Multi-cloud honesty

Service coverage

Every individual service across Azure, AWS, GCP, Kubernetes, identity systems, and hybrid connectivity — with a fully / partially / planned / not-supported grade per capability. We do not pretend coverage we haven't built. See the guide.

Executive Engineer Architect

Cloud:all azure aws gcp kubernetes saas onprem

Status:all Production-quality Common case covered Synthesised from adjacent data Planned Not in scope

Enhanced by:all wiz dynatrace datadog crowdstrike veracode

◐
Azure Virtual Machinesazure.compute.virtualmachines· computeCommon case covered
Supported: discovery · inventory · topology · posture · network · identity · observability · cost · recommendations
NIC → Subnet → NSG join is native. Process telemetry is partial via Defender for Servers; full process tree needs CrowdStrike/Dynatrace agent.
◐
Azure App Serviceazure.compute.appservice· computeCommon case covered
Supported: discovery · inventory · topology · posture · network · identity · observability · cost · recommendations
App Service Plan + VNet integration is native. Application-level dependency calls need App Insights instrumentation.
○
Application Insightsazure.obs.appinsights· observabilityPlanned
Supported: discovery · inventory · posture · identity · observability · cost
Trace data only if the app is instrumented. Service map from App Insights is partial; full topology benefits from Dynatrace/Datadog.

Read-only and advisory by design — we never modify cloud resources. The grades describe what we can observe, not what we can change.