.com API 參考資料
dataform.googleapis.com API 參考資料
dataproc.googleapis.com API 參考資料
dns.googleapis.com API 參考資料
firestore.googleapis.com API 參考資料
iap.googleapis.com API 參考資料
integrations.googleapis.com API 參考資料
logging.googleapis.com API 參考資料
managedkafka.googleapis.com API 參考資料
networksecurity.googleapis.com API 參考資料
parametermanager.googleapis.com API 參考資料
pubsublite.googleapis.com API 參考資料
secretmanager.googleapis.com API 參考資料
spanner.googleapis.com API 參考資料
sqladmin.googleapis.com API 參考資料
storage.googleapis.com API 參考資料

資源類型值

下表列出資源類型屬性可包含的值。

資源類型值 參考資料
agentregistry.googleapis.com/Skill 閱讀完整內容
agentregistry.googleapis.com/SkillRevision 閱讀完整內容
apigee.googleapis.com/ApiProduct 閱讀完整內容
apigee.googleapis.com/ApiProductAttribute 閱讀完整內容
apigee.googleapis.com/Cache 閱讀完整內容
apigee.googleapis.com/Developer 閱讀完整內容
apigee.googleapis.com/DeveloperApp 閱讀完整內容
apigee.googleapis.com/DeveloperAppAttribute 閱讀完整內容
apigee.googleapis.com/DeveloperAttribute 閱讀完整內容
apigee.googleapis.com/Export 閱讀完整內容
apigee.googleapis.com/FlowHook 閱讀完整內容
apigee.googleapis.com/KeyStore 閱讀完整內容
apigee.googleapis.com/KeyStoreAlias 閱讀完整內容
apigee.googleapis.com/KeyValueEntry 閱讀完整內容
apigee.googleapis.com/KeyValueMap 閱讀完整內容
apigee.googleapis.com/Proxy 閱讀完整內容
apigee.googleapis.com/ProxyRevision 閱讀完整內容
apigee.googleapis.com/Query 閱讀完整內容
apigee.googleapis.com/RatePlan 閱讀完整內容
apigee.googleapis.com/Reference 閱讀完整內容
apigee.googleapis.com/SharedFlow 閱讀完整內容
apigee.googleapis.com/SharedFlowRevision 閱讀完整內容
apigee.googleapis.com/TargetServer 閱讀完整內容
apigee.googleapis.com/TraceSession 閱讀完整內容
apihub.googleapis.com/Api 閱讀完整內容
apihub.googleapis.com/Deployment 閱讀完整內容
apihub.googleapis.com/Version 閱讀完整內容
apihub.googleapis.com/Spec 閱讀完整內容
apihub.googleapis.com/ApiOperation 閱讀完整內容
apihub.googleapis.com/Definition 閱讀完整內容
backupdr.googleapis.com/BackupVaults 閱讀完整內容
bigquery.googleapis.com/Dataset 閱讀完整內容
bigquery.googleapis.com/Model 閱讀完整內容
bigquery.googleapis.com/Routine 閱讀完整內容
bigquery.googleapis.com/Table 閱讀完整內容
bigqueryreservation.googleapis.com/Assignment 閱讀完整內容
bigqueryreservation.googleapis.com/BiReservation 閱讀完整內容
bigqueryreservation.googleapis.com/CapacityCommitment 閱讀完整內容
bigqueryreservation.googleapis.com/Location 閱讀完整內容
bigqueryreservation.googleapis.com/Reservation 閱讀完整內容
bigtableadmin.googleapis.com/AppProfile 閱讀完整內容
bigtableadmin.googleapis.com/Backup 閱讀完整內容
bigtableadmin.googleapis.com/Cluster 閱讀完整內容
bigtableadmin.googleapis.com/Instance 閱讀完整內容
bigtableadmin.googleapis.com/Table 閱讀完整內容
binaryauthorization.googleapis.com/Attestor 閱讀完整內容
binaryauthorization.googleapis.com/ContinuousValidationConfig 閱讀完整內容
binaryauthorization.googleapis.com/Policy 閱讀完整內容
ces.googleapis.com/App 閱讀完整內容
ces.googleapis.com/Operation 閱讀完整內容
cloud.googleapis.com/Location1 閱讀完整內容
cloudkms.googleapis.com/CryptoKey 閱讀完整內容
cloudkms.googleapis.com/CryptoKeyVersion 閱讀完整內容
cloudkms.googleapis.com/KeyRing 閱讀完整內容
cloudresourcemanager.googleapis.com/Project2 閱讀完整內容
compute.googleapis.com/BackendService 閱讀完整內容
compute.googleapis.com/Disk 閱讀完整內容
compute.googleapis.com/Firewall 閱讀完整內容
compute.googleapis.com/ForwardingRule 閱讀完整內容
compute.googleapis.com/GlobalForwardingRule 閱讀完整內容
compute.googleapis.com/Image 閱讀完整內容
compute.googleapis.com/Instance 閱讀完整內容
compute.googleapis.com/InstanceTemplate 閱讀完整內容
compute.googleapis.com/Snapshot 閱讀完整內容
compute.googleapis.com/TargetHttpProxy 閱讀完整內容
compute.googleapis.com/TargetHttpsProxy 閱讀完整內容
compute.googleapis.com/TargetSslProxy 閱讀完整內容
compute.googleapis.com/TargetTcpProxy 閱讀完整內容
connectors.googleapis.com/Connection 閱讀完整內容
connectors.googleapis.com/ConnectionSchemaMetadata 閱讀完整內容
connectors.googleapis.com/EndpointAttachment 閱讀完整內容
connectors.googleapis.com/EventSubscription 閱讀完整內容
connectors.googleapis.com/ManagedZone 閱讀完整內容
container.googleapis.com/Cluster 閱讀完整內容
dataform.googleapis.com/CompilationResult 閱讀完整內容
dataform.googleapis.com/Location 閱讀完整內容
dataform.googleapis.com/ReleaseConfig 閱讀完整內容
dataform.googleapis.com/Repository 閱讀完整內容
dataform.googleapis.com/WorkflowConfig 閱讀完整內容
dataform.googleapis.com/WorkflowInvocation 閱讀完整內容
dataform.googleapis.com/Workspace 閱讀完整內容
dataproc.googleapis.com/AutoscalingPolicy 閱讀完整內容
dataproc.googleapis.com/Cluster 閱讀完整內容
dataproc.googleapis.com/Job 閱讀完整內容
dataproc.googleapis.com/WorkflowTemplate 閱讀完整內容
dns.googleapis.com/ResourceRecordSet 閱讀完整內容
firestore.googleapis.com/Database 閱讀完整內容
iap.googleapis.com/Tunnel 閱讀完整內容
iap.googleapis.com/TunnelInstance 閱讀完整內容
iap.googleapis.com/TunnelZone 閱讀完整內容
iap.googleapis.com/Web 閱讀完整內容
iap.googleapis.com/WebService 閱讀完整內容
iap.googleapis.com/WebServiceVersion 閱讀完整內容
iap.googleapis.com/WebType 閱讀完整內容
integrations.googleapis.com/AuthConfig 閱讀完整內容
integrations.googleapis.com/Execution 閱讀完整內容
integrations.googleapis.com/Integration 閱讀完整內容
integrations.googleapis.com/IntegrationVersion 閱讀完整內容
integrations.googleapis.com/Location 不適用
integrations.googleapis.com/Suspension 閱讀完整內容
logging.googleapis.com/LogBucket 閱讀完整內容
logging.googleapis.com/LogView 閱讀完整內容
managedkafka.googleapis.com/Cluster 閱讀完整內容
managedkafka.googleapis.com/ConsumerGroup 閱讀完整內容
managedkafka.googleapis.com/Operation 閱讀完整內容
managedkafka.googleapis.com/Topic 閱讀完整內容
networksecurity.googleapis.com/AddressGroup 閱讀完整內容
networksecurity.googleapis.com/FirewallEndpoint 閱讀完整內容
networksecurity.googleapis.com/FirewallEndpointAssociation 閱讀完整內容
networksecurity.googleapis.com/InterceptDeployment 閱讀完整內容
networksecurity.googleapis.com/InterceptDeploymentGroup 閱讀完整內容
networksecurity.googleapis.com/InterceptEndpointGroup 閱讀完整內容
networksecurity.googleapis.com/InterceptEndpointGroupAssociation 閱讀完整內容
networksecurity.googleapis.com/MirroringDeployment 閱讀完整內容
networksecurity.googleapis.com/MirroringDeploymentGroup 閱讀完整內容
networksecurity.googleapis.com/MirroringEndpointGroup 閱讀完整內容
networksecurity.googleapis.com/MirroringEndpointGroupAssociation 閱讀完整內容
networksecurity.googleapis.com/SecurityProfile 閱讀完整內容
networksecurity.googleapis.com/SecurityProfileGroup 閱讀完整內容
parametermanager.googleapis.com/Parameter 閱讀完整內容
parametermanager.googleapis.com/ParameterVersion 閱讀完整內容
pubsublite.googleapis.com/Location 閱讀完整內容
pubsublite.googleapis.com/Subscription 閱讀完整內容
pubsublite.googleapis.com/Topic 閱讀完整內容
secretmanager.googleapis.com/Secret 閱讀完整內容
secretmanager.googleapis.com/SecretVersion 閱讀完整內容
spanner.googleapis.com/Backup 閱讀完整內容
spanner.googleapis.com/Database 閱讀完整內容
spanner.googleapis.com/Instance 閱讀完整內容
sqladmin.googleapis.com/BackupRun 閱讀完整內容
sqladmin.googleapis.com/Instance 閱讀完整內容
storage.googleapis.com/Bucket 閱讀完整內容
storage.googleapis.com/Folder 閱讀完整內容
storage.googleapis.com/ManagedFolder 閱讀完整內容
storage.googleapis.com/Object 閱讀完整內容

1 Cloud Key Management Service 會將這類資源做為金鑰環資源的父項。

2 Apigee 會將這個資源類型做為 Apigee 組織中任何資源的父項。

資源名稱格式

下表列出各類資源名稱屬性的格式。

資源參照 資源名稱格式範本
Agent Registry 技能 projects/project-id/locations/location/skills/skill-id
Agent Registry skill-revisions projects/project-id/locations/location/skills/skill-id/revisions/skill-revision-id
Apigee API 產品屬性 organizations/organization-name/apiproducts/product-id/attributes/attribute-id
Apigee API 產品 organizations/organization-name/apiproducts/product-id
Apigee API Proxy organizations/organization-name/apis/proxy-id
Apigee API Proxy 鍵/值對應項目 organizations/organization-name/api/proxy-id/keyvaluemaps/keyvaluemap-id/entries/entry-id
Apigee API Proxy 鍵/值對應 organizations/organization-name/apis/proxy-id/keyvaluemaps/key-value-map-id
Apigee API Proxy 修訂版本 organizations/organization-name/apis/proxy-id/revisions/revision-id
Apigee 快取 organizations/organization-name/environments/environment-id/caches/cache-id
Apigee 開發人員應用程式屬性 organizations/organization-name/developers/developer-id/apps/app-id/attributes/attribute-id
Apigee 開發人員應用程式 organizations/organization-name/developers/developer-id/apps/app-id
Apigee 開發人員屬性 organizations/organization-name/developers/developer-id/attributes/attribute-id
Apigee 開發人員 organizations/organization-name/developers/developer-id
Apigee 環境鍵/值對應項目 organizations/organization-name/environments/environment-id/keyvaluemaps/keyvaluemap-id/entries/entry-id
Apigee 環境鍵/值對應 organizations/organization-name/environments/environment/keyvaluemaps/key-value-map-id
Apigee 匯出 organizations/organization-name/environments/environment-id/analytics/exports/export-id
Apigee 流程掛鉤 organizations/organization-name/environments/environment-id/flowhooks/flowhook-id
Apigee KeyStore 別名 organizations/organization-name/environments/environment-id/keystores/keystore-id/aliases/alias-id
Apigee KeyStore organizations/organization-name/environments/environment-id/keystores/keystore-id
Apigee 查詢 organizations/organization-name/environments/environment-id/queries/query-id
Apigee 費率方案 organizations/organization-name/apiproducts/product-id/rateplans/rate-plan-id
Apigee 參考資料 organizations/organization-name/environments/environment-id/references/reference-id
Apigee 共用流程修訂版本 organizations/organization-name/sharedflows/shared-flow-id/revisions/revision-id
Apigee 共用流程 organizations/organization-name/sharedflows/shared-flow-id
Apigee 目標伺服器 organizations/organization-name/environments/environment-id/targetservers/targetserver-id
Apigee 追蹤 (偵錯) 工作階段 organizations/organization-name/environments/environment-id/apis/proxy-id/revisions/revision-id/debugsessions/session-id
Apigee API Hub apis projects/project-id/locations/location-id/apis/api-id
Apigee API 中心部署作業 projects/project-id/locations/location-id/deployments/deployment-id
Apigee API 中心版本 projects/project-id/locations/location-id/apis/api-id/versions/version-id
Apigee API 中心規格 projects/project-id/locations/location-id/apis/api-id/versions/version-id/specs/spec-id
Apigee API 中心 作業 projects/project-id/locations/location-id/apis/api-id/versions/version-id/operations/operation-id
Apigee API 中心定義 projects/project-id/locations/location-id/apis/api-id/versions/version-id/definitions/definition-id
備份和災難復原服務 backupVaults projects/project-id/locations/location-id/backupVaults/backup-vault-id
BigQuery 資料集 projects/project-id/datasets/dataset-id
BigQuery 模型 projects/project-id/datasets/dataset-id/models/model-id
BigQuery 常式 projects/project-id/datasets/dataset-id/routines/routine-id
BigQuery 資料表 projects/project-id/datasets/dataset-id/tables/table-id
BigQuery Reservation API 指派作業 projects/project-id/locations/location-id/reservations/reservation-id/assignments/assignment-id
BigQuery Reservation API BI 預留項目 projects/project-id/locations/location-id/biReservation
BigQuery Reservation API 運算資源承諾使用合約 projects/project-id/locations/location-id/capacityCommitments/capacity-commitment-id
BigQuery Reservation API 位置 projects/project-id/locations/location-id
BigQuery Reservation API 預留項目 projects/project-id/locations/location-id/reservations/reservation-id
二進位授權驗證者 projects/project-number/attestors/attestor-id
二進位授權持續驗證設定 projects/project-number/continuousValidationConfig
二進位授權政策 projects/project-number/policy
Customer Experience Agent Studio 應用程式 projects/project-id/locations/location-id/apps/app-id
Customer Experience Agent Studio 作業 projects/project-id/locations/location-id/operations/operation-id
Bigtable appProfiles projects/project-id/instances/instance-id/appProfiles/appProfile-id
Bigtable 備份 projects/project-id/instances/instance-id/clusters/cluster-id/backups/backup-id
Bigtable 叢集 projects/project-id/instances/instance-id/clusters/cluster-id
Bigtable 執行個體 projects/project-id/instances/instance-id
Bigtable 資料表 projects/project-id/instances/instance-id/tables/table-id
Cloud Deploy 自動化執行作業 projects/project-id/locations/location-id/deliveryPipelines/delivery-pipeline-id/automationRuns/automation-run-id
Cloud Deploy 自動化功能 projects/project-id/locations/location-id/deliveryPipelines/delivery-pipeline-id/automations/automation-id
Cloud Deploy 自訂目標類型 projects/project-id/locations/location-id/customTargetTypes/custom-target-type-id
Cloud Deploy 推送管道 projects/project-id/locations/location-id/deliveryPipelines/delivery-pipeline-id
Cloud Deploy 工作執行作業 projects/project-id/locations/location-id/deliveryPipelines/delivery-pipeline-id/releases/release-id/rollouts/rollout-id/jobRuns/job-run-id
Cloud Deploy 版本 projects/project-id/locations/location-id/deliveryPipelines/delivery-pipeline-id/releases/release-id
Cloud Deploy 推出作業 projects/project-id/locations/location-id/deliveryPipelines/delivery-pipeline-id/releases/release-id/rollouts/rollout-id
Cloud Deploy 目標 projects/project-id/locations/location-id/targets/target-id
Firestore 資料庫 projects/project-id/databases/database-id
Cloud NGFW 位址群組 projects/project-number/locations/location/addressGroups/address-group-name
organizations/organization-id/locations/location/addressGroups/address-group-name
Cloud NGFW 防火牆端點 projects/project-number/locations/location/firewallEndpoints/firewall-endpoint-id
organizations/organization-id/locations/location/firewallEndpoints/firewall-endpoint-id
Cloud NGFW 防火牆端點關聯 projects/project-number/locations/location/firewallEndpointAssociations/firewall-endpoint-association-id
Cloud NGFW 安全性設定檔群組1 projects/project-number/locations/location/securityProfileGroups/security-profile-group-id
Cloud NGFW 安全性設定檔1 projects/project-number/locations/location/securityProfiles/security-profile-id
網路安全整合服務攔截部署項目群組 projects/project-number/locations/location/interceptDeploymentGroups/intercept-deployment-group-id
網路安全整合服務攔截部署項目 projects/project-number/locations/location/interceptDeployments/intercept-deployment-id
網路安全整合服務攔截端點群組關聯 projects/project-number/locations/location/interceptEndpointGroupAssociations/intercept-endpoint-group-association-id
網路安全整合服務攔截端點群組 projects/project-number/locations/location/interceptEndpoints/intercept-endpoint-group-id
網路安全整合服務鏡像部署項目群組 projects/project-number/locations/location/mirroringDeploymentGroups/mirroring-deployment-group-id
網路安全整合服務鏡像部署作業 projects/project-number/locations/location/mirroringDeployments/mirroring-deployment-id
網路安全整合服務鏡像端點群組關聯 projects/project-number/locations/location/mirroringEndpointGroupAssociations/mirroring-endpoint-group-association-id
網路安全整合服務鏡像端點群組 projects/project-number/locations/location/mirroringEndpoints/mirroring-endpoint-group-id
Cloud Key Management Service 加密編譯金鑰 projects/project-id/locations/location-id/keyRings/keyring-id/cryptoKeys/cryptokey-id
Cloud Key Management Service 加密編譯金鑰版本 projects/project-id/locations/location-id/keyRings/keyring-id/cryptoKeys/cryptokey-id/cryptoKeyVersions/cryptokeyversion-id
Cloud Key Management Service 金鑰環 projects/project-id/locations/location-id/keyRings/keyring-id
Cloud Logging 記錄檔 bucket projects/project-id/locations/location-id/buckets/bucket-id
Cloud Logging 記錄檔檢視畫面 projects/project-id/locations/location-id/buckets/bucket-id/views/view-id
Spanner 備份 projects/project-id/instances/instance-id/backups/backup-id
Spanner 資料庫 projects/project-id/instances/instance-id/databases/database-id
Spanner 執行個體 projects/project-id/instances/instance-id
Cloud SQL 備份執行作業 projects/project-id/instances/instance-id/backupRuns/backup-id
Cloud SQL 執行個體 projects/project-id/instances/instance-id
Cloud Storage bucket2 projects/_/buckets/bucket-name
Cloud Storage 資料夾 (位於已啟用階層命名空間的 bucket)2、3 projects/_/buckets/bucket-name/folders/folder-name
Cloud Storage 代管資料夾2, 4 projects/_/buckets/bucket-name/managedFolders/managed-folder-name
Cloud Storage 物件2, 5 projects/_/buckets/bucket-name/objects/object-name
Compute Engine 全域後端服務 projects/project-id/global/backendServices/backend-service-id
Compute Engine 區域性後端服務 projects/project-id/regions/region-id/backendServices/backend-service-id
Compute Engine 防火牆 projects/project-id/global/firewalls/firewall-id
Compute Engine 通用轉送規則 projects/project-id/global/forwardingRules/forwarding-rule-id
Compute Engine 區域轉送規則 projects/project-id/regions/region-id/forwardingRules/forwarding-rule-id
Compute Engine 映像檔 projects/project-id/global/images/image-id
Compute Engine 執行個體範本 projects/project-id/global/instanceTemplates/instance-template-id
Compute Engine 執行個體 projects/project-id/zones/zone-id/instances/instance-id
Compute Engine 區域性永久磁碟 projects/project-id/regions/region-id/disks/disk-id
Compute Engine 可用區永久磁碟 projects/project-id/zones/zone-id/disks/disk-id
Compute Engine 快照 projects/project-id/global/snapshots/snapshot-id
Compute Engine 全域目標 HTTP Proxy projects/project-id/global/targetHttpProxies/target-http-proxy-id
Compute Engine 區域目標 HTTP Proxy projects/project-id/regions/region-id/targetHttpProxies/target-http-proxy-id
Compute Engine 全域目標 HTTPS Proxy projects/project-id/global/targetHttpsProxies/target-https-proxy-id
Compute Engine 區域目標 HTTPS Proxy projects/project-id/regions/region-id/targetHttpsProxies/target-https-proxy-id
Compute Engine 目標 SSL Proxy projects/project-id/global/targetSslProxies/target-ssl-proxy-id
Compute Engine 目標 TCP Proxy projects/project-id/global/targetTcpProxies/target-tcp-proxy-id
Google Kubernetes Engine 可用區叢集 projects/project-id/zones/zone/clusters/cluster-id
Google Kubernetes Engine 區域叢集 projects/project-id/locations/location/clusters/cluster-id
Dataform 編譯結果 projects/project-id/locations/location/repositories/repository/compilationResults/compilation-result
Dataform 位置 projects/project-id/locations/location
Dataform 發布版本設定 projects/project-id/locations/location/repositories/repository/releaseConfigs/release-config
Dataform 存放區 projects/project-id/locations/location/repositories/repository
Dataform 工作流程設定 projects/project-id/locations/location/repositories/repository/workflowConfigs/workflow-config
Dataform 工作流程叫用 projects/project-id/locations/location/repositories/repository/workflowInvocations/workflow-invocation
Dataform 工作區 projects/project-id/locations/location/repositories/repository/workspaces/workspace
Managed Service for Apache Spark 自動調度資源政策 projects/project-id/regions/region/autoscalingPolicies/autoscaling-policy-id
Managed Service for Apache Spark 叢集 projects/project-id/regions/region/clusters/cluster-name
Managed Service for Apache Spark 工作 projects/project-id/regions/region/jobs/job-id
Managed Service for Apache Spark 工作流程範本 projects/project-id/regions/region/workflowTemplates/template-id
Cloud DNS 資源記錄集 projects/project-id/managedZones/zone-id/rrsets/rrset-name/rrset-type
Integration Connectors 連線 projects/project-id/locations/location/connections/connection-name
Integration Connectors 連線結構定義中繼資料 projects/project-id/locations/location/connections/connection-name/connectionSchemaMetadata
Integration Connectors 端點連結 projects/project-id/locations/location/endpointAttachments/endpoint-attachment-name
Integration Connectors 事件訂閱 projects/project-id/locations/location/eventSubscriptions/event-subscription-name
Integration Connectors 代管區域 projects/project-id/locations/global/managedZones/managed-zone-name
Google Cloud Managed Service for Apache Kafka 叢集 projects/project-number/locations/location/clusters/cluster-name
Google Cloud Managed Service for Apache Kafka 消費者群組 projects/project-number/locations/location/clusters/cluster-name/consumerGroups/consumer-group
Google Cloud Managed Service for Apache Kafka 作業 projects/project-number/locations/location/operations/operation
Google Cloud Managed Service for Apache Kafka 主題 projects/project-number/locations/location/clusters/cluster-name/topics/topic-name
Parameter Manager 參數 projects/project-number/locations/location/parameters/parameter-id
Parameter Manager 參數版本 projects/project-number/locations/location/parameters/parameter-id/versions/version-id
Pub/Sub Lite 位置 projects/project-number/locations/location
Pub/Sub Lite 訂閱項目 projects/project-number/locations/location/subscriptions/subscription-id
Pub/Sub Lite 主題 projects/project-number/locations/location/topics/topic-id
Resource Manager 組織6 organizations/organization-name
Secret Manager 密鑰 projects/project-number/secrets/secret-id
Secret Manager 密鑰版本7 projects/project-number/secrets/secret-id/versions/secret-version

1 IAM 條件僅支援專案層級的 Cloud NGFW 資源。不支援組織層級的 Cloud NGFW 資源。

2 Cloud Storage 的資源名稱包含底線 (_),而非專案 ID。您無法將底線替換為專案 ID、專案名稱或專案編號。

3 使用完整的資料夾名稱,包括正斜線。

4 使用完整的代管資料夾名稱,包括正斜線。

5 使用完整的物件名稱,包括正斜線。

6 當您列出屬於 Apigee 組織的任何類型資源時,Apigee 會使用這個格式。

7 如果條件評估 Secret 版本的資源名稱,則要求中的 Secret 版本必須與條件中的 Secret 版本完全相符,才能滿足條件。舉例來說,如果條件中的版本是 latest,則只有版本為 latest 的要求符合條件;版本為 3 的要求不符合條件,即使 3 是最新版本也一樣。

資源標記

您可以將標記附加至組織、專案和資料夾。任何 Google Cloud 資源都可以從這些較高層級的資源繼承標記。

您可以使用幾種不同類型的 ID 來參照標記鍵和值:

  • 永久 ID:全域不重複,且無法重複使用。舉例來說,標記鍵的永久 ID 可能是 tagKeys/123456789012,標記值的永久 ID 可能是 tagValues/567890123456。
  • 簡稱。在定義鍵的專案或組織中,每個鍵的簡稱不得重複,且每個值的簡稱在相關聯的鍵中也不得重複。舉例來說,標記鍵的簡稱可以是 env,標記值的簡稱可以是 prod。
  • 命名空間名稱:將組織的數字 ID 或專案 ID 新增至標記鍵的簡稱。舉例來說,為組織建立的標記鍵可能具有命名空間名稱 123456789012/env。如要瞭解如何取得組織 ID,請參閱「取得組織資源 ID」。為專案建立的標記鍵可能具有命名空間名稱 myproject/env。如要瞭解如何取得專案 ID,請參閱「識別專案」。

具體 ID 取決於您為組織建立的標記鍵和值。如要瞭解如何列出可用的標記鍵和值,請參閱「列出標記鍵」和「列出標記值」。