Cloud Asset API project/organization level requests are currently not supported by VPC SC[1]
-- As such, if Cloud Asset API is protected in the project, these requests will be blocked by egress restrictions[2] if coming from inside the perimeter.
What you would like to accomplish :
Add these request inside VPC SC in order to be able to request them from inside the perimeter and control access from outside the perimeter with access level.
If applicable, reasons why alternative solutions are not sufficient:
As the request are blocked by egress restriction, it is not possible to configure access level to allow them.
Using Cloud IAM does allow outside access control for these request, but does not allow access from inside the perimeter.
Description
Current behavior :
What you would like to accomplish :
If applicable, reasons why alternative solutions are not sufficient:
[1]https://cloud.google.com/vpc-service-controls/docs/supported-products#table_cloud_asset_api
[2]https://cloud.google.com/vpc-service-controls/docs/service-perimeters#enforced_mode