This document contains a list of APIs for the management project, categorized as either Required or Recommended for application management. If a product supports VPC Service Controls, review the linked documentation in the provided list for more information, such as limitations or additional configuration requirements.
When you set up application management, the management project centralizes your application operations. All required APIs are automatically enabled on this project to provide basic, core application features. These required APIs are essential for the following processes:
- Group your applications, services, and workloads in App Hub.
- Design and deploy applications from templates in Application Design Center.
- View and centrally monitor your applications and their components in Cloud Hub and Application Monitoring.
Additionally, recommended APIs let you implement a comprehensive, end-to-end application lifecycle experience. You can choose to enable these at any time to gain access to advanced features for designing, building, and deploying applications, as well as richer health, observability, and performance insights.
Understanding costs
This section provides an overview of cost considerations for Google Cloud services you enable in the management project. Your costs for services in the management project depend on which services are enabled and the features that you use.
You can perform the following tasks at no charge and without linking a billing account to the management project:
- Use App Hub to organize your existing resources into applications.
- Get started with application observability by using the free data usage allotments for Google Cloud Observability.
To take advantage of other application-centric features, you must link a billing account to your management project. For example, the following features require a linked billing account for the management project:
- Use App Design Center to deploy applications from the Google Cloud console. App Design Center uses Infrastructure Manager to perform the deployments, and there are charges associated with provisioning your Terraform manifests and storing artifacts of the infrastructure provisioning.
- Collect and use telemetry beyond the Google Cloud Observability free data usage allotments.
- Use observability features where charges apply. For example, there are Cloud Monitoring chargeable metrics.
- Use Gemini Cloud Assist to help you with application tasks such as designing an application in App Design Center or troubleshoot issues with your applications.
Depending on how you configure log storage, you might incur costs for log storage in the management project. Most Google Cloud services generate audit logs and write product-specific events in Logging. To view all of the telemetry generated by application resources in your application management boundary, you must configure Google Cloud Observability, including aggregation of your log data. If you decide to aggregate logs in the management project, log storage costs are charged to the billing account associated with the management project.
To learn more about pricing for required and recommended Google Cloud services, refer to the pricing links in the More information column of the list of APIs.
Required and recommended APIs
This section lists required and recommended APIs for Application-centric Google Cloud on the management project.
The list of APIs in the Google Cloud console might differ from the list on this document. When you set up application management, the Google Cloud console displays the complete list of all APIs from Service Usage, including their dependencies. For example, you might see the following APIs displayed in the Google Cloud console:
- Required APIs: Pub/Sub is a Cloud Build dependency, so the Google Cloud console includes both in the list of required APIs.
- Recommended APIs: Secret Manager is a Developer Connect dependency, so the Google Cloud console includes both in the list of recommended APIs.
The list of recommended APIs includes many BigQuery dependencies. For more information, see Manage BigQuery API dependencies.
APIs involved in designing, building, and deploying applications
The following APIs provide functionalities for application management.
| API | Required or recommended | More information |
|---|---|---|
|
App Hub API Organize existing resources into applications |
Required |
|
|
App Design Center API Design, deploy, and update applications |
Required |
App Design Center pricing |
|
Cloud Asset API Manage the global metadata inventory of Google Cloud resources and other assets |
Required |
|
|
Cloud Resource Manager API Manage container resources such as organizations, folders, and projects |
Required |
|
|
Infrastructure Manager API Automate deployment and management of Google Cloud infrastructure resources |
Required |
|
|
Cloud Build API Run builds for Infra Manager deployments |
Required |
|
Cloud Storage API Store data for Google Cloud services, including App Design Center and Cloud Logging |
Required |
Google Cloud Observability APIs
The following APIs provide capabilities for observability features.
| API | Required or recommended | More information |
|---|---|---|
App Topology View the topology map that Application Monitoring creates for your applications |
Required |
Observability pricing |
Cloud Logging API |
Required |
|
Monitoring API |
Required |
|
Google Cloud Observability API |
Required |
Observability pricing |
Cloud Trace API |
Recommended |
|
Telemetry (OTLP) API Ingest trace data in the OpenTelemetry Protocol format |
Recommended |
|
BigQuery API BigQuery is required to use Log Analytics |
Recommended |
|
Operational insight APIs
Operational insight APIs provide you with visibility into the operational health and status of your applications and services.
| API | Required or recommended | More information |
|---|---|---|
|
App Optimize API Optimize costs in Cost Explorer and Cloud Hub |
Required |
Retrieve data from Cloud Billing and Cloud Monitoring |
Recommender API Generate recommendations and insights to help you optimize your Google Cloud resources |
Required |
|
Service Health API Identify Google Cloud service disruptions relevant to your applications |
Required |
Security and compliance APIs
Security Command Center is a risk management solution that helps security professionals to prevent, detect, and respond to security issues. Enabling Security Command Center lets you use Data Security Posture Management (DSPM) to help you manage data security.
| API | Required or recommended | More information |
|---|---|---|
Security Command Center API |
Recommended |
Developer tooling APIs
Developer Connect connects your application management workflows with your development lifecycle. This API lets you streamline development processes and create a cohesive developer experience.
| API | Required or recommended | More information |
|---|---|---|
Developer Connect API |
Recommended |
Gemini Cloud Assist APIs
Gemini Cloud Assist integrates the power of AI into your application-centric experience, offering assistance across the application lifecycle. It helps with a wide range of tasks, including infrastructure design, operation, troubleshooting, and cost optimization.
| API | Required or recommended | More information |
|---|---|---|
Gemini for Google Cloud API |
Recommended |
Enable recommended APIs
To enable recommended APIs after application management setup, follow these steps:
To get the permissions that you need to enable APIs, ask your administrator to grant you the Service Usage Admin (
roles/serviceusage.serviceUsageAdmin) role on the management project.In the Google Cloud console, go to the API Library page.
From the project picker in the Google Cloud console, select the management project.
Search for the API you want to enable and click its name.
On the Product details page for the API, click Enable.
Wait for the API and related services to be enabled. The enablement process can take several minutes.
If an API has dependencies on other APIs, the dependencies are automatically enabled. For example, when you enable the Developer Connect API, other APIs that depend on it are enabled, including Secret Manager.
If you have the required permissions to enable APIs but enablement fails for a particular API, your organization might have configured the Restrict Resource Service Usage organization policy constraint to deny enablement for the API.