Multi-cloud honesty

Service coverage

Every individual service across Azure, AWS, GCP, Kubernetes, identity systems, and hybrid connectivity — with a fully / partially / planned / not-supported grade per capability. We do not pretend coverage we haven't built. See the guide.

Executive Engineer Architect

Cloud:all azure aws gcp kubernetes saas onprem

Status:all Production-quality Common case covered Synthesised from adjacent data Planned Not in scope

Enhanced by:all wiz dynatrace datadog crowdstrike veracode

Legend:●Production-quality◐Common case covered◔Synthesised from adjacent data○Planned✕Not in scope

Service	Cloud	Disc	Inv	Topo	Sec	Net	IAM	Obs	$	Recs	Notes
Compute Engine gcp.compute.gce	gcp	◐	◐	○	○	✕	○	○	◐	○
GKE gcp.compute.gke	gcp	◐	◐	○	○	✕	○	○	◐	◐	gcpGkeNetworking playbook for control-plane + nodepool posture.
Cloud Run gcp.compute.cloudrun	gcp	◐	◐	○	○	✕	○	○	◐	○
Cloud Functions gcp.compute.functions	gcp	◐	◐	○	○	✕	○	○	◐	◐	gcpCloudFunctionIngress playbook checks ingress posture.
App Engine gcp.compute.appengine	gcp	◐	◐	○	○	✕	○	○	◐	○
GCP Batch gcp.compute.batch	gcp	◐	◐	○	○	✕	○	○	◐	○
VPC gcp.network.vpc	gcp	◐	◐	○	○	✕	○	○	◐	○
Subnetwork gcp.network.subnet	gcp	◐	◐	○	○	✕	○	○	◐	○
Firewall Rule gcp.network.firewall	gcp	◐	◐	○	○	✕	○	○	◐	○
Routes gcp.network.routes	gcp	◐	◐	○	○	✕	○	○	◐	○
Cloud NAT gcp.network.cloudnat	gcp	◐	◐	○	○	✕	○	○	◐	○
Cloud Load Balancing gcp.network.lb	gcp	◐	◐	○	○	✕	○	○	◐	○
Cloud CDN gcp.network.cdn	gcp	◐	◐	○	○	✕	○	○	◐	○
Private Service Connect gcp.network.psc	gcp	◐	◐	○	○	✕	○	○	◐	○
Cloud DNS gcp.network.dns	gcp	◐	◐	○	○	✕	○	○	◐	○
Cloud Armor gcp.network.cloudarmor	gcp	◐	◐	○	○	✕	○	○	◐	○
Interconnect gcp.network.interconnect	gcp	◐	◐	○	○	✕	○	○	◐	○
Cloud VPN gcp.network.vpn	gcp	◐	◐	○	○	✕	○	○	◐	○
Cloud Storage gcp.storage.gcs	gcp	◐	◐	○	○	✕	○	○	◐	◐	gcpCloudStoragePublicAccess playbook detects publicly-accessible buckets.
Persistent Disk gcp.storage.disk	gcp	◐	◐	○	○	✕	○	○	◐	○
Filestore gcp.storage.filestore	gcp	◐	◐	○	○	✕	○	○	◐	○
Cloud SQL gcp.db.cloudsql	gcp	◐	◐	○	○	✕	○	○	◐	◐	gcpCloudSqlPublic playbook detects publicly-accessible instances.
Spanner gcp.db.spanner	gcp	◐	◐	○	○	✕	○	○	◐	○
Firestore gcp.db.firestore	gcp	◐	◐	○	○	✕	○	○	◐	○
Bigtable gcp.db.bigtable	gcp	◐	◐	○	○	✕	○	○	◐	○
AlloyDB gcp.db.alloydb	gcp	◐	◐	○	○	✕	○	○	◐	○
Memorystore gcp.db.memorystore	gcp	◐	◐	○	○	✕	○	○	◐	○
Cloud IAM gcp.identity.iam	gcp	◐	◐	○	○	✕	◐	○	◐	○
Identity-Aware Proxy gcp.identity.iap	gcp	◐	◐	○	○	✕	○	○	◐	○
Secret Manager gcp.identity.secretmanager	gcp	◐	◐	○	○	✕	○	○	◐	○
Cloud KMS gcp.identity.kms	gcp	◐	◐	○	○	✕	○	○	◐	○
Cloud Identity gcp.identity.cloudidentity	gcp	◐	◐	○	○	✕	○	○	◐	○
Security Command Center gcp.security.scc	gcp	◐	◐	○	◐	✕	○	○	◐	○
Binary Authorization gcp.security.binaryauth	gcp	◐	◐	○	○	✕	○	○	◐	○
Access Context Manager gcp.security.accesscontext	gcp	◐	◐	○	○	✕	○	○	◐	○
VPC Service Controls gcp.security.vpcsc	gcp	◐	◐	○	○	✕	○	○	◐	○
Chronicle gcp.security.chronicle	gcp	◐	◐	○	○	✕	○	○	◐	○
Cloud Logging gcp.obs.logging	gcp	◐	◐	○	○	✕	○	◐	◐	○
Cloud Monitoring gcp.obs.monitoring	gcp	◐	◐	○	○	✕	○	◐	◐	○
Cloud Trace gcp.obs.trace	gcp	◐	◐	○	○	✕	○	○	◐	○
Error Reporting gcp.obs.errorrep	gcp	◐	◐	○	○	✕	○	○	◐	○
BigQuery gcp.analytics.bigquery	gcp	◐	◐	○	○	✕	○	○	◐	○
Dataflow gcp.analytics.dataflow	gcp	◐	◐	○	○	✕	○	○	◐	○
Dataproc gcp.analytics.dataproc	gcp	◐	◐	○	○	✕	○	○	◐	○
Pub/Sub gcp.integration.pubsub	gcp	◐	◐	○	○	✕	○	○	◐	○
Cloud Tasks gcp.integration.cloudtasks	gcp	◐	◐	○	○	✕	○	○	◐	○
Workflows gcp.integration.workflows	gcp	◐	◐	○	○	✕	○	○	◐	○
Eventarc gcp.integration.eventarc	gcp	◐	◐	○	○	✕	○	○	◐	○
Cloud Endpoints gcp.integration.endpoints	gcp	◐	◐	○	○	✕	○	○	◐	○
Organization gcp.mgmt.org	gcp	◐	◐	○	○	✕	○	○	◐	○	gcpOrgHierarchy playbook walks org→folder→project tree.
Folder gcp.mgmt.folder	gcp	◐	◐	○	○	✕	○	○	◐	○
Project gcp.mgmt.project	gcp	◐	◐	○	○	✕	○	○	◐	○
Marketplace gcp.mgmt.marketplace	gcp	◐	◐	○	○	✕	○	○	◐	○

Read-only and advisory by design — we never modify cloud resources. The grades describe what we can observe, not what we can change.