Skip to content

Data services

Per-type reference · From docs/INVENTORY_CATALOG.md on GitHub

CACHE_CLUSTER

Catalog entries that classify native resources as this type:

  • AWS ARN: dax:cache, elasticache:cluster, elasticache:replicationgroup, elasticache:serverlesscache, memorydb:cluster
  • AWS CloudFormation (Cloud Control): AWS::DAX::Cluster, AWS::MemoryDB::Cluster
  • Azure ARM: microsoft.cache/redis, microsoft.cache/redisenterprise

  • GCP Cloud Asset Inventory: memcache.googleapis.com/Instance, redis.googleapis.com/Cluster, redis.googleapis.com/Instance

  • Providers: AWS

  • Metadata keys: acl (str), endpoint (null | str), endpoint_encryption (str), engine (null), engine_version (str), kms_key_id (null), node_type (str), nodes (int), security_groups (list), service (str), shards (int), sse (str), status (str), subnet_group (str), tls_enabled (bool), vpc_id (null | str)
  • Carries aliases: yes
  • Declared relations: ASSUMES_ROLE / RUNS_ON, CONTAINS / SUBNET_CONTAINS_INSTANCE ←
  • Edges out:
    ASSUMES_ROLE / RUNS_ON → IAM_ROLE
    ATTACHED_TO / PROTECTED_BY_SG → SECURITY_GROUP
  • Edges in:
    CONTAINS / SUBNET_CONTAINS_INSTANCE ← SUBNET

SEARCH_DOMAIN

Catalog entries that classify native resources as this type:

  • AWS ARN: aoss:collection, es:domain
  • AWS CloudFormation (Cloud Control): AWS::OpenSearchServerless::Collection

  • Azure ARM: microsoft.search/searchservices

  • Providers: AWS

  • Can be internet-exposed: yes (is_internet_exposed observed true)
  • Metadata keys: aws_owned_key (bool), collection_id (str), dashboard_endpoint (null), endpoint (null), kms_key_id (null), network_policies (list), public_access (list), service (str), source_vpc_endpoints (list), standby_replicas (null), status (null), type (null)
  • Carries aliases: yes
  • Declared relations: GRANTS_ACCESS / POLICY_ALLOWS_ACTION ←
  • Edges in:
    GRANTS_ACCESS / POLICY_ALLOWS_ACTION ← IAM_ROLE
    REFERENCES / READS_FROM ← KNOWLEDGE_BASE

DATA_WAREHOUSE

Catalog entries that classify native resources as this type:

  • AWS ARN: redshift-serverless:namespace, redshift-serverless:workgroup, redshift:cluster
  • AWS CloudFormation (Cloud Control): AWS::RedshiftServerless::Workgroup, AWS::Timestream::Database
  • Azure ARM: microsoft.kusto/clusters, microsoft.synapse/workspaces

  • GCP Cloud Asset Inventory: bigquery.googleapis.com/Dataset

  • Providers: AWS, GCP

  • Can be internet-exposed: yes (is_internet_exposed observed true)
  • Metadata keys: access_entry_count (int), base_capacity (null), create_time (null), custom_domain (null), db_name (null), description (null), endpoint (str), enhanced_vpc_routing (null), folders (list), gcp_asset_type (str), iam_roles (list), kind (str), kms_key_id (null), location (str), log_exports (list), namespace (str), namespace_id (str), network_tags (list), organization (str), parent_asset_type (null), parent_full_resource_name (str), project (str), project_id (str), project_number (str), publicly_accessible (bool), security_groups (list), service (str), state (null), status (null), vpc_endpoints (list), workgroup_id (str)
  • Carries aliases: yes
  • Declared relations: ASSUMES_ROLE / RUNS_ON, CONTAINS / SUBNET_CONTAINS_INSTANCE ←, REFERENCES / DEPENDS_ON
  • Edges out:
    ASSUMES_ROLE / RUNS_ON → IAM_ROLE
    ATTACHED_TO / PROTECTED_BY_SG → SECURITY_GROUP
    REFERENCES / DEPENDS_ON → DATA_WAREHOUSE
  • Edges in:
    CONTAINS ← CLOUD_ACCOUNT
    CONTAINS / SUBNET_CONTAINS_INSTANCE ← SUBNET
    LOGS_TO / LOGS_TO ← LOG_SINK
    REFERENCES / DEPENDS_ON ← DATA_WAREHOUSE

FILE_SYSTEM

Catalog entries that classify native resources as this type:

  • AWS ARN: elasticfilesystem:file-system, fsx:file-system
  • AWS CloudFormation (Cloud Control): AWS::FSx::FileSystem
  • Azure ARM: microsoft.netapp/netappaccounts, microsoft.storage/storageaccounts/fileservices

  • GCP Cloud Asset Inventory: file.googleapis.com/Instance

  • Providers: AWS

  • Metadata keys: active_directory_id (null), deployment_type (str), dns_name (str), file_system_id (str), file_system_type (str), kms_key_id (null), lifecycle (null), security_groups (list), self_managed_ad_domain (null), service (str), storage_capacity_gb (int), vpc_id (null)
  • Carries aliases: yes
  • Declared relations: CONTAINS / SUBNET_CONTAINS_INSTANCE ←
  • Edges in:
    CONTAINS / SUBNET_CONTAINS_INSTANCE ← SUBNET