Multi-cloud honesty

Service coverage

Every individual service across Azure, AWS, GCP, Kubernetes, identity systems, and hybrid connectivity — with a fully / partially / planned / not-supported grade per capability. We do not pretend coverage we haven't built. See the guide.

Executive Engineer Architect

Cloud:all azure aws gcp kubernetes saas onprem

Status:all Production-quality Common case covered Synthesised from adjacent data Planned Not in scope

Enhanced by:all wiz dynatrace datadog crowdstrike veracode

◐
Azure Virtual Machinesazure.compute.virtualmachines· computeCommon case covered
Supported: discovery · inventory · topology · posture · network · identity · observability · cost · recommendations
NIC → Subnet → NSG join is native. Process telemetry is partial via Defender for Servers; full process tree needs CrowdStrike/Dynatrace agent.
○
VM Scale Setsazure.compute.vmss· computePlanned
Supported: discovery · inventory · topology · posture · network · identity · observability · cost
◐
Azure Kubernetes Service (AKS)azure.compute.aks· computeCommon case covered
Supported: discovery · inventory · topology · posture · network · identity · observability · cost · recommendations
Cluster surface + nodepool config is native. In-cluster object inventory (Pods, Services, NetworkPolicies) needs the Kubernetes connector with kubeconfig.
○
Azure Container Appsazure.compute.containerapps· computePlanned
Supported: discovery · inventory · topology · posture · network · identity · observability · cost
○
Azure Container Instancesazure.compute.aci· computePlanned
Supported: discovery · inventory · posture · identity · observability · cost
◐
Azure App Serviceazure.compute.appservice· computeCommon case covered
Supported: discovery · inventory · topology · posture · network · identity · observability · cost · recommendations
App Service Plan + VNet integration is native. Application-level dependency calls need App Insights instrumentation.
○
Azure Functionsazure.compute.functions· computePlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Azure Batchazure.compute.batch· computePlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Managed Disksazure.compute.disks· computePlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Azure Spring Appsazure.compute.springapps· computePlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Service Fabricazure.compute.servicefabric· computePlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Virtual Networkazure.network.vnet· networkingPlanned
Supported: discovery · inventory · topology · posture · network · identity · observability · cost
◐
Network Security Groupazure.network.nsg· networkingCommon case covered
Supported: discovery · inventory · topology · posture · network · identity · observability · cost · recommendations
Rule-set and attachments are native. Effective rules per NIC need Network Watcher (have stub, deepening in tranche 2).
○
Network Interfaceazure.network.nic· networkingPlanned
Supported: discovery · inventory · topology · posture · network · identity · observability · cost
○
Public IPazure.network.publicip· networkingPlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Load Balancerazure.network.lb· networkingPlanned
Supported: discovery · inventory · topology · posture · network · identity · observability · cost
○
Application Gatewayazure.network.appgw· networkingPlanned
Supported: discovery · inventory · topology · posture · network · identity · observability · cost
○
Azure Front Doorazure.network.frontdoor· networkingPlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Azure CDNazure.network.cdn· networkingPlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Private Linkazure.network.privatelink· networkingPlanned
Supported: discovery · inventory · topology · posture · network · identity · observability · cost
◐
Private Endpointazure.network.privateendpoint· networkingCommon case covered
Supported: discovery · inventory · topology · posture · network · identity · observability · cost · recommendations
PE→target depends_on join is native. Private DNS chain validation has a playbook (privateEndpointImpact).
○
Private DNS Zoneazure.network.privatedns· networkingPlanned
Supported: discovery · inventory · topology · posture · identity · observability · cost
○
Azure DNSazure.network.publicdns· networkingPlanned
Supported: discovery · inventory · posture · identity · observability · cost
◐
ExpressRouteazure.network.expressroute· hybridCommon case covered
Supported: discovery · inventory · topology · posture · identity · observability · cost · recommendations
Circuit + peering visible. Has a hybridConnectivity playbook for chain validation.
○
VPN Gatewayazure.network.vpngateway· hybridPlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Azure Firewallazure.network.firewall· networkingPlanned
Supported: discovery · inventory · topology · posture · network · identity · observability · cost
○
Virtual WANazure.network.virtualwan· hybridPlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Route Table / UDRazure.network.routetable· networkingPlanned
Supported: discovery · inventory · topology · posture · identity · observability · cost
○
Network Watcherazure.network.networkwatcher· observabilityPlanned
Supported: discovery · inventory · posture · identity · observability · cost
Flow logs + topology snapshots + IP flow verify. Used as evidence source by NSG playbooks.
○
Azure Bastionazure.network.bastion· securityPlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
DDoS Protectionazure.network.ddos· securityPlanned
Supported: discovery · inventory · posture · identity · observability · cost
◐
Storage Accountazure.storage.account· storageCommon case covered
Supported: discovery · inventory · topology · posture · network · identity · observability · cost · recommendations
Public network access + firewall rules + PE attachments visible. Data-plane scans (blob malware, sensitive data) need Defender for Storage; DSPM classification adds with Wiz.
○
Azure NetApp Filesazure.storage.netapp· storagePlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Data Box Edgeazure.storage.databoxedge· storagePlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Azure SQL Databaseazure.db.sqlserver· databasePlanned
Supported: discovery · inventory · posture · network · identity · observability · cost
○
SQL Managed Instanceazure.db.sqlmi· databasePlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Azure Database for PostgreSQLazure.db.postgres· databasePlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Azure Database for MySQLazure.db.mysql· databasePlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Azure Database for MariaDBazure.db.mariadb· databasePlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Azure Cosmos DBazure.db.cosmos· databasePlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Azure Cache for Redisazure.db.redis· databasePlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Azure Synapse Analyticsazure.db.synapse· analyticsPlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Azure Data Explorerazure.db.kusto· analyticsPlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Azure AI Searchazure.db.search· ai_mlPlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Microsoft Entra IDazure.identity.entraid· identityPlanned
Supported: discovery · inventory · posture · identity · observability · cost · recommendations
Users, groups, app regs, service principals, role assignments via Graph + ARM RBAC.
○
User-Assigned Managed Identityazure.identity.uami· identityPlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Privileged Identity Managementazure.identity.pim· identityPlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Azure AD B2Cazure.identity.b2c· identityPlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Azure Key Vaultazure.identity.keyvault· securityPlanned
Supported: discovery · inventory · posture · network · identity · observability · cost
○
Microsoft Defender for Cloudazure.security.defender· securityPlanned
Supported: discovery · inventory · posture · identity · observability · cost · recommendations
Findings + secure score + plans. Defender for Servers/Containers/Storage/SQL all surface via assessments.
○
Microsoft Sentinelazure.security.sentinel· securityPlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Azure Policyazure.security.policy· managementPlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
App Configurationazure.security.appconfig· managementPlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Application Gateway WAF v2azure.security.appgateway_waf· securityPlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Front Door WAFazure.security.frontdoor_waf· securityPlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Azure OpenAIazure.ai.openai· ai_mlPlanned
Supported: discovery · inventory · posture · network · identity · observability · cost
○
Cognitive Servicesazure.ai.cognitiveservices· ai_mlPlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Azure Machine Learningazure.ai.ml· ai_mlPlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Azure Bot Serviceazure.ai.bot· ai_mlPlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Azure Monitorazure.obs.monitor· observabilityPlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Log Analyticsazure.obs.loganalytics· observabilityPlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Application Insightsazure.obs.appinsights· observabilityPlanned
Supported: discovery · inventory · posture · identity · observability · cost
Trace data only if the app is instrumented. Service map from App Insights is partial; full topology benefits from Dynatrace/Datadog.
○
Activity Logazure.obs.activitylog· observabilityPlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Azure Service Healthazure.obs.servicehealth· observabilityPlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Azure DevOpsazure.devops.devops· devopsPlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Azure Container Registryazure.devops.acr· devopsPlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Service Busazure.integration.servicebus· integrationPlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Event Hubsazure.integration.eventhub· integrationPlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Event Gridazure.integration.eventgrid· integrationPlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Logic Appsazure.integration.logicapps· integrationPlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
API Managementazure.integration.apim· integrationPlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Notification Hubsazure.integration.notificationhubs· integrationPlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Azure Relayazure.integration.relay· integrationPlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Azure Resource Managerazure.mgmt.arm· managementPlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Azure Policyazure.mgmt.policy· managementPlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Blueprints (legacy)azure.mgmt.blueprints· managementPlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Cost Managementazure.mgmt.cost· managementPlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Automation Accountazure.mgmt.automation· managementPlanned
Supported: discovery · inventory · posture · identity · observability · cost · recommendations
Has a deep playbook (automationHybridWorker) for hybrid worker + module CVE analysis.
○
Azure Arcazure.mgmt.arc· hybridPlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Azure Lighthouseazure.mgmt.lighthouse· managementPlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Azure Advisorazure.mgmt.advisor· managementPlanned
Supported: discovery · inventory · posture · identity · observability · cost · recommendations
○
Resource Graphazure.mgmt.resourcegraph· managementPlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
IoT Hubazure.iot.hub· iot_edgePlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
IoT Centralazure.iot.central· iot_edgePlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Azure Digital Twinsazure.iot.digitaltwins· iot_edgePlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Device Provisioning Serviceazure.iot.dps· iot_edgePlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Azure Sphereazure.iot.sphere· iot_edgePlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Azure Communication Servicesazure.media.acs· mediaPlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Azure Mapsazure.media.maps· mediaPlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Recovery Services Vaultazure.migration.recoveryvault· migrationPlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Azure Migrateazure.migration.databoxedge· migrationPlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Database Migration Serviceazure.migration.dms· migrationPlanned
Supported: discovery · inventory · posture · identity · observability · cost
○
Podk8s.workload.pod· computePlanned
Supported: discovery · inventory · topology · posture · network · identity · observability
○
Deploymentk8s.workload.deployment· computePlanned
Supported: discovery · inventory · topology · posture · network · identity · observability
○
StatefulSetk8s.workload.statefulset· computePlanned
Supported: discovery · inventory · topology · posture · network · identity · observability
○
DaemonSetk8s.workload.daemonset· computePlanned
Supported: discovery · inventory · topology · posture · network · identity · observability
○
Jobk8s.workload.job· computePlanned
Supported: discovery · inventory · topology · posture · network · identity · observability
○
CronJobk8s.workload.cronjob· computePlanned
Supported: discovery · inventory · topology · posture · network · identity · observability
○
ReplicaSetk8s.workload.rs· computePlanned
Supported: discovery · inventory · topology · posture · network · identity · observability
○
ConfigMapk8s.config.configmap· computePlanned
Supported: discovery · inventory · topology · posture · network · identity · observability
○
Secretk8s.config.secret· computePlanned
Supported: discovery · inventory · topology · posture · network · identity · observability
○
Servicek8s.net.service· networkingPlanned
Supported: discovery · inventory · topology · posture · network · identity · observability
○
Ingressk8s.net.ingress· networkingPlanned
Supported: discovery · inventory · topology · posture · network · identity · observability
○
NetworkPolicyk8s.net.netpol· networkingPlanned
Supported: discovery · inventory · topology · posture · network · identity · observability
○
Endpointsk8s.net.endpoint· networkingPlanned
Supported: discovery · inventory · topology · posture · network · identity · observability
○
EndpointSlicek8s.net.endpointslice· networkingPlanned
Supported: discovery · inventory · topology · posture · network · identity · observability
○
Rolek8s.rbac.role· identityPlanned
Supported: discovery · inventory · topology · posture · network · identity · observability
○
ClusterRolek8s.rbac.clusterrole· identityPlanned
Supported: discovery · inventory · topology · posture · network · identity · observability
○
RoleBindingk8s.rbac.rb· identityPlanned
Supported: discovery · inventory · topology · posture · network · identity · observability
○
ClusterRoleBindingk8s.rbac.crb· identityPlanned
Supported: discovery · inventory · topology · posture · network · identity · observability
○
ServiceAccountk8s.rbac.sa· identityPlanned
Supported: discovery · inventory · topology · posture · network · identity · observability
○
PodSecurityAdmissionk8s.policy.psp· securityPlanned
Supported: discovery · inventory · topology · posture · network · identity · observability
○
Namespacek8s.namespace· computePlanned
Supported: discovery · inventory · topology · posture · network · identity · observability
○
Nodek8s.node· computePlanned
Supported: discovery · inventory · topology · posture · network · identity · observability
○
PersistentVolumek8s.storage.pv· computePlanned
Supported: discovery · inventory · topology · posture · network · identity · observability
○
PersistentVolumeClaimk8s.storage.pvc· computePlanned
Supported: discovery · inventory · topology · posture · network · identity · observability
○
StorageClassk8s.storage.sc· computePlanned
Supported: discovery · inventory · topology · posture · network · identity · observability
○
HorizontalPodAutoscalerk8s.autoscaling.hpa· computePlanned
Supported: discovery · inventory · topology · posture · network · identity · observability
○
VerticalPodAutoscalerk8s.autoscaling.vpa· computePlanned
Supported: discovery · inventory · topology · posture · network · identity · observability
○
CustomResourceDefinitionk8s.crd· computePlanned
Supported: discovery · inventory · topology · posture · network · identity · observability

Read-only and advisory by design — we never modify cloud resources. The grades describe what we can observe, not what we can change.