ops0ops0

Supported Resources

Complete reference of the cloud resources supported by ops0 Discovery across AWS, GCP, Azure, and Oracle Cloud.

Coverage Summary

202
Total Resources
77
AWS
62
GCP
63
Azure

Capability Legend

Each capability column is read independently. The cell value tells you whether that capability is available for the listed resource.

Cell ValueMeaning
YesCapability is available for that resource
-Capability is not currently available

Capability Coverage

CapabilityAWSGCPAzureTotal
Discovery77 (100%)62 (100%)63 (100%)202
Enrichment58 (75%)32 (52%)25 (40%)115
Drift Detection68 (88%)50 (81%)57 (90%)175
IaC Creation65 (84%)52 (84%)52 (83%)169

AWS (Amazon Web Services)

Compute Services

ServiceResource TypeDiscoveryEnrichmentDriftIaC Gen
EC2InstanceYesYesYesYes
EC2Volume (EBS)YesYesYesYes
EC2SnapshotYesYesYesYes
EC2Launch TemplateYes-YesYes
Auto ScalingAuto Scaling GroupYesYesYesYes

Networking Services

ServiceResource TypeDiscoveryEnrichmentDriftIaC Gen
VPCVPCYesYesYesYes
VPCSubnetYesYesYesYes
VPCSecurity GroupYesYesYesYes
VPCNetwork ACLYes-YesYes
VPCRoute TableYesYesYesYes
VPCNAT GatewayYesYesYesYes
VPCInternet GatewayYesYesYesYes
VPCVPN GatewayYes-YesYes
VPCVPC EndpointYesYesYesYes
VPCTransit GatewayYesYesYesYes
VPCTransit Gateway AttachmentYes-YesYes
VPCVPC Peering ConnectionYesYes-Yes

Load Balancing Services

ServiceResource TypeDiscoveryEnrichmentDriftIaC Gen
ELB v2Application Load BalancerYesYesYesYes
ELB v2Network Load BalancerYesYesYesYes
ELB v2Target GroupYes-YesYes
ELB v2ListenerYes-YesYes
ELB ClassicClassic Load BalancerYesYes-Yes

Storage Services

ServiceResource TypeDiscoveryEnrichmentDriftIaC Gen
S3BucketYesYesYesYes
EFSFile SystemYesYesYesYes
DynamoDBTableYesYesYesYes

Database Services

ServiceResource TypeDiscoveryEnrichmentDriftIaC Gen
RDSDB InstanceYesYesYesYes
RDSAurora ClusterYesYesYesYes
RDSCluster InstanceYes--Yes
RDSCluster EndpointYes--Yes
ElastiCacheClusterYesYesYesYes
ElastiCacheReplication GroupYes-YesYes
RedshiftClusterYesYes-Yes

Container Services

ServiceResource TypeDiscoveryEnrichmentDriftIaC Gen
ECSClusterYesYesYesYes
ECSServiceYesYesYesYes
ECSTask DefinitionYes-YesYes
EKSClusterYesYesYesYes
EKSNode GroupYes-YesYes
ECRRepositoryYesYesYesYes

Serverless Services

ServiceResource TypeDiscoveryEnrichmentDriftIaC Gen
LambdaFunctionYesYesYesYes
LambdaLayer VersionYes--Yes
API GatewayREST APIYesYesYesYes
API GatewayStageYes-YesYes
API Gateway v2HTTP APIYesYesYes-
Step FunctionsState MachineYesYesYesYes

Security & Identity Services

ServiceResource TypeDiscoveryEnrichmentDriftIaC Gen
IAMRoleYesYesYesYes
IAMPolicyYesYesYesYes
IAMUserYesYesYes-
IAMGroupYesYesYes-
IAMInstance ProfileYes-Yes-
KMSKeyYesYesYesYes
Secrets ManagerSecretYesYesYesYes
ACMCertificateYesYesYesYes
WAF v2Web ACLYesYesYesYes
CognitoUser PoolYesYesYesYes

Messaging Services

ServiceResource TypeDiscoveryEnrichmentDriftIaC Gen
SQSQueueYesYesYesYes
SNSTopicYesYesYesYes
SNSSubscriptionYes-YesYes
KinesisData StreamYesYesYesYes
KinesisFirehose Delivery StreamYesYesYesYes
EventBridgeRuleYesYesYesYes
EventBridgeEvent BusYesYesYesYes

DNS & CDN Services

ServiceResource TypeDiscoveryEnrichmentDriftIaC Gen
Route 53Hosted ZoneYesYesYesYes
Route 53RecordYes-YesYes
CloudFrontDistributionYesYesYesYes

Analytics Services

ServiceResource TypeDiscoveryEnrichmentDriftIaC Gen
GlueDatabaseYesYesYesYes
GlueCrawlerYesYesYesYes
GlueJobYesYesYesYes
OpenSearchDomainYesYesYesYes
AthenaWorkgroupYesYesYesYes

Monitoring & Backup Services

ServiceResource TypeDiscoveryEnrichmentDriftIaC Gen
CloudWatchLog GroupYesYesYesYes
CloudWatchAlarmYesYesYesYes
CloudFormationStackYesYesYesYes
BackupVaultYesYesYesYes
BackupPlanYesYesYesYes
SageMakerEndpointYesYesYesYes
SageMakerModelYesYesYesYes
SageMakerNotebook InstanceYesYesYesYes

Security & Compliance Services

ServiceResource TypeDiscoveryEnrichmentDriftIaC Gen
CloudTrailTrailYesYes*--
ConfigRuleYesYes*--
GuardDutyDetectorYesYes*--

Other AWS Services

ServiceResource TypeDiscoveryEnrichmentDriftIaC Gen
AppSyncGraphQL APIYesYes*--
SSMParameterYesYes*--

* Enrichment requires additional AWS SDK packages


GCP (Google Cloud Platform)

Compute Services

ServiceResource TypeDiscoveryEnrichmentDriftIaC Gen
Compute EngineInstanceYesYesYesYes
Compute EngineDiskYesYesYesYes
Compute EngineInstance TemplateYesYesYesYes
Compute EngineInstance Group ManagerYesYesYesYes
Compute EngineRegional Instance GroupYes-YesYes

Networking Services

ServiceResource TypeDiscoveryEnrichmentDriftIaC Gen
VPCNetworkYesYes-Yes
VPCSubnetworkYesYes-Yes
VPCFirewall RuleYesYesYesYes
VPCAddressYes-Yes-
Cloud RouterRouterYesYesYesYes
Cloud RouterNATYes-YesYes

Load Balancing Services

ServiceResource TypeDiscoveryEnrichmentDriftIaC Gen
Backend ServiceBackend ServiceYesYesYesYes
Backend BucketBackend BucketYesYesYesYes
URL MapURL MapYesYesYesYes
HTTP(S) ProxyTarget HTTP ProxyYes-YesYes
HTTP(S) ProxyTarget HTTPS ProxyYes-YesYes
Health CheckHealth CheckYes-YesYes
Forwarding RuleForwarding RuleYes-YesYes

Storage Services

ServiceResource TypeDiscoveryEnrichmentDriftIaC Gen
Cloud StorageBucketYesYesYesYes

Database Services

ServiceResource TypeDiscoveryEnrichmentDriftIaC Gen
Cloud SQLInstanceYesYesYesYes
Cloud SQLDatabaseYes-YesYes
BigtableInstanceYesYesYesYes
BigtableTableYes-Yes-
Cloud SpannerInstanceYes--Yes
Cloud SpannerDatabaseYes--Yes
MemorystoreRedis InstanceYesYesYesYes
MemorystoreMemcached InstanceYes-Yes-

Container Services

ServiceResource TypeDiscoveryEnrichmentDriftIaC Gen
GKEClusterYesYesYesYes
GKENode PoolYesYesYesYes
Artifact RegistryRepositoryYesYesYesYes

Serverless Services

ServiceResource TypeDiscoveryEnrichmentDriftIaC Gen
Cloud FunctionsFunctionYesYesYesYes
Cloud RunServiceYesYesYesYes
Cloud RunJobYesYesYesYes

Messaging Services

ServiceResource TypeDiscoveryEnrichmentDriftIaC Gen
Pub/SubTopicYesYesYesYes
Pub/SubSubscriptionYesYesYesYes
EventarcTriggerYes--Yes
EventarcChannelYes--Yes

Security & Identity Services

ServiceResource TypeDiscoveryEnrichmentDriftIaC Gen
IAMService AccountYes-YesYes
IAMProject IAM BindingYesYesYesYes
IAMProject IAM MemberYes--Yes
KMSKey RingYes-YesYes
KMSCrypto KeyYes-YesYes
Secret ManagerSecretYes-YesYes
Cloud ArmorSecurity PolicyYesYes--

DNS Services

ServiceResource TypeDiscoveryEnrichmentDriftIaC Gen
Cloud DNSManaged ZoneYesYesYesYes
Cloud DNSRecord SetYes-YesYes
Cloud DNSPolicyYes-YesYes

Analytics & Big Data Services

ServiceResource TypeDiscoveryEnrichmentDriftIaC Gen
BigQueryDatasetYes-YesYes
BigQueryTableYes-Yes-
DataflowJobYesYes-Yes
DataprocClusterYes--Yes

Monitoring Services

ServiceResource TypeDiscoveryEnrichmentDriftIaC Gen
Cloud LoggingSinkYes-YesYes
Cloud MonitoringAlert PolicyYes-YesYes

API Gateway Services

ServiceResource TypeDiscoveryEnrichmentDriftIaC Gen
API GatewayGatewayYesYesYesYes
API GatewayAPIYes-YesYes
API GatewayAPI ConfigYes-YesYes

App Engine Services

ServiceResource TypeDiscoveryEnrichmentDriftIaC Gen
App EngineApplicationYes--Yes
App EngineStandard VersionYes--Yes
App EngineFlexible VersionYes--Yes
App EngineService Split TrafficYes--Yes
App EngineFirewall RuleYes--Yes

NoSQL Services

ServiceResource TypeDiscoveryEnrichmentDriftIaC Gen
FirestoreDatabaseYes-Yes-
FirestoreIndexYes-Yes-

Azure (Microsoft Azure)

Compute Services

ServiceResource TypeDiscoveryEnrichmentDriftIaC Gen
Virtual MachinesLinux VMYesYesYesYes
Virtual MachinesWindows VMYesYesYesYes
Virtual MachinesVM Scale SetYesYesYesYes
Managed DisksDiskYesYesYesYes
Managed DisksSnapshotYesYes-Yes
Availability SetAvailability SetYes-YesYes

Networking Services

ServiceResource TypeDiscoveryEnrichmentDriftIaC Gen
Virtual NetworkVNetYesYesYesYes
Virtual NetworkSubnetYesYesYesYes
Network SecurityNetwork Security GroupYesYesYesYes
Network InterfaceNICYes-YesYes
Public IPPublic IP AddressYesYesYesYes
Load BalancerLoad BalancerYesYesYesYes
Application GatewayApp GatewayYesYesYesYes
Route TableRoute TableYes-YesYes
NAT GatewayNAT GatewayYes-YesYes
VPN GatewayVPN GatewayYes--Yes

Storage Services

ServiceResource TypeDiscoveryEnrichmentDriftIaC Gen
Storage AccountStorage AccountYesYesYesYes
Storage AccountContainerYes-YesYes
Storage AccountBlobYes-YesYes

Database Services

ServiceResource TypeDiscoveryEnrichmentDriftIaC Gen
SQL DatabaseSQL ServerYesYesYesYes
SQL DatabaseSQL DatabaseYes-YesYes
Cosmos DBAccountYesYesYesYes
MySQLFlexible ServerYes--Yes
PostgreSQLFlexible ServerYes--Yes
Redis CacheRedisYesYesYesYes

Container Services

ServiceResource TypeDiscoveryEnrichmentDriftIaC Gen
AKSKubernetes ClusterYesYesYesYes
AKSNode PoolYes-Yes-
Container RegistryACRYesYesYesYes
Container AppsContainer AppYesYesYes-
Container AppsEnvironmentYes-Yes-
Container InstancesContainer GroupYes--Yes

Serverless Services

ServiceResource TypeDiscoveryEnrichmentDriftIaC Gen
App ServiceWeb AppYesYesYesYes
Function AppFunction AppYesYesYesYes

Security & Identity Services

ServiceResource TypeDiscoveryEnrichmentDriftIaC Gen
Key VaultVaultYesYesYesYes
Key VaultSecretYes-Yes-
Managed IdentityUser Assigned IdentityYes-Yes-
Role AssignmentRole AssignmentYesYesYesYes
Role DefinitionRole DefinitionYes-Yes-
WAFPolicyYesYes--

Messaging Services

ServiceResource TypeDiscoveryEnrichmentDriftIaC Gen
Service BusNamespaceYes-YesYes
Service BusQueueYes-Yes-
Service BusTopicYes-Yes-
Event HubNamespaceYesYesYesYes
Event HubEvent HubYes-Yes-
Event GridTopicYes--Yes
Event GridDomainYes--Yes

Monitoring Services

ServiceResource TypeDiscoveryEnrichmentDriftIaC Gen
Application InsightsApp InsightsYes-YesYes
Log AnalyticsWorkspaceYes-YesYes

DNS Services

ServiceResource TypeDiscoveryEnrichmentDriftIaC Gen
DNSZoneYes-YesYes
DNSA RecordYes-YesYes
DNSAAAA RecordYes--Yes
DNSCNAME RecordYes-YesYes
DNSMX RecordYes--Yes
DNSTXT RecordYes-YesYes
Private DNSZoneYes-YesYes
Private DNSVNet LinkYes-YesYes

CDN Services

ServiceResource TypeDiscoveryEnrichmentDriftIaC Gen
CDNProfileYes-YesYes
CDNEndpointYes-YesYes
Front DoorProfileYesYesYesYes
Front DoorEndpointYes--Yes
Front DoorOrigin GroupYes--Yes

Analytics Services

ServiceResource TypeDiscoveryEnrichmentDriftIaC Gen
SynapseWorkspaceYes--Yes
DatabricksWorkspaceYes--Yes
API ManagementServiceYesYesYesYes

Cross-Cloud Service Mapping

The following table shows how service categories map across cloud providers:

CategoryAWSAzureGCP
VMs/ComputeEC2Virtual MachinesCompute Engine
Auto ScalingAuto Scaling GroupsVM Scale SetsManaged Instance Groups
VPC/NetworkVPCVirtual NetworkVPC Network
FirewallsSecurity GroupsNSGFirewall Rules
Object StorageS3Blob StorageCloud Storage
SQL DatabasesRDS, AuroraAzure SQL, MySQL/PG FlexCloud SQL, Spanner
NoSQL DatabasesDynamoDB, ElastiCacheCosmosDB, Redis CacheBigtable, Memorystore
KubernetesEKSAKSGKE
Container RegistryECRACRArtifact Registry
ServerlessLambdaFunctions, App ServiceCloud Functions, Cloud Run
MessagingSQS, SNSService Bus, Event HubPub/Sub
DNSRoute 53Azure DNSCloud DNS
CDNCloudFrontAzure CDN, Front DoorCloud CDN
SecretsSecrets Manager, KMSKey VaultSecret Manager, KMS
WAFWAFWAF PolicyCloud Armor

Notes

  1. Discovery is available for all listed resources and automatically scans your cloud accounts/projects/subscriptions.

  2. Enrichment provides deep metadata including:

    • Cost estimation
    • Security posture analysis
    • Compliance checks
    • Relationship mapping
    • Performance metrics
  3. Drift Detection compares actual cloud state against:

    • Terraform state files
    • Expected IaC configurations
    • Previous discovery snapshots
  4. IaC Creation produces:

    • Terraform/OpenTofu code
    • Import blocks for existing resources
    • Module structures for organization
    • Provider configurations