# Supported Resources

Source: https://docs.ops0.com/docs/discovery/supported-resources

Complete reference of the cloud resources supported by ops0 Discovery across AWS, GCP, Azure, and Oracle Cloud.

## Coverage Summary

202

Total Resources

77

AWS

62

GCP

63

Azure

## Capability Legend

Each capability column is read independently. The cell value tells you whether that capability is available for the listed resource.

| Cell Value | Meaning |
|------------|---------|
| `Yes` | Capability is available for that resource |
| `-` | Capability is not currently available |

## Capability Coverage

| Capability | AWS | GCP | Azure | Total |
|------------|----:|----:|------:|------:|
| **Discovery** | 77 (100%) | 62 (100%) | 63 (100%) | 202 |
| **Enrichment** | 58 (75%) | 32 (52%) | 25 (40%) | 115 |
| **Drift Detection** | 68 (88%) | 50 (81%) | 57 (90%) | 175 |
| **IaC Creation** | 65 (84%) | 52 (84%) | 52 (83%) | 169 |

---

## AWS (Amazon Web Services)

### Compute Services

| Service | Resource Type | Discovery | Enrichment | Drift | IaC Gen |
|---------|---------------|:---------:|:----------:|:-----:|:-------:|
| **EC2** | Instance | Yes | Yes | Yes | Yes |
| **EC2** | Volume (EBS) | Yes | Yes | Yes | Yes |
| **EC2** | Snapshot | Yes | Yes | Yes | Yes |
| **EC2** | Launch Template | Yes | - | Yes | Yes |
| **Auto Scaling** | Auto Scaling Group | Yes | Yes | Yes | Yes |

### Networking Services

| Service | Resource Type | Discovery | Enrichment | Drift | IaC Gen |
|---------|---------------|:---------:|:----------:|:-----:|:-------:|
| **VPC** | VPC | Yes | Yes | Yes | Yes |
| **VPC** | Subnet | Yes | Yes | Yes | Yes |
| **VPC** | Security Group | Yes | Yes | Yes | Yes |
| **VPC** | Network ACL | Yes | - | Yes | Yes |
| **VPC** | Route Table | Yes | Yes | Yes | Yes |
| **VPC** | NAT Gateway | Yes | Yes | Yes | Yes |
| **VPC** | Internet Gateway | Yes | Yes | Yes | Yes |
| **VPC** | VPN Gateway | Yes | - | Yes | Yes |
| **VPC** | VPC Endpoint | Yes | Yes | Yes | Yes |
| **VPC** | Transit Gateway | Yes | Yes | Yes | Yes |
| **VPC** | Transit Gateway Attachment | Yes | - | Yes | Yes |
| **VPC** | VPC Peering Connection | Yes | Yes | - | Yes |

### Load Balancing Services

| Service | Resource Type | Discovery | Enrichment | Drift | IaC Gen |
|---------|---------------|:---------:|:----------:|:-----:|:-------:|
| **ELB v2** | Application Load Balancer | Yes | Yes | Yes | Yes |
| **ELB v2** | Network Load Balancer | Yes | Yes | Yes | Yes |
| **ELB v2** | Target Group | Yes | - | Yes | Yes |
| **ELB v2** | Listener | Yes | - | Yes | Yes |
| **ELB Classic** | Classic Load Balancer | Yes | Yes | - | Yes |

### Storage Services

| Service | Resource Type | Discovery | Enrichment | Drift | IaC Gen |
|---------|---------------|:---------:|:----------:|:-----:|:-------:|
| **S3** | Bucket | Yes | Yes | Yes | Yes |
| **EFS** | File System | Yes | Yes | Yes | Yes |
| **DynamoDB** | Table | Yes | Yes | Yes | Yes |

### Database Services

| Service | Resource Type | Discovery | Enrichment | Drift | IaC Gen |
|---------|---------------|:---------:|:----------:|:-----:|:-------:|
| **RDS** | DB Instance | Yes | Yes | Yes | Yes |
| **RDS** | Aurora Cluster | Yes | Yes | Yes | Yes |
| **RDS** | Cluster Instance | Yes | - | - | Yes |
| **RDS** | Cluster Endpoint | Yes | - | - | Yes |
| **ElastiCache** | Cluster | Yes | Yes | Yes | Yes |
| **ElastiCache** | Replication Group | Yes | - | Yes | Yes |
| **Redshift** | Cluster | Yes | Yes | - | Yes |

### Container Services

| Service | Resource Type | Discovery | Enrichment | Drift | IaC Gen |
|---------|---------------|:---------:|:----------:|:-----:|:-------:|
| **ECS** | Cluster | Yes | Yes | Yes | Yes |
| **ECS** | Service | Yes | Yes | Yes | Yes |
| **ECS** | Task Definition | Yes | - | Yes | Yes |
| **EKS** | Cluster | Yes | Yes | Yes | Yes |
| **EKS** | Node Group | Yes | - | Yes | Yes |
| **ECR** | Repository | Yes | Yes | Yes | Yes |

### Serverless Services

| Service | Resource Type | Discovery | Enrichment | Drift | IaC Gen |
|---------|---------------|:---------:|:----------:|:-----:|:-------:|
| **Lambda** | Function | Yes | Yes | Yes | Yes |
| **Lambda** | Layer Version | Yes | - | - | Yes |
| **API Gateway** | REST API | Yes | Yes | Yes | Yes |
| **API Gateway** | Stage | Yes | - | Yes | Yes |
| **API Gateway v2** | HTTP API | Yes | Yes | Yes | - |
| **Step Functions** | State Machine | Yes | Yes | Yes | Yes |

### Security & Identity Services

| Service | Resource Type | Discovery | Enrichment | Drift | IaC Gen |
|---------|---------------|:---------:|:----------:|:-----:|:-------:|
| **IAM** | Role | Yes | Yes | Yes | Yes |
| **IAM** | Policy | Yes | Yes | Yes | Yes |
| **IAM** | User | Yes | Yes | Yes | - |
| **IAM** | Group | Yes | Yes | Yes | - |
| **IAM** | Instance Profile | Yes | - | Yes | - |
| **KMS** | Key | Yes | Yes | Yes | Yes |
| **Secrets Manager** | Secret | Yes | Yes | Yes | Yes |
| **ACM** | Certificate | Yes | Yes | Yes | Yes |
| **WAF v2** | Web ACL | Yes | Yes | Yes | Yes |
| **Cognito** | User Pool | Yes | Yes | Yes | Yes |

### Messaging Services

| Service | Resource Type | Discovery | Enrichment | Drift | IaC Gen |
|---------|---------------|:---------:|:----------:|:-----:|:-------:|
| **SQS** | Queue | Yes | Yes | Yes | Yes |
| **SNS** | Topic | Yes | Yes | Yes | Yes |
| **SNS** | Subscription | Yes | - | Yes | Yes |
| **Kinesis** | Data Stream | Yes | Yes | Yes | Yes |
| **Kinesis** | Firehose Delivery Stream | Yes | Yes | Yes | Yes |
| **EventBridge** | Rule | Yes | Yes | Yes | Yes |
| **EventBridge** | Event Bus | Yes | Yes | Yes | Yes |

### DNS & CDN Services

| Service | Resource Type | Discovery | Enrichment | Drift | IaC Gen |
|---------|---------------|:---------:|:----------:|:-----:|:-------:|
| **Route 53** | Hosted Zone | Yes | Yes | Yes | Yes |
| **Route 53** | Record | Yes | - | Yes | Yes |
| **CloudFront** | Distribution | Yes | Yes | Yes | Yes |

### Analytics Services

| Service | Resource Type | Discovery | Enrichment | Drift | IaC Gen |
|---------|---------------|:---------:|:----------:|:-----:|:-------:|
| **Glue** | Database | Yes | Yes | Yes | Yes |
| **Glue** | Crawler | Yes | Yes | Yes | Yes |
| **Glue** | Job | Yes | Yes | Yes | Yes |
| **OpenSearch** | Domain | Yes | Yes | Yes | Yes |
| **Athena** | Workgroup | Yes | Yes | Yes | Yes |

### Monitoring & Backup Services

| Service | Resource Type | Discovery | Enrichment | Drift | IaC Gen |
|---------|---------------|:---------:|:----------:|:-----:|:-------:|
| **CloudWatch** | Log Group | Yes | Yes | Yes | Yes |
| **CloudWatch** | Alarm | Yes | Yes | Yes | Yes |
| **CloudFormation** | Stack | Yes | Yes | Yes | Yes |
| **Backup** | Vault | Yes | Yes | Yes | Yes |
| **Backup** | Plan | Yes | Yes | Yes | Yes |
| **SageMaker** | Endpoint | Yes | Yes | Yes | Yes |
| **SageMaker** | Model | Yes | Yes | Yes | Yes |
| **SageMaker** | Notebook Instance | Yes | Yes | Yes | Yes |

### Security & Compliance Services

| Service | Resource Type | Discovery | Enrichment | Drift | IaC Gen |
|---------|---------------|:---------:|:----------:|:-----:|:-------:|
| **CloudTrail** | Trail | Yes | Yes* | - | - |
| **Config** | Rule | Yes | Yes* | - | - |
| **GuardDuty** | Detector | Yes | Yes* | - | - |

### Other AWS Services

| Service | Resource Type | Discovery | Enrichment | Drift | IaC Gen |
|---------|---------------|:---------:|:----------:|:-----:|:-------:|
| **AppSync** | GraphQL API | Yes | Yes* | - | - |
| **SSM** | Parameter | Yes | Yes* | - | - |

> *\* Enrichment requires additional AWS SDK packages*

---

## GCP (Google Cloud Platform)

### Compute Services

| Service | Resource Type | Discovery | Enrichment | Drift | IaC Gen |
|---------|---------------|:---------:|:----------:|:-----:|:-------:|
| **Compute Engine** | Instance | Yes | Yes | Yes | Yes |
| **Compute Engine** | Disk | Yes | Yes | Yes | Yes |
| **Compute Engine** | Instance Template | Yes | Yes | Yes | Yes |
| **Compute Engine** | Instance Group Manager | Yes | Yes | Yes | Yes |
| **Compute Engine** | Regional Instance Group | Yes | - | Yes | Yes |

### Networking Services

| Service | Resource Type | Discovery | Enrichment | Drift | IaC Gen |
|---------|---------------|:---------:|:----------:|:-----:|:-------:|
| **VPC** | Network | Yes | Yes | - | Yes |
| **VPC** | Subnetwork | Yes | Yes | - | Yes |
| **VPC** | Firewall Rule | Yes | Yes | Yes | Yes |
| **VPC** | Address | Yes | - | Yes | - |
| **Cloud Router** | Router | Yes | Yes | Yes | Yes |
| **Cloud Router** | NAT | Yes | - | Yes | Yes |

### Load Balancing Services

| Service | Resource Type | Discovery | Enrichment | Drift | IaC Gen |
|---------|---------------|:---------:|:----------:|:-----:|:-------:|
| **Backend Service** | Backend Service | Yes | Yes | Yes | Yes |
| **Backend Bucket** | Backend Bucket | Yes | Yes | Yes | Yes |
| **URL Map** | URL Map | Yes | Yes | Yes | Yes |
| **HTTP(S) Proxy** | Target HTTP Proxy | Yes | - | Yes | Yes |
| **HTTP(S) Proxy** | Target HTTPS Proxy | Yes | - | Yes | Yes |
| **Health Check** | Health Check | Yes | - | Yes | Yes |
| **Forwarding Rule** | Forwarding Rule | Yes | - | Yes | Yes |

### Storage Services

| Service | Resource Type | Discovery | Enrichment | Drift | IaC Gen |
|---------|---------------|:---------:|:----------:|:-----:|:-------:|
| **Cloud Storage** | Bucket | Yes | Yes | Yes | Yes |

### Database Services

| Service | Resource Type | Discovery | Enrichment | Drift | IaC Gen |
|---------|---------------|:---------:|:----------:|:-----:|:-------:|
| **Cloud SQL** | Instance | Yes | Yes | Yes | Yes |
| **Cloud SQL** | Database | Yes | - | Yes | Yes |
| **Bigtable** | Instance | Yes | Yes | Yes | Yes |
| **Bigtable** | Table | Yes | - | Yes | - |
| **Cloud Spanner** | Instance | Yes | - | - | Yes |
| **Cloud Spanner** | Database | Yes | - | - | Yes |
| **Memorystore** | Redis Instance | Yes | Yes | Yes | Yes |
| **Memorystore** | Memcached Instance | Yes | - | Yes | - |

### Container Services

| Service | Resource Type | Discovery | Enrichment | Drift | IaC Gen |
|---------|---------------|:---------:|:----------:|:-----:|:-------:|
| **GKE** | Cluster | Yes | Yes | Yes | Yes |
| **GKE** | Node Pool | Yes | Yes | Yes | Yes |
| **Artifact Registry** | Repository | Yes | Yes | Yes | Yes |

### Serverless Services

| Service | Resource Type | Discovery | Enrichment | Drift | IaC Gen |
|---------|---------------|:---------:|:----------:|:-----:|:-------:|
| **Cloud Functions** | Function | Yes | Yes | Yes | Yes |
| **Cloud Run** | Service | Yes | Yes | Yes | Yes |
| **Cloud Run** | Job | Yes | Yes | Yes | Yes |

### Messaging Services

| Service | Resource Type | Discovery | Enrichment | Drift | IaC Gen |
|---------|---------------|:---------:|:----------:|:-----:|:-------:|
| **Pub/Sub** | Topic | Yes | Yes | Yes | Yes |
| **Pub/Sub** | Subscription | Yes | Yes | Yes | Yes |
| **Eventarc** | Trigger | Yes | - | - | Yes |
| **Eventarc** | Channel | Yes | - | - | Yes |

### Security & Identity Services

| Service | Resource Type | Discovery | Enrichment | Drift | IaC Gen |
|---------|---------------|:---------:|:----------:|:-----:|:-------:|
| **IAM** | Service Account | Yes | - | Yes | Yes |
| **IAM** | Project IAM Binding | Yes | Yes | Yes | Yes |
| **IAM** | Project IAM Member | Yes | - | - | Yes |
| **KMS** | Key Ring | Yes | - | Yes | Yes |
| **KMS** | Crypto Key | Yes | - | Yes | Yes |
| **Secret Manager** | Secret | Yes | - | Yes | Yes |
| **Cloud Armor** | Security Policy | Yes | Yes | - | - |

### DNS Services

| Service | Resource Type | Discovery | Enrichment | Drift | IaC Gen |
|---------|---------------|:---------:|:----------:|:-----:|:-------:|
| **Cloud DNS** | Managed Zone | Yes | Yes | Yes | Yes |
| **Cloud DNS** | Record Set | Yes | - | Yes | Yes |
| **Cloud DNS** | Policy | Yes | - | Yes | Yes |

### Analytics & Big Data Services

| Service | Resource Type | Discovery | Enrichment | Drift | IaC Gen |
|---------|---------------|:---------:|:----------:|:-----:|:-------:|
| **BigQuery** | Dataset | Yes | - | Yes | Yes |
| **BigQuery** | Table | Yes | - | Yes | - |
| **Dataflow** | Job | Yes | Yes | - | Yes |
| **Dataproc** | Cluster | Yes | - | - | Yes |

### Monitoring Services

| Service | Resource Type | Discovery | Enrichment | Drift | IaC Gen |
|---------|---------------|:---------:|:----------:|:-----:|:-------:|
| **Cloud Logging** | Sink | Yes | - | Yes | Yes |
| **Cloud Monitoring** | Alert Policy | Yes | - | Yes | Yes |

### API Gateway Services

| Service | Resource Type | Discovery | Enrichment | Drift | IaC Gen |
|---------|---------------|:---------:|:----------:|:-----:|:-------:|
| **API Gateway** | Gateway | Yes | Yes | Yes | Yes |
| **API Gateway** | API | Yes | - | Yes | Yes |
| **API Gateway** | API Config | Yes | - | Yes | Yes |

### App Engine Services

| Service | Resource Type | Discovery | Enrichment | Drift | IaC Gen |
|---------|---------------|:---------:|:----------:|:-----:|:-------:|
| **App Engine** | Application | Yes | - | - | Yes |
| **App Engine** | Standard Version | Yes | - | - | Yes |
| **App Engine** | Flexible Version | Yes | - | - | Yes |
| **App Engine** | Service Split Traffic | Yes | - | - | Yes |
| **App Engine** | Firewall Rule | Yes | - | - | Yes |

### NoSQL Services

| Service | Resource Type | Discovery | Enrichment | Drift | IaC Gen |
|---------|---------------|:---------:|:----------:|:-----:|:-------:|
| **Firestore** | Database | Yes | - | Yes | - |
| **Firestore** | Index | Yes | - | Yes | - |

---

## Azure (Microsoft Azure)

### Compute Services

| Service | Resource Type | Discovery | Enrichment | Drift | IaC Gen |
|---------|---------------|:---------:|:----------:|:-----:|:-------:|
| **Virtual Machines** | Linux VM | Yes | Yes | Yes | Yes |
| **Virtual Machines** | Windows VM | Yes | Yes | Yes | Yes |
| **Virtual Machines** | VM Scale Set | Yes | Yes | Yes | Yes |
| **Managed Disks** | Disk | Yes | Yes | Yes | Yes |
| **Managed Disks** | Snapshot | Yes | Yes | - | Yes |
| **Availability Set** | Availability Set | Yes | - | Yes | Yes |

### Networking Services

| Service | Resource Type | Discovery | Enrichment | Drift | IaC Gen |
|---------|---------------|:---------:|:----------:|:-----:|:-------:|
| **Virtual Network** | VNet | Yes | Yes | Yes | Yes |
| **Virtual Network** | Subnet | Yes | Yes | Yes | Yes |
| **Network Security** | Network Security Group | Yes | Yes | Yes | Yes |
| **Network Interface** | NIC | Yes | - | Yes | Yes |
| **Public IP** | Public IP Address | Yes | Yes | Yes | Yes |
| **Load Balancer** | Load Balancer | Yes | Yes | Yes | Yes |
| **Application Gateway** | App Gateway | Yes | Yes | Yes | Yes |
| **Route Table** | Route Table | Yes | - | Yes | Yes |
| **NAT Gateway** | NAT Gateway | Yes | - | Yes | Yes |
| **VPN Gateway** | VPN Gateway | Yes | - | - | Yes |

### Storage Services

| Service | Resource Type | Discovery | Enrichment | Drift | IaC Gen |
|---------|---------------|:---------:|:----------:|:-----:|:-------:|
| **Storage Account** | Storage Account | Yes | Yes | Yes | Yes |
| **Storage Account** | Container | Yes | - | Yes | Yes |
| **Storage Account** | Blob | Yes | - | Yes | Yes |

### Database Services

| Service | Resource Type | Discovery | Enrichment | Drift | IaC Gen |
|---------|---------------|:---------:|:----------:|:-----:|:-------:|
| **SQL Database** | SQL Server | Yes | Yes | Yes | Yes |
| **SQL Database** | SQL Database | Yes | - | Yes | Yes |
| **Cosmos DB** | Account | Yes | Yes | Yes | Yes |
| **MySQL** | Flexible Server | Yes | - | - | Yes |
| **PostgreSQL** | Flexible Server | Yes | - | - | Yes |
| **Redis Cache** | Redis | Yes | Yes | Yes | Yes |

### Container Services

| Service | Resource Type | Discovery | Enrichment | Drift | IaC Gen |
|---------|---------------|:---------:|:----------:|:-----:|:-------:|
| **AKS** | Kubernetes Cluster | Yes | Yes | Yes | Yes |
| **AKS** | Node Pool | Yes | - | Yes | - |
| **Container Registry** | ACR | Yes | Yes | Yes | Yes |
| **Container Apps** | Container App | Yes | Yes | Yes | - |
| **Container Apps** | Environment | Yes | - | Yes | - |
| **Container Instances** | Container Group | Yes | - | - | Yes |

### Serverless Services

| Service | Resource Type | Discovery | Enrichment | Drift | IaC Gen |
|---------|---------------|:---------:|:----------:|:-----:|:-------:|
| **App Service** | Web App | Yes | Yes | Yes | Yes |
| **Function App** | Function App | Yes | Yes | Yes | Yes |

### Security & Identity Services

| Service | Resource Type | Discovery | Enrichment | Drift | IaC Gen |
|---------|---------------|:---------:|:----------:|:-----:|:-------:|
| **Key Vault** | Vault | Yes | Yes | Yes | Yes |
| **Key Vault** | Secret | Yes | - | Yes | - |
| **Managed Identity** | User Assigned Identity | Yes | - | Yes | - |
| **Role Assignment** | Role Assignment | Yes | Yes | Yes | Yes |
| **Role Definition** | Role Definition | Yes | - | Yes | - |
| **WAF** | Policy | Yes | Yes | - | - |

### Messaging Services

| Service | Resource Type | Discovery | Enrichment | Drift | IaC Gen |
|---------|---------------|:---------:|:----------:|:-----:|:-------:|
| **Service Bus** | Namespace | Yes | - | Yes | Yes |
| **Service Bus** | Queue | Yes | - | Yes | - |
| **Service Bus** | Topic | Yes | - | Yes | - |
| **Event Hub** | Namespace | Yes | Yes | Yes | Yes |
| **Event Hub** | Event Hub | Yes | - | Yes | - |
| **Event Grid** | Topic | Yes | - | - | Yes |
| **Event Grid** | Domain | Yes | - | - | Yes |

### Monitoring Services

| Service | Resource Type | Discovery | Enrichment | Drift | IaC Gen |
|---------|---------------|:---------:|:----------:|:-----:|:-------:|
| **Application Insights** | App Insights | Yes | - | Yes | Yes |
| **Log Analytics** | Workspace | Yes | - | Yes | Yes |

### DNS Services

| Service | Resource Type | Discovery | Enrichment | Drift | IaC Gen |
|---------|---------------|:---------:|:----------:|:-----:|:-------:|
| **DNS** | Zone | Yes | - | Yes | Yes |
| **DNS** | A Record | Yes | - | Yes | Yes |
| **DNS** | AAAA Record | Yes | - | - | Yes |
| **DNS** | CNAME Record | Yes | - | Yes | Yes |
| **DNS** | MX Record | Yes | - | - | Yes |
| **DNS** | TXT Record | Yes | - | Yes | Yes |
| **Private DNS** | Zone | Yes | - | Yes | Yes |
| **Private DNS** | VNet Link | Yes | - | Yes | Yes |

### CDN Services

| Service | Resource Type | Discovery | Enrichment | Drift | IaC Gen |
|---------|---------------|:---------:|:----------:|:-----:|:-------:|
| **CDN** | Profile | Yes | - | Yes | Yes |
| **CDN** | Endpoint | Yes | - | Yes | Yes |
| **Front Door** | Profile | Yes | Yes | Yes | Yes |
| **Front Door** | Endpoint | Yes | - | - | Yes |
| **Front Door** | Origin Group | Yes | - | - | Yes |

### Analytics Services

| Service | Resource Type | Discovery | Enrichment | Drift | IaC Gen |
|---------|---------------|:---------:|:----------:|:-----:|:-------:|
| **Synapse** | Workspace | Yes | - | - | Yes |
| **Databricks** | Workspace | Yes | - | - | Yes |
| **API Management** | Service | Yes | Yes | Yes | Yes |

---

## Cross-Cloud Service Mapping

The following table shows how service categories map across cloud providers:

| Category | AWS | Azure | GCP |
|----------|-----|-------|-----|
| **VMs/Compute** | EC2 | Virtual Machines | Compute Engine |
| **Auto Scaling** | Auto Scaling Groups | VM Scale Sets | Managed Instance Groups |
| **VPC/Network** | VPC | Virtual Network | VPC Network |
| **Firewalls** | Security Groups | NSG | Firewall Rules |
| **Object Storage** | S3 | Blob Storage | Cloud Storage |
| **SQL Databases** | RDS, Aurora | Azure SQL, MySQL/PG Flex | Cloud SQL, Spanner |
| **NoSQL Databases** | DynamoDB, ElastiCache | CosmosDB, Redis Cache | Bigtable, Memorystore |
| **Kubernetes** | EKS | AKS | GKE |
| **Container Registry** | ECR | ACR | Artifact Registry |
| **Serverless** | Lambda | Functions, App Service | Cloud Functions, Cloud Run |
| **Messaging** | SQS, SNS | Service Bus, Event Hub | Pub/Sub |
| **DNS** | Route 53 | Azure DNS | Cloud DNS |
| **CDN** | CloudFront | Azure CDN, Front Door | Cloud CDN |
| **Secrets** | Secrets Manager, KMS | Key Vault | Secret Manager, KMS |
| **WAF** | WAF | WAF Policy | Cloud Armor |

---

## Notes

1. **Discovery** is available for all listed resources and automatically scans your cloud accounts/projects/subscriptions.

2. **Enrichment** provides deep metadata including:
  - Cost estimation
  - Security posture analysis
  - Compliance checks
  - Relationship mapping
  - Performance metrics

3. **Drift Detection** compares actual cloud state against:
  - Terraform state files
  - Expected IaC configurations
  - Previous discovery snapshots

4. **IaC Creation** produces:
  - Terraform/OpenTofu code
  - Import blocks for existing resources
  - Module structures for organization
  - Provider configurations