Cloud Resources Schema Reference

CSM Misconfigurations is not available in the selected site.

The following resource types are available within Resource catalog for filtering. See custom rules in CSM Misconfigurations for more information.

AWS

Review detailed information about AWS resource types in the following pages.

aws_account more more
aws_account_attributes more more
aws_acm more more
aws_ami more more
aws_analyzer more more
aws_apigateway_stage more more
aws_autoscaling_group more more
aws_cloudfront_distribution more more
aws_cloudtrail_trail more more
aws_cloudwatch_metric_alarm more more
aws_cognito_identity_pool more more
aws_cognito_user_pool more more
aws_config_recorder more more
aws_config_recorder_status more more
aws_docdb_cluster more more
aws_dynamodb more more
aws_ebs_default_encryption more more
aws_ebs_snapshot more more
aws_ebs_volume more more
aws_ec2_instance more more
aws_ec2_region more more
aws_ecr_repository more more
aws_ecs_service more more
aws_ecs_task_definition more more
aws_eks_cluster more more
aws_elasticache more more
aws_elasticsearch_domain more more
aws_elb_load_balancer more more
aws_elbv2_load_balancer more more
aws_iam_access_key_metadata more more
aws_iam_account more more
aws_iam_credential_report more more
aws_iam_group_inline_policy more more
aws_iam_instance_profile more more
aws_iam_policy more more
aws_iam_role more more
aws_iam_role_inline_policy more more
aws_iam_server_certificate more more
aws_iam_user more more
aws_iam_user_inline_policy more more
aws_iam_virtual_mfa_device more more
aws_kms more more
aws_kms_alias more more
aws_lambda_event_source_mapping more more
aws_lambda_function more more
aws_metric_filter more more
aws_network_acl more more
aws_rds_cluster more more
aws_rds_db_snapshot more more
aws_rds_instance more more
aws_redshift_cluster more more
aws_route53_domain more more
aws_route53_hosted_zone more more
aws_route53_resource_record_set more more
aws_route_table more more
aws_s3_account_public_access_block more more
aws_s3_bucket more more
aws_security_group more more
aws_securityhub_hub more more
aws_sns_topic more more
aws_sqs_queue more more
aws_subnet more more
aws_transit_gateway more more
aws_verified_access_endpoint more more
aws_verified_access_group more more
aws_verified_access_instance more more
aws_verified_access_trust_provider more more
aws_vpc more more
aws_vpc_endpoint more more
aws_vpc_flow_log more more
aws_vpc_nat_gateway more more
aws_wafv2_acl more more
aws_wafv2_ip_set more more
aws_wafv2_regex_pattern_set more more
aws_wafv2_rule_group more more
rel_aws_iam_group_to_iam_policy more more
rel_aws_iam_role_to_iam_policy more more
rel_aws_wafv2_acl_to_elbv2_load_balancer more more

AZURE

Review detailed information about Azure resource types in the following pages.

azure_aks_cluster more more
azure_app_service more more
azure_automation_account more more
azure_container_apps more more
azure_container_registry more more
azure_diagnostic_setting more more
azure_key_vault more more
azure_key_vault_key more more
azure_key_vault_secret more more
azure_load_balancer_probe more more
azure_log_analytics_storage_insight more more
azure_log_analytics_workspace more more
azure_managed_disk more more
azure_mysql_flexible_server more more
azure_mysql_flexible_server_configuration more more
azure_mysql_server more more
azure_network_interface more more
azure_network_public_ip_address more more
azure_network_subnet more more
azure_network_vnet more more
azure_network_vnet_peering more more
azure_network_watcher more more
azure_policy_assignment more more
azure_postgresql_firewall_rule more more
azure_postgresql_server more more
azure_resource_tags more more
azure_role_assignment more more
azure_role_definition more more
azure_security_center_auto_provisioning more more
azure_security_contact more more
azure_security_group more more
azure_sql_firewall_rule more more
azure_sql_server more more
azure_sql_server_database more more
azure_storage_account more more
azure_storage_account_queue_service more more
azure_storage_account_table_service more more
azure_storage_blob_container more more
azure_subscription more more
azure_virtual_machine_instance more more

GCP

Review detailed information about Google Cloud resource types in the following pages.

gcp_bigquery_dataset more more
gcp_bigquery_table more more
gcp_cloudfunctions_function more more
gcp_compute_disk more more
gcp_compute_external_vpn_gateway more more
gcp_compute_firewall more more
gcp_compute_forwarding_rule more more
gcp_compute_global_forwarding_rule more more
gcp_compute_instance more more
gcp_compute_network more more
gcp_compute_project more more
gcp_compute_route more more
gcp_compute_router more more
gcp_compute_ssl_policy more more
gcp_compute_subnetwork more more
gcp_compute_target_http_proxy more more
gcp_compute_target_https_proxy more more
gcp_compute_target_ssl_proxy more more
gcp_compute_target_vpn_gateway more more
gcp_compute_vpn_gateway more more
gcp_compute_vpn_tunnel more more
gcp_dataproc_cluster more more
gcp_dns_managed_zone more more
gcp_dns_policy more more
gcp_folder more more
gcp_iam_policy more more
gcp_iam_role more more
gcp_iam_service_account more more
gcp_iam_service_account_key more more
gcp_kms_crypto_key more more
gcp_kms_keyring more more
gcp_logging_log_bucket more more
gcp_logging_log_metric more more
gcp_logging_log_sink more more
gcp_monitoring_alert_policy more more
gcp_organization more more
gcp_project more more
gcp_sql_database_instance more more
gcp_storage_bucket more more