Skip to content

Logging

Per-type reference · From docs/INVENTORY_CATALOG.md on GitHub

CLOUDTRAIL

Catalog entries that classify native resources as this type:

  • AWS ARN: cloudtrail:trail

  • Providers: AWS

  • Metadata keys: enabled (bool), log_destination (str), note (str), security_service (str), status (str)
  • Carries aliases: yes
  • Edges out:
    REFERENCES → S3_BUCKET

FLOW_LOG

Catalog entries that classify native resources as this type:

  • AWS ARN: ec2:vpc-flow-log

  • Azure ARM: microsoft.network/networkwatchers/flowlogs

  • Providers: AWS

  • Metadata keys: destination_type (str), flow_log_id (str), monitored_resource (str), status (str), traffic_type (str)
  • Declared relations: ASSUMES_ROLE / RUNS_ON, LOGS_TO / LOGS_TO, MONITORS / MONITORED_BY
  • Edges out:
    ASSUMES_ROLE / RUNS_ON → IAM_ROLE
    LOGS_TO / LOGS_TO → LOG_GROUP
    MONITORS / MONITORED_BY → VPC

LOG_GROUP

Catalog entries that classify native resources as this type:

  • AWS ARN: logs:log-group
  • Azure ARM: microsoft.insights/components, microsoft.operationalinsights/workspaces

  • GCP Cloud Asset Inventory: logging.googleapis.com/LogBucket

  • Providers: AWS, AZURE

  • Metadata keys: collected_via (str), customer_id (str), kind (null), kms_key_id (null), log_class (null), properties (object), resource_group (str), resource_type (str), retention_days (null), sku (null), stored_bytes (int)
  • Carries aliases: yes
  • Declared relations: CONTAINS ←
  • Edges out:
    INVOKES / STREAMS_TO → LOG_SINK
  • Edges in:
    CONTAINS ← RESOURCE_GROUP
    LOGS_TO / LOGS_TO ← AKS_CLUSTER, FLOW_LOG, LAMBDA_FUNCTION, LOG_SINK