Multi-cloud honesty

Service coverage

Every individual service across Azure, AWS, GCP, Kubernetes, identity systems, and hybrid connectivity — with a fully / partially / planned / not-supported grade per capability. We do not pretend coverage we haven't built. See the guide.

Executive Engineer Architect

Cloud:all azure aws gcp kubernetes saas onprem

Status:all Production-quality Common case covered Synthesised from adjacent data Planned Not in scope

Enhanced by:all wiz dynatrace datadog crowdstrike veracode

◐
Azure Virtual Machinesazure.compute.virtualmachines· computeCommon case covered
Supported: discovery · inventory · topology · posture · network · identity · observability · cost · recommendations
NIC → Subnet → NSG join is native. Process telemetry is partial via Defender for Servers; full process tree needs CrowdStrike/Dynatrace agent.
◐
Azure Kubernetes Service (AKS)azure.compute.aks· computeCommon case covered
Supported: discovery · inventory · topology · posture · network · identity · observability · cost · recommendations
Cluster surface + nodepool config is native. In-cluster object inventory (Pods, Services, NetworkPolicies) needs the Kubernetes connector with kubeconfig.
○
Microsoft Entra IDazure.identity.entraid· identityPlanned
Supported: discovery · inventory · posture · identity · observability · cost · recommendations
Users, groups, app regs, service principals, role assignments via Graph + ARM RBAC.

Read-only and advisory by design — we never modify cloud resources. The grades describe what we can observe, not what we can change.