Multi-cloud honesty

Service coverage

Every individual service across Azure, AWS, GCP, Kubernetes, identity systems, and hybrid connectivity — with a fully / partially / planned / not-supported grade per capability. We do not pretend coverage we haven't built. See the guide.

Executive Engineer Architect

Cloud:all azure aws gcp kubernetes saas onprem

Status:all Production-quality Common case covered Synthesised from adjacent data Planned Not in scope

Enhanced by:all wiz dynatrace datadog crowdstrike veracode

Legend:●Production-quality◐Common case covered◔Synthesised from adjacent data○Planned✕Not in scope

Service	Cloud	Disc	Inv	Topo	Sec	Net	IAM	Obs	$	Recs	Notes
Azure Kubernetes Service (AKS) azure.compute.aks	azure	●	●	●	◐	◐	◐	◐	●	●	Cluster surface + nodepool config is native. In-cluster object inventory (Pods, Services, NetworkPolicies) needs the Kubernetes connector with kubeconfig.
Application Insights azure.obs.appinsights	azure	●	●	○	◐	✕	◐	◐	●	○	Trace data only if the app is instrumented. Service map from App Insights is partial; full topology benefits from Dynatrace/Datadog.

Read-only and advisory by design — we never modify cloud resources. The grades describe what we can observe, not what we can change.