Integration / messaging

Per-type reference · From docs/INVENTORY_CATALOG.md on GitHub

MESSAGE_QUEUE

Catalog entries that classify native resources as this type:

• AWS ARN: sqs
• Azure ARM: microsoft.servicebus/namespaces

• GCP Cloud Asset Inventory: cloudtasks.googleapis.com/Queue, pubsub.googleapis.com/Subscription

• Providers: AWS, GCP

• Metadata keys: create_time (null), dead_letter_target (null | str), delivery (str), description (null), fifo (bool), folders (list), gcp_asset_type (str), kms_key_id (null | str), location (str), network_tags (list), organization (str), parent_asset_type (null), parent_full_resource_name (str), policy_allows_public (bool), project (str), project_id (str), project_number (str), push_endpoint_host (str), queue_url (str), sse_sqs (bool), state (null), visibility_timeout (str)
• Carries aliases: yes
• Declared relations: ASSUMES_ROLE / RUNS_ON, INVOKES / INVOKES, INVOKES / STREAMS_TO ←, REFERENCES / ENCRYPTED_BY_KMS, REFERENCES / WRITES_TO
• Edges out:
  ASSUMES_ROLE / RUNS_ON → SERVICE_PRINCIPAL
INVOKES → LAMBDA_FUNCTION
INVOKES / INVOKES → CONTAINER_SERVICE
INVOKES / TRIGGERED_BY → EVENT_PIPE, LAMBDA_FUNCTION
REFERENCES / ENCRYPTED_BY_KMS → KMS_KEY
REFERENCES / WRITES_TO → MESSAGE_QUEUE
• Edges in:
  CONTAINS ← CLOUD_ACCOUNT
GRANTS_ACCESS / POLICY_ALLOWS_ACTION ← IAM_ROLE
INVOKES / INVOKES ← S3_BUCKET
INVOKES / STREAMS_TO ← NOTIFICATION_TOPIC
REFERENCES ← OTHER
REFERENCES / DEPENDS_ON ← LAMBDA_FUNCTION
REFERENCES / WRITES_TO ← MESSAGE_QUEUE, SCHEDULE

NOTIFICATION_TOPIC

Catalog entries that classify native resources as this type:

• AWS ARN: sns
• Azure ARM: microsoft.eventgrid/systemtopics, microsoft.eventgrid/topics, microsoft.insights/actiongroups

• GCP Cloud Asset Inventory: pubsub.googleapis.com/Topic

• Providers: AWS, GCP

• Also discovered via: tagging-api
• Metadata keys: create_time (null), description (null), discovered_via (str), fifo (bool), folders (list), gcp_asset_type (str), kms_key_id (null), location (str), network_tags (list), organization (str), parent_asset_type (null), parent_full_resource_name (str), policy_allows_public (bool), project (str), project_id (str), project_number (str), state (null), subscriptions_by_protocol (object)
• Carries aliases: yes
• Declared relations: INVOKES, INVOKES / STREAMS_TO
• Edges out:
  INVOKES / STREAMS_TO → MESSAGE_QUEUE
INVOKES / TRIGGERED_BY → LAMBDA_FUNCTION
• Edges in:
  CONTAINS ← CLOUD_ACCOUNT
INVOKES / INVOKES ← ALARM, DEPLOYMENT_GROUP

EVENT_BUS

Catalog entries that classify native resources as this type:

• AWS ARN: events:event-bus
• Azure ARM: microsoft.eventgrid/domains, microsoft.eventgrid/namespaces

• GCP Cloud Asset Inventory: eventarc.googleapis.com/Channel

• Providers: AWS

• Metadata keys: policy_allows_public (bool)
• Edges out:
  CONTAINS → EVENT_RULE
• Edges in:
  REFERENCES / READS_FROM ← EVENT_ARCHIVE

EVENT_RULE

Catalog entries that classify native resources as this type:

• AWS ARN: events:rule, glue:trigger
• Azure ARM: microsoft.eventgrid/systemtopics/eventsubscriptions, microsoft.eventgrid/topics/eventsubscriptions, microsoft.security/automations

• GCP Cloud Asset Inventory: eventarc.googleapis.com/Trigger

• Providers: AWS

• Metadata keys: event_bus (str), event_pattern (null | str), kind (str), managed_by (null | str), schedule (null | str), service (str), state (str), targets (list), trigger_type (str), workflow (null)
• Declared relations: CONTAINS ←, INVOKES, INVOKES / INVOKES
• Edges out:
  INVOKES → LAMBDA_FUNCTION
INVOKES / INVOKES → ETL_JOB, LAMBDA_FUNCTION
• Edges in:
  CONTAINS ← EVENT_BUS

STATE_MACHINE

Catalog entries that classify native resources as this type:

• AWS ARN: states:stateMachine
• Azure ARM: microsoft.logic/workflows

• GCP Cloud Asset Inventory: workflows.googleapis.com/Workflow

• Providers: AWS

• Also discovered via: cloud-control
• Metadata keys: discovered_via (str), identifier (str), properties (object), resource_type (str), service (str)

DATA_STREAM

Catalog entries that classify native resources as this type:

• AWS ARN: kinesis:stream
• Azure ARM: microsoft.eventhub/namespaces

• GCP Cloud Asset Inventory: managedkafka.googleapis.com/Topic

• Providers: AWS

• Metadata keys: consumers (null), encryption (str), kms_key_id (null), mode (str), shards (int), status (str)
• Edges out:
  INVOKES / TRIGGERED_BY → DELIVERY_STREAM
• Edges in:
  REFERENCES / STREAMS_TO ← DYNAMODB_TABLE