Application integration and operations

Per-type reference · From docs/INVENTORY_CATALOG.md on GitHub

SCHEDULE

Catalog entries that classify native resources as this type:

• AWS ARN: scheduler:schedule
• AWS CloudFormation (Cloud Control): AWS::Scheduler::Schedule

• Azure ARM: microsoft.automation/automationaccounts

• Providers: AWS

• Metadata keys: action_after_completion (null), association_id (str), cutoff_hours (int), document (str), document_version (null), duration_hours (int), enabled (bool), expression (str), flexible_window (str), group (str), kind (str), last_execution (null), next_execution (null), retry_attempts (int), schedule (str), service (str), state (str), status (null), target_api (null), target_arn (str), targets (list), tasks (list), timezone (null | str), vpc_config (null), window_id (str)
• Carries aliases: yes
• Declared relations: ASSUMES_ROLE / RUNS_ON, INVOKES / INVOKES, MANAGES / SCHEDULED_BY, REFERENCES / DEPENDS_ON, REFERENCES / WRITES_TO
• Edges out:
  ASSUMES_ROLE / RUNS_ON → IAM_ROLE
INVOKES / INVOKES → LAMBDA_FUNCTION
MANAGES / SCHEDULED_BY → EC2
REFERENCES / DEPENDS_ON → RUNBOOK
REFERENCES / WRITES_TO → MESSAGE_QUEUE

EVENT_PIPE

Catalog entries that classify native resources as this type:

• AWS ARN: pipes:pipe

• AWS CloudFormation (Cloud Control): AWS::Pipes::Pipe

• Providers: AWS

• Metadata keys: current_state (str), desired_state (str), enrichment (null), has_filter (bool), log_level (null), service (str), source (str), source_type (null), target (str), vpc_config (null)
• Declared relations: ASSUMES_ROLE / RUNS_ON, INVOKES / INVOKES, INVOKES / TRIGGERED_BY ←
• Edges out:
  ASSUMES_ROLE / RUNS_ON → IAM_ROLE
INVOKES / INVOKES → LAMBDA_FUNCTION
• Edges in:
  INVOKES / TRIGGERED_BY ← MESSAGE_QUEUE

API_DESTINATION

Catalog entries that classify native resources as this type:

• AWS ARN: events:api-destination

• AWS CloudFormation (Cloud Control): AWS::Events::ApiDestination

• Providers: AWS

• Metadata keys: authorization_type (str), endpoint_host (str), http_method (str), kind (str), private (bool), rate_limit_per_second (null), secret_arn (str), service (str), state (str)
• Declared relations: REFERENCES / DEPENDS_ON, REFERENCES / READS_FROM
• Edges out:
  REFERENCES / DEPENDS_ON → API_DESTINATION
• Edges in:
  REFERENCES / DEPENDS_ON ← API_DESTINATION

ALARM

Catalog entries that classify native resources as this type:

• AWS ARN: cloudwatch:alarm
• AWS CloudFormation (Cloud Control): AWS::CloudWatch::Alarm, AWS::CloudWatch::CompositeAlarm
• Azure ARM: microsoft.insights/activitylogalerts, microsoft.insights/metricalerts, microsoft.insights/scheduledqueryrules

• GCP Cloud Asset Inventory: monitoring.googleapis.com/AlertPolicy

• Providers: AWS

• Metadata keys: actions_enabled (bool | null), alarm_rule (null | str), alarm_type (str), comparison (null | str), dimensions (object), ec2_actions (list), evaluation_periods (int | null), metric (null | str), monitored_identifiers (list), namespace (null | str), service (str), state (null | str), statistic (null | str), threshold (float | null)
• Declared relations: INVOKES / INVOKES, INVOKES / SCALES_WITH, MONITORS / MONITORED_BY, REFERENCES / DEPENDS_ON
• Edges out:
  INVOKES / INVOKES → NOTIFICATION_TOPIC
INVOKES / SCALES_WITH → AUTOSCALING_GROUP
MONITORS / MONITORED_BY → AUTOSCALING_GROUP, LAMBDA_FUNCTION
REFERENCES / DEPENDS_ON → ALARM
• Edges in:
  REFERENCES / DEPENDS_ON ← ALARM
REFERENCES / MONITORED_BY ← DEPLOYMENT_GROUP

DELIVERY_STREAM

Firehose.

Catalog entries that classify native resources as this type:

• AWS ARN: firehose:deliverystream

• AWS CloudFormation (Cloud Control): AWS::KinesisFirehose::DeliveryStream

• Providers: AWS

• Metadata keys: destinations (list), encryption (null), encryption_key_type (null), service (str), source_database_host (null), source_type (str), status (str), vpc_config (null)
• Declared relations: ASSUMES_ROLE / RUNS_ON, INVOKES / STREAMS_TO, INVOKES / TRIGGERED_BY ←, REFERENCES / BACKUP_TO
• Edges out:
  ASSUMES_ROLE / RUNS_ON → IAM_ROLE
INVOKES / STREAMS_TO → S3_BUCKET
REFERENCES / BACKUP_TO → S3_BUCKET
• Edges in:
  INVOKES / TRIGGERED_BY ← DATA_STREAM

LOG_SINK

Subscription filter, logging sink, diagnostic setting.

Catalog entries that classify native resources as this type:

• AWS CloudFormation (Cloud Control): AWS::Logs::SubscriptionFilter
• Azure ARM: microsoft.insights/datacollectionrules, microsoft.insights/diagnosticsettings

• GCP Cloud Asset Inventory: logging.googleapis.com/LogSink

• Providers: AWS, GCP

• Metadata keys: allowed_org_ids (list), association_count (int), create_time (null), description (null), destination (str), destination_arn (str), disabled (bool), distribution (str), embedding (null), exclusion_count (int), filter (str), filter_pattern (str), folders (list), gcp_asset_type (str), image (null), include_children (bool), kind (str), location (str), log_group (null | str), logged_vpcs (list), monitoring_account (bool), monitoring_account_id (str), network_tags (list), org_condition (list), organization (str), owner_id (str), parent_asset_type (null), parent_full_resource_name (str), policy_allows_public (bool), project (null | str), project_id (null | str), project_number (null | str), resource_kind (str), resource_types (list), s3_bucket (str), service (str), share_status (str), sink_arn (str), state (null), status (str), target_arn (str), text (bool), video (null), writer_identity (str)
• Carries aliases: yes
• Declared relations: ASSUMES_ROLE / RUNS_ON, GRANTS_ACCESS / POLICY_ALLOWS_ACTION ←, INVOKES / STREAMS_TO, INVOKES / STREAMS_TO ←, LOGS_TO / LOGS_TO, LOGS_TO / LOGS_TO ←
• Edges out:
  ASSUMES_ROLE / RUNS_ON → IAM_ROLE
INVOKES / STREAMS_TO → CLOUD_ACCOUNT, LAMBDA_FUNCTION
LOGS_TO / LOGS_TO → DATA_WAREHOUSE, GCS_BUCKET, LOG_GROUP, S3_BUCKET
• Edges in:
  CONTAINS ← CLOUD_ACCOUNT
GRANTS_ACCESS / POLICY_ALLOWS_ACTION ← CLOUD_ACCOUNT
INVOKES / STREAMS_TO ← LOG_GROUP
LOGS_TO / LOGS_TO ← VPC

PARAMETER

SSM parameter, app configuration.

Catalog entries that classify native resources as this type:

• AWS ARN: ssm:parameter
• AWS CloudFormation (Cloud Control): AWS::SSM::Parameter

• Azure ARM: microsoft.appconfiguration/configurationstores

• Providers: AWS

• Metadata keys: data_type (str), description (null), has_policies (bool), kms_key_id (str), last_modified (str), last_modified_user (str), secure (bool), service (str), tier (str), type (str), version (int)
• Declared relations: REFERENCES / ENCRYPTED_BY_KMS
• Edges in:
  REFERENCES / READS_FROM ← BUILD_PROJECT

CAPACITY_PROVIDER

Catalog entries that classify native resources as this type:

• AWS ARN: ecs:capacity-provider

• AWS CloudFormation (Cloud Control): AWS::ECS::CapacityProvider

• Providers: AWS

• Metadata keys: clusters (list), managed_draining (null), managed_scaling (str), managed_termination_protection (null), service (str), status (str), target_capacity (int), type (null), vpc_config (null)
• Declared relations: MANAGES / SCALES_WITH, REFERENCES / SCALES_WITH ←
• Edges out:
  MANAGES / SCALES_WITH → AUTOSCALING_GROUP
• Edges in:
  REFERENCES / SCALES_WITH ← ECS_CLUSTER

SERVICE_REGISTRY

Cloud Map namespace / service.

Catalog entries that classify native resources as this type:

• AWS ARN: servicediscovery:namespace, servicediscovery:service

Not exercised by the fixtures. Produced by collectors or catalogs for resources the test estates do not contain; carries the common keys above plus collector-specific fields.

EVENT_ARCHIVE

Catalog entries that classify native resources as this type:

• AWS ARN: events:archive

• Providers: AWS

• Metadata keys: event_count (int), event_source (str), kind (str), retention_days (int), service (str), size_bytes (int), state (str)
• Declared relations: REFERENCES / READS_FROM
• Edges out:
  REFERENCES / READS_FROM → EVENT_BUS

RUNBOOK

SSM document, automation runbook.

Catalog entries that classify native resources as this type:

• AWS ARN: ssm:document

• Providers: AWS

• Metadata keys: document_format (str), document_type (str), document_version (str), kind (str), platform_types (list), public (bool), service (str), shared_with_accounts (list), target_type (null)
• Declared relations: GRANTS_ACCESS / POLICY_ALLOWS_ACTION ←
• Edges in:
  GRANTS_ACCESS / POLICY_ALLOWS_ACTION ← CLOUD_ACCOUNT
REFERENCES / DEPENDS_ON ← SCHEDULE

SOURCE_CONNECTION

CodeConnections / CodeStar connection.

Catalog entries that classify native resources as this type:

• AWS ARN: codeconnections:connection, codestar-connections:connection

• Providers: AWS

• Metadata keys: cross_account (bool), kind (str), owner_account_id (str), provider_type (str), service (str), status (str)
• Carries aliases: yes
• Edges in:
  REFERENCES / READS_FROM ← CI_PIPELINE

LB_LISTENER

Catalog entries that classify native resources as this type:

• AWS ARN: elasticloadbalancing:listener

• Providers: AWS

• Can be internet-exposed: yes (is_internet_exposed observed true)
• Metadata keys: alpn_policy (list), auth_types (list), authenticated (bool), default_actions (list), lb_type (str), load_balancer (str), mutual_tls_mode (null), port (int), protocol (str), redirects_to_https (bool), resource_kind (str), rule_count (int), rules (list), scheme (str), ssl_policy (str), target_groups (list)
• Declared relations: CONTAINS ←, ROUTE / SERVES_TRAFFIC_TO
• Edges out:
  ROUTE / SERVES_TRAFFIC_TO → TARGET_GROUP
• Edges in:
  CONTAINS ← LOAD_BALANCER

AUTHORIZER

API Gateway authorizer.

• Providers: AWS
• Metadata keys: api_id (str), api_type (str), auth_type (null), authorizer_type (str), identity_source (null | str), jwt_audience_count (int), jwt_issuer (null | str), resource_kind (str), result_ttl (int | null), route_count (int), routes (list)
• Declared relations: INVOKES / INVOKES, REFERENCES / DEPENDS_ON, REFERENCES / DEPENDS_ON ←
• Edges out:
  INVOKES / INVOKES → LAMBDA_FUNCTION
• Edges in:
  REFERENCES / DEPENDS_ON ← API_GATEWAY

EDGE_FUNCTION

CloudFront Function, Lambda@Edge association.

Catalog entries that classify native resources as this type:

• AWS ARN: cloudfront:function

Not exercised by the fixtures. Produced by collectors or catalogs for resources the test estates do not contain; carries the common keys above plus collector-specific fields.