VinTekh
Multi-cloud honesty

Service coverage

Every individual service across Azure, AWS, GCP, Kubernetes, identity systems, and hybrid connectivity — with a fully / partially / planned / not-supported grade per capability. We do not pretend coverage we haven't built. See the guide.

ExecutiveEngineerArchitect
Cloud:allazureawsgcpkubernetessaasonprem
Status:allProduction-qualityCommon case coveredSynthesised from adjacent dataPlannedNot in scope
Enhanced by:allwizdynatracedatadogcrowdstrikeveracode
  • ◐
    Azure Virtual Machinesazure.compute.virtualmachines· computeCommon case covered
    Supported: discovery · inventory · topology · posture · network · identity · observability · cost · recommendations
    NIC → Subnet → NSG join is native. Process telemetry is partial via Defender for Servers; full process tree needs CrowdStrike/Dynatrace agent.
  • ◐
    Azure Kubernetes Service (AKS)azure.compute.aks· computeCommon case covered
    Supported: discovery · inventory · topology · posture · network · identity · observability · cost · recommendations
    Cluster surface + nodepool config is native. In-cluster object inventory (Pods, Services, NetworkPolicies) needs the Kubernetes connector with kubeconfig.
  • ◐
    Storage Accountazure.storage.account· storageCommon case covered
    Supported: discovery · inventory · topology · posture · network · identity · observability · cost · recommendations
    Public network access + firewall rules + PE attachments visible. Data-plane scans (blob malware, sensitive data) need Defender for Storage; DSPM classification adds with Wiz.
  • ○
    Microsoft Entra IDazure.identity.entraid· identityPlanned
    Supported: discovery · inventory · posture · identity · observability · cost · recommendations
    Users, groups, app regs, service principals, role assignments via Graph + ARM RBAC.
  • ○
    Microsoft Defender for Cloudazure.security.defender· securityPlanned
    Supported: discovery · inventory · posture · identity · observability · cost · recommendations
    Findings + secure score + plans. Defender for Servers/Containers/Storage/SQL all surface via assessments.
  • ○
    Azure Container Registryazure.devops.acr· devopsPlanned
    Supported: discovery · inventory · posture · identity · observability · cost

Read-only and advisory by design — we never modify cloud resources. The grades describe what we can observe, not what we can change.