Compute fabric

Per-type reference · From docs/INVENTORY_CATALOG.md on GitHub

AUTOSCALING_GROUP

Catalog entries that classify native resources as this type:

• AWS ARN: autoscaling:autoScalingGroup
• Azure ARM: microsoft.compute/virtualmachinescalesets

• GCP Cloud Asset Inventory: compute.googleapis.com/InstanceGroup, compute.googleapis.com/InstanceGroupManager, compute.googleapis.com/RegionInstanceGroup, compute.googleapis.com/RegionInstanceGroupManager

• Providers: AWS, AZURE, GCP

• Metadata keys: capacity (null), collected_via (str), create_time (null), description (null), folders (list), gcp_asset_type (str), kind (null), location (str), named_ports (list), network_tags (list), organization (str), parent_asset_type (null), parent_full_resource_name (str), project (str), project_id (str), project_number (str), properties (object), resource_group (str), resource_type (str), size (str), sku (null), state (null)
• Carries aliases: yes
• Declared relations: CONTAINS ←, MANAGES / SCALES_WITH, REFERENCES / DEPENDS_ON
• Edges out:
  MANAGES / SCALES_WITH → AUTOSCALING_GROUP
• Edges in:
  CONTAINS ← CLOUD_ACCOUNT, RESOURCE_GROUP
INVOKES / SCALES_WITH ← ALARM
LOAD_BALANCER_TARGET / LB_TARGETS_INSTANCE ← LOAD_BALANCER
MANAGES ← APP_SERVICE, DEPLOYMENT_GROUP
MANAGES / SCALES_WITH ← AUTOSCALING_GROUP, CAPACITY_PROVIDER, NODE_GROUP
MONITORS / MONITORED_BY ← ALARM

LAUNCH_TEMPLATE

Catalog entries that classify native resources as this type:

• AWS ARN: ec2:launch-template

• GCP Cloud Asset Inventory: compute.googleapis.com/InstanceTemplate, compute.googleapis.com/RegionInstanceTemplate

• Providers: AWS

• Metadata keys: image_id (str), imdsv2_required (bool), instance_type (str), latest_version (int), launch_template_id (str), security_groups (list)
• Carries aliases: yes
• Declared relations: ASSUMES_ROLE / RUNS_ON
• Edges out:
  ASSUMES_ROLE / RUNS_ON → INSTANCE_PROFILE
ATTACHED_TO / PROTECTED_BY_SG → SECURITY_GROUP

TARGET_GROUP

Catalog entries that classify native resources as this type:

• AWS ARN: elasticloadbalancing:targetgroup

• GCP Cloud Asset Inventory: compute.googleapis.com/GlobalNetworkEndpointGroup, compute.googleapis.com/NetworkEndpointGroup, compute.googleapis.com/RegionNetworkEndpointGroup, compute.googleapis.com/TargetInstance, compute.googleapis.com/TargetPool

• Providers: AWS, GCP

• Metadata keys: create_time (null), description (null), folders (list), gcp_asset_type (str), location (str), network_endpoint_type (str), network_tags (list), organization (str), parent_asset_type (null), parent_full_resource_name (str), port (int), project (str), project_id (str), project_number (str), protocol (str), state (null), target_type (str), targets (list), vpc_id (str)
• Carries aliases: yes
• Declared relations: LOAD_BALANCER_TARGET / LB_TARGETS_INSTANCE, LOAD_BALANCER_TARGET / LOAD_BALANCED_BY ←, LOAD_BALANCER_TARGET / SERVES_TRAFFIC_TO
• Edges out:
  LOAD_BALANCER_TARGET / LB_TARGETS_INSTANCE → EC2
LOAD_BALANCER_TARGET / SERVES_TRAFFIC_TO → CONTAINER_SERVICE
REFERENCES → VPC
• Edges in:
  CONTAINS ← CLOUD_ACCOUNT
LOAD_BALANCER_TARGET / LB_TARGETS_INSTANCE ← LOAD_BALANCER
LOAD_BALANCER_TARGET / LOAD_BALANCED_BY ← LOAD_BALANCER
MANAGES ← DEPLOYMENT_GROUP
ROUTE / SERVES_TRAFFIC_TO ← LB_LISTENER

API_GATEWAY

Catalog entries that classify native resources as this type:

• AWS ARN: apigateway:apis, apigateway:restapis
• AWS CloudFormation (Cloud Control): AWS::AppSync::GraphQLApi
• Azure ARM: microsoft.apimanagement/service

• GCP Cloud Asset Inventory: apigateway.googleapis.com/Api, apigateway.googleapis.com/Gateway

• Providers: AWS

• Can be internet-exposed: yes (is_internet_exposed observed true)
• Metadata keys: api_id (str), api_type (str), default_endpoint_disabled (bool), endpoint (str), endpoint_types (list), integrations (list), stages (list), unauthenticated_methods (int)
• Carries aliases: yes
• Edges out:
  REFERENCES / DEPENDS_ON → AUTHORIZER
• Edges in:
  ROUTE / SERVES_TRAFFIC_TO ← CUSTOM_DOMAIN

VPC_ENDPOINT

Catalog entries that classify native resources as this type:

• AWS ARN: ec2:vpc-endpoint

• Azure ARM: microsoft.network/privateendpoints

• Providers: AZURE

• Metadata keys: collected_via (str), fqdns (list), kind (null), network_interfaces (list), private_link_targets (list), properties (object), resource_group (str), resource_type (str), sku (null), subnet_id (str)
• Declared relations: CONTAINS ←, REFERENCES / DEPENDS_ON
• Edges out:
  REFERENCES / DEPENDS_ON → BLOB_STORAGE
• Edges in:
  CONTAINS ← RESOURCE_GROUP
CONTAINS / SUBNET_CONTAINS_INSTANCE ← SUBNET

INSTANCE_PROFILE

Catalog entries that classify native resources as this type:

• AWS ARN: iam:instance-profile

• Providers: AWS

• Metadata keys: instance_profile_id (str)
• Declared relations: ASSUMES_ROLE / RUNS_ON
• Edges out:
  ASSUMES_ROLE / RUNS_ON → IAM_ROLE
• Edges in:
  ASSUMES_ROLE / RUNS_ON ← LAUNCH_TEMPLATE
REFERENCES / RUNS_ON ← APP_SERVICE

IDENTITY_PROVIDER

Catalog entries that classify native resources as this type:

• AWS ARN: iam:oidc-provider, iam:saml-provider

• GCP Cloud Asset Inventory: iam.googleapis.com/WorkforcePool, iam.googleapis.com/WorkforcePoolProvider, iam.googleapis.com/WorkloadIdentityPool, iam.googleapis.com/WorkloadIdentityPoolProvider

• Providers: AWS, GCP

• Also discovered via: iam_policy
• Metadata keys: acm_pca_arn (null), created (null | str), discovered_via (str), enabled (bool), group_count (int), home_region (str), identity_center_managed (bool), identity_pool (str), identity_store_id (str), member (str), owner_account_id (null | str), permission_set_count (int), placeholder (bool), principal_type (str), provider_type (str), source_type (str), status (str), trust_anchor_id (str), user_count (int), valid_until (str)
• Carries aliases: yes
• Declared relations: REFERENCES / DEPENDS_ON
• Edges out:
  CONTAINS → IDENTITY_GROUP, IDENTITY_USER, PERMISSION_SET
GRANTS_ACCESS / POLICY_ALLOWS_ACTION → CONTAINER_SERVICE
IAM_TRUST / ROLE_ASSUMES_ROLE → IAM_ROLE, PERMISSION_SET
REFERENCES / DEPENDS_ON → CLOUD_ACCOUNT