Supported AWS resource types
Several AWS resource types are imported as CMDB data by the Service Graph Connector for AWS.
AWS Config resources
When the AWS Config aggregator is enabled, the following APIs are invoked:
When the AWS Config aggregator is disabled, the following APIs are invoked:
Note: For a list of AWS resource types supported by AWS Config, see Supported Resource Types on the AWS documentation site.
| CMDB CI classes | AWS resource type | AWS Config resource identifier |
|---|---|---|
| Cloud Network \[cmdb\_ci\_network\] | Amazon VPC | AWS::EC2::VPC |
| Cloud Subnet \[cmdb\_ci\_cloud\_subnet\] | Amazon subnet | AWS::EC2::Subnet |
| Cloud Mgmt Network Interface \[cmdb\_ci\_nic\] | Amazon Elastic network interface | AWS::EC2::NetworkInterface |
| Compute Security Group \[cmdb\_ci\_compute\_security\_group\] | Amazon EC2 security group | AWS::EC2::SecurityGroup |
| Storage Volume \[cmdb\_ci\_storage\_volume\] | Amazon EBS volume | AWS::EC2::Volume |
| Cloud Load Balancer \[cmdb\_ci\_cloud\_load\_balancer\] | Classic load balancer | AWS::ElasticLoadBalancing::LoadBalancer |
| Cloud Load Balancer \[cmdb\_ci\_cloud\_load\_balancer\] | Application load balancer, network load balancer, or gateway load balancer | AWS::ElasticLoadBalancingV2::LoadBalancer |
| Cloud Gateway \[cmdb\_ci\_cloud\_gateway\] | API gateway with WebSocket APIs or HTTP APIs | AWS::ApiGatewayV2::Api |
| Virtual Machine Instance \[cmdb\_ci\_vm\_instance\] | Amazon EC2 instance | AWS::EC2::Instance |
| Server \[cmdb\_ci\_server\] | Amazon EC2 instance | AWS::EC2::Instance |
| Cloud DataBase \[cmdb\_ci\_cloud\_database\] | Amazon RDS DB instance | AWS::RDS::DBInstance |
| Cloud Function \[cmdb\_ci\_cloud\_function\] | Lambda function | AWS::Lambda::Function |
| Cloud Object Storage \[cmdb\_ci\_cloud\_object\_storage\] | Amazon S3 bucket | AWS::S3::Bucket |
| DynamoDB Table \[cmdb\_ci\_dynamodb\_table\] | DynamoDB table | AWS::DynamoDB::Table |
| Software \[cmdb\_ci\_spkg\] | Software configuration for managed instances | AWS::SSM::ManagedInstanceInventory |
| Kubernetes Cluster \[cmdb\_ci\_kubernetes\_cluster\] | Amazon EKS cluster | AWS::EKS::Cluster |
| Amazon Redshift \[cmdb\_ci\_aws\_redshift\] | Amazon Redshift | AWS::Redshift::Cluster |
Amazon EC2 resources
| CMDB CI classes | AWS resource type | AWS API action |
|---|---|---|
| Availability Zone \[cmdb\_ci\_availability\_zone\] | AWS availability zone | None |
| Hardware Type \[cmdb\_ci\_compute\_template\] | Amazon EC2 instance types | DescribeInstanceTypes |
| Image \[cmdb\_ci\_os\_template\] | Amazon Machine Image \(AMI\) | DescribeImages |
| Cloud Image \[cmdb\_ci\_cloud\_os\_image\] | Amazon Machine Image \(AMI\) | DescribeImages |
| Cloud Hardware Type \[cmdb\_ci\_cloud\_hardware\_type\] | Amazon EC2 instance types | DescribeInstanceTypes |
AWS Systems Manager resources
All AWS Systems Manager resources invoke the SendCommand API action.
| CMDB CI classes | AWS resource type | AWS API action |
|---|---|---|
| Running Process \[cmdb\_running\_process\] | Running process in EC2 instances | SendCommand |
| TCP Connections \[cmdb\_tcp\] | TCP connections in EC2 instances | |
| Kubernetes Node \[cmdb\_ci\_kubernetes\_node\] | Amazon EKS node | |
| Kubernetes Pod \[cmdb\_ci\_kubernetes\_pod\] | Amazon EKS pod | |
| Kubernetes Service \[cmdb\_ci\_kubernetes\_service\] | Amazon EKS service | |
| Kubernetes DaemonSet \[cmdb\_ci\_kubernetes\_daemonset\] | Kubernetes DaemonSet | |
| Kubernetes Namespace \[cmdb\_ci\_kubernetes\_namespace\] | Kubernetes namespace | |
| Kubernetes Deployment \[cmdb\_ci\_kubernetes\_deployment\] | Kubernetes deployment | |
| Docker Container \[cmdb\_ci\_docker\_container\] | Docker container | |
| Kubernetes Volume \[cmdb\_ci\_kubernetes\_volume\] | Kubernetes Volume |
Organizations resources
| CMDB CI classes | AWS resource type | AWS API action |
|---|---|---|
| Cloud Organizations \[cmdb\_ci\_cloud\_org\] | AWS Organizations | DescribeOrganization |
| Cloud Service Account \[cmdb\_ci\_cloud\_service\_account\] | AWS accounts | ListAccounts |
| AWS Datacenter \[cmdb\_ci\_aws\_datacenter\] | AWS regions | DescribeRegions |
Resource Group Tagging resources
| CMDB classes | AWS resource type | AWS API action |
|---|---|---|
| Key Value \[cmdb\_key\_value\] | Tags for AWS Lambda, Amazon DynamoDB, ELBv1, and ELBv2 | GetResources |
Generic resources
Generic resources are stored in the Cloud Resource [cmdb_ci_cmp_resource] CMDB CI class.
| CMDB CI class | AWS resource type | AWS API action |
|---|---|---|
| Cloud Resource \[cmdb\_ci\_cmp\_resource\] | State Manager association compliance | AWS::SSM::AssociationCompliance |
| Database subnet group | AWS::RDS::DBSubnetGroup | |
| AWS WAF rate based rule | AWS::WAF::RateBasedRule | |
| AWS WAF regional rule group | AWS::WAFRegional::RuleGroup | |
| AWS WAF regional rate based rule | AWS::WAFRegional::RateBasedRule | |
| Managed policies and inline policies | AWS::IAM::Policy | |
| AWS WAF Web ACL rule | AWS::WAF::WebACL | |
| AWS WAF Regional Web ACL rule | AWS::WAFRegional::WebACL | |
| AWS Certificate Manager \(ACM\) certificate | AWS::ACM::Certificate | |
| Amazon EC2 Auto Scaling group | AWS::AutoScaling::AutoScalingGroup | |
| IAM user for AWS account | AWS::IAM::User | |
| Amazon Redshift event subscription | AWS::Redshift::EventSubscription | |
| Amazon RDS DB snapshot | AWS::RDS::DBSnapshot | |
| Amazon Redshift cluster parameter group | AWS::Redshift::ClusterParameterGroup | |
| Amazon EC2 Auto Scaling group launch configuration | AWS::AutoScaling::LaunchConfiguration | |
| Amazon Redshift cluster snapshot | AWS::Redshift::ClusterSnapshot | |
| AWS CloudFormation stack | AWS::CloudFormation::Stack | |
| AWS CodeBuild project | AWS::CodeBuild::Project | |
| AWS Elastic Beanstalk application version | AWS::ElasticBeanstalk::ApplicationVersion | |
| AWS CodePipeline pipeline | AWS::CodePipeline::Pipeline | |
| Amazon Redshift security group | AWS::Redshift::ClusterSecurityGroup | |
| Amazon CloudFront distribution | AWS::CloudFront::Distribution | |
| AWS CloudTrail trail | AWS::CloudTrail::Trail | |
| Amazon CloudFront streaming distribution | AWS::CloudFront::StreamingDistribution | |
| AWS WAF rule group | AWS::WAF::RuleGroup | |
| Amazon RDS DB security group | AWS::RDS::DBSecurityGroup | |
| Amazon RDS event subscription | AWS::RDS::EventSubscription | |
| AWS WAF regional rule | AWS::WAFRegional::Rule | |
| AWS WAF rule | AWS::WAF::Rule | |
| IAM role for AWS account | AWS::IAM::Role | |
| Amazon EC2 Auto Scaling scheduled action | AWS::AutoScaling::ScheduledAction | |
| AWS Elastic Beanstalk environment | AWS::ElasticBeanstalk::Environment | |
| AWS Redshift cluster | AWS::Redshift::Cluster | |
| Amazon EC2 Auto Scaling group scaling policy | AWS::AutoScaling::ScalingPolicy | |
| AWS Shield protected AWS resource | AWS::Shield::Protection | |
| Amazon CloudWatch alarm | AWS::CloudWatch::Alarm | |
| EncryptionConfig - AWS X-Ray | AWS::XRay::EncryptionConfig | |
| AWS Shield protected AWS region | AWS::ShieldRegional::Protection | |
| Amazon Redshift subnet group | AWS::Redshift::ClusterSubnetGroup | |
| AWS Elastic Beanstalk application | AWS::ElasticBeanstalk::Application | |
| IAM group for AWS account | AWS::IAM::Group |
Parent Topic:Service Graph Connector for AWS reference