Qualys DataFlow for TotalCloud Connector

The Qualys DataFlow for Total Cloud connector establishes an integration between Qualys Total Cloud and Enterprise TruRisk Management, providing visibility into cloud workloads to identify vulnerabilities and configuration risks. 

By ingesting Total Cloud assets and findings, the connector enables Enterprise TruRisk Management to consolidate cloud security data for centralized analysis without requiring manual data collection. The platform then correlates the ingested data with information from other sources, enriches findings with additional context, and processes them to deliver comprehensive risk insights. This integration helps security teams gain a unified view of their cloud security posture, enabling more effective risk prioritization and remediation across their cloud environments.

Connector Details

Vendor Qualys
Product Name TotalCloud
Category Assets + Findings
Works With Qualys TotalCloud
Connector Type Qualys DataFlow
Assets Supported Identity, Serverless, Storage, Compute, Network
Findings Supported Yes
Version 1.0.0
Integration Type API Integration (REST)
Authentication Type Basic Authentication (Username & Password)
Direction Unidirectional (Qualys TotalCloud > Qualys ETM)
Incremental Sync (Delta) Supported

Supportability MatrixSupportability Matrix

The Asset / Misconfiguration column indicates whether the connector imports both asset inventory and misconfiguration findings (Both) or misconfiguration findings only.

✓ = Supported.     
 — = Not Supported.
The Resource Type row shows the specific cloud service targeted for each asset class.
# - Use Qualys Dataflow for VMDR to retrieve vulnerability information.

Asset Class Finding Type AWS Azure GCP OCI
Compute Resource Type EC2 Instance, ASG Azure Virtual Machine Compute Engine VM OCI Compute Instance
Inventory
Vulnerabilities # # # #
Misconfigurations
Serverless Resource Type AWS Lambda Function Azure Function App GCP Cloud Functions OCI Functions
Inventory
Misconfigurations
Identity - User Resource Type AWS - IAM User Azure - User GCP - User OCI - IAM User
Inventory
Misconfigurations
Identity - Role Resource Type AWS - IAM Role Azure - Role Definition GCP - Role OCI - Role
Inventory
Misconfigurations
Identity - Group Resource Type AWS - IAM Group Azure - Group GCP - Group OCI - IAM Group
Inventory
Misconfigurations
Storage - Object Resource Type AWS - S3 Bucket Azure - Storage Account GCP  OCI - Bucket
Inventory
Misconfigurations
Storage - Block Resource Type AWS - EBS Azure - DISK GCP  OCI
Inventory
Misconfigurations
Storage - File Resource Type AWS - EFS File System Azure GCP  OCI
Inventory
Misconfigurations
Network Resource Type Internet Gateway, Network Interface, Subnet, VPC, VPC Endpoint, AWS - VPC Endpoint Service, Transit Gateway, API Gateway, CloudFront Distribution, Load Balancer, Route 53 Domain, Route 53 Hosted Zone, Route 53 Record, Route Table
Azure - Network Security Group (Firewall), Virtual Network
GCP - Firewall, Load Balancer, Network, Subnet
OCI - Load Balancer, Security List
Inventory




Misconfigurations

Configure the Connector

Configure the Connector wizard overview

Before You BeginBefore You Begin

Ensure the following prerequisites are completed before configuring the connector:

  1. Ensure you have an active Qualys TotalCloud subscription.
  2. Generate credentials from the Qualys platform.
  3. Have your Qualys Gateway URL ready.
  4. Contact your Technical Account Manager (TAM) or Qualys Support to activate the connector for your subscription.

Generating Client ID and Client Secret

  1. Navigate to your Profile page in the Qualys platform.

    Qualys platform Profile page

  2. Select Auth ID Client Management from the left navigation menu.

    Auth ID Client Management navigation

  3. Click Create New Client.
  4. Provide a client name.
  5. Enable the TotalCloud toggle.

  6. Click Create.
  7. Copy the generated Client Secret immediately.
  8. Copy the Client ID from the listing page.

The Client Secret is displayed only once during creation. Store it securely before leaving the page.

Permissions Required

Navigate to Admin > Role Management and enter the Name on the Role Details page during role creation. Click Continue.

Select TotalCloud as the module, and select the following required permissions:

  • TotalCloud API Access
  • TotalCloud Readonly Access

To view the permissions, navigate to User Management, select the created role, and click View.

Scope and Data Access

The connector operates with read-only access to TotalCloud data. Using the granted permissions, it retrieves TotalCloud resources (assets) and their evaluations (misconfiguration findings) and imports them into Enterprise TruRisk Management. It does not write back to or modify TotalCloud.

Key Rotation

Generate new credentials from the Auth ID Client Management page and update them in ETM using the Edit Connector workflow.

Profile & ConnectivityProfile & Connectivity

Provide the connector profile details and authentication configuration.

Connector Details

Field Type Description
Name String Connector profile name.
Description String Connector profile description.

Authentication Details

Field Type Description
IS IP RESTRICTED String Optional IP restriction setting.
Base URL String Qualys Gateway URL. Example: https://qualysapi.qualys.com
Authentication Mechanism String Authentication type used by the connector. Example: BASIC / OAuth
Username String Qualys username.
Password Encrypted String Password associated with the configured username.

Profile and Connectivity authentication form

Click Test Connection to validate the connector configuration. The following checks are performed:

  • Network Reachability – Verifies that the connector endpoint is reachable over HTTPS (port 443).
  • TLS Handshake – Confirms that a secure TLS connection can be established with the remote endpoint.
  • Authentication Credential Check – Validates the configured credentials against the source system's authentication endpoint.
  • Authorization Scope Check – Confirms that the provided credentials have the required permissions to access the configured data scope.
  • Data Fetch – Verifies that data can be successfully retrieved from the source system using the configured connection.

Test Connection modal showing all five checks passing

Scope & ScheduleScope & Schedule

Select the data type to synchronize and configure the connector schedule.

  • Data to Sync: Assets & Findings, or Assets
  • Schedule Type: Custom

The connector supports Advanced Settings for Filters and Transform Map configuration.

Scope and Schedule step

Configure a Single Occurrence or Recurring schedule and specify the start and end dates and times.

The configured schedule timezone and recurrence duration are displayed during connector creation.

Advanced Settings

Select the Advanced Settings toggle to view your Filters and Maps.

After changing any Advanced Settings, remember to Save your changes.

Filters Tab

The connector supports filtering for asset types and findings.

1.  Retain Previously Ingested Delta: If enabled, the connector supports delta synchronization for incremental data retrieval.

2. Asset Types: Select the required Asset Types from the drop-down list. Available asset types include Compute, Identity, Storage, and Serverless. All asset types are selected by default.

3. Findings: The Findings dropdown helps you select supported findings categories. Select the required Findings from the drop-down list.

The connector supports Misconfigurations as the finding type.

4. Use Account ID Filter: This enables filtering by cloud account ID. If you check this, you can provide the Account Id filter in text area. 

Example: accountId: 455812255056

5. Use Region Filter: This enables filtering by region. If you check this, you can provide the Region filter in the text area.

Example: "region": "us-west-2"


Transform Map

During connector profile execution, the Qualys DataFlow for TotalCloud Connector retrieves the default transformation map from the database and uses it to transform the ingested data. See the Transformation Maps section for the applied mapping.

Review the connection details, then click Create.

How the Connection Works

The connector fetches TotalCloud resources and evaluations on a scheduled basis or on demand and imports them into Enterprise TruRisk Management. On the Connectors screen, the newly configured connector appears with a Processed status after the import completes.

Connector States

A configured connector progresses through the following states:

  1. Registered – The connector is successfully created and is ready to fetch data from the vendor.
  2. Scheduled – The connector is queued for execution against the vendor.
  3. Processing – The connector is actively retrieving asset and finding data.
  4. Processed – The connector is configured successfully and continues fetching findings, if applicable.

The connector may take up to two hours to complete the first import. After the import finishes, you can view the imported data in ETM.

Viewing Assets and Findings in ETM

Navigate to ETM > Assets > Compute to view imported TotalCloud assets. Use the following QQL filter:

asset.inventory:(source: "Qualys Total Cloud")

Navigate to ETM > Risk Management > Findings > Misconfigurations to view misconfigurations for TotalCloud assets. Use the following QQL filter:

finding.vendorProductName: "Total Cloud"

Troubleshooting

Issue Resolution
Authentication failure on connector run Verify the Gateway URL, Username, and Password are correct. Confirm the client used by the connector was created with the TotalCloud toggle enabled and that the assigned role includes TotalCloud API Access and TotalCloud Readonly Access.
No assets imported after first run The process may take up to 2 hours to complete. Verify the TotalCloud subscription is active and contains asset data. If tag filters are configured, confirm matching assets exist.
Connector not available in the integrations list The connector is available on demand. Contact your TAM or Qualys Support to activate it.

Additional Information

API Reference

Name Endpoint
Get Resources https://<gateway_url>/cloudview-api/rest/v2/resource/
Get Evaluations https://<gateway_url>/cloudview-api/rest/v1/azure/evaluations/resources/

Transformation Maps

During connector profile execution, the Qualys DataFlow for TotalCloud Connector retrieves the default Total Cloud - UAI Transformation Map from the database and applies it automatically to transform ingested TotalCloud resources and evaluations into ETM assets and misconfiguration findings. The map is composed of the per-resource field mappings below.

Asset Maps

AWS Bucket MapAWS Bucket Map

Source Field Target Field

aws-s3-storage

asset.assetHeader.assetTypeName

bucketName

asset.assetHeader.externalAssetId

uuid

asset.assetHeader.vendorAssetId

name

asset.assetDetail.name

createdOn

asset.assetDetail.sourceCreatedAt

updated

asset.assetDetail.sourceUpdatedAt

cloudType

asset.assetDetail.cloudInfo.provider

cloudAccountId

asset.assetDetail.cloudInfo.accountId

accountAlias

asset.assetDetail.cloudInfo.accountName

region

asset.assetDetail.cloudInfo.region

tags[].key

asset.assetDetail.externalTags[].key

tags[].value

asset.assetDetail.externalTags[].value

resourceType

asset.assetDetail.storageAssetClass.type

cloudType

asset.assetDetail.storageAssetClass.provider

region

asset.assetDetail.storageAssetClass.region

bucketName

asset.assetDetail.storageAssetClass.tier

ownerName

asset.assetDetail.typedAttributes.ownerName

bucketOwnerId

asset.assetDetail.typedAttributes.bucketOwnerId

bucketCreationDateStr

asset.assetDetail.typedAttributes.bucketCreationDateStr

bucketPolicy

asset.assetDetail.untypedAttributes.bucketPolicy

s3GrantList

asset.assetDetail.untypedAttributes.s3GrantList

remediationEnabled

asset.assetDetail.typedAttributes.remediationEnabled

controlsFailed

asset.assetDetail.typedAttributes.controlsFailed

qualysTags

asset.assetDetail.untypedAttributes.qualysTags

additionalDetails

asset.assetDetail.typedAttributes.additionalDetails

deletedFromCloud

asset.assetDetail.typedAttributes.deletedFromCloud

isSnapshotScanEnabled

asset.assetDetail.typedAttributes.isSnapshotScanEnabled

failedControlCids

asset.assetDetail.typedAttributes.failedControlCids

notDiscoveredInLast7Days

asset.assetDetail.typedAttributes.notDiscoveredInLast7Days

connectorUuid

asset.assetDetail.typedAttributes.connectorUuid

connectorUuids

asset.assetDetail.untypedAttributes.connectorUuids

AWS EBS MapAWS EBS Map

Source Field Target Field

aws-ebs-storage

asset.assetHeader.assetTypeName

region

asset.assetHeader.externalAssetId

uuid

asset.assetHeader.vendorAssetId

volumeId

asset.assetDetail.name

createdOn

asset.assetDetail.sourceCreatedAt

updated

asset.assetDetail.sourceUpdatedAt

cloudType

asset.assetDetail.cloudInfo.provider

cloudAccountId

asset.assetDetail.cloudInfo.accountId

accountAlias

asset.assetDetail.cloudInfo.accountName

region

asset.assetDetail.cloudInfo.region

tags[].key

asset.assetDetail.externalTags[].key

tags[].value

asset.assetDetail.externalTags[].value

resourceType

asset.assetDetail.storageAssetClass.type

cloudType

asset.assetDetail.storageAssetClass.provider

region

asset.assetDetail.storageAssetClass.region

size

asset.assetDetail.typedAttributes.size

volumeType

asset.assetDetail.storageAssetClass.tier

availabilityZone

asset.assetDetail.typedAttributes.availabilityZone

encrypted

asset.assetDetail.typedAttributes.encrypted

kmsKeyId

asset.assetDetail.typedAttributes.kmsKeyId

snapshotId

asset.assetDetail.typedAttributes.snapshotId

state

asset.assetDetail.typedAttributes.state

volumeId

asset.assetDetail.typedAttributes.volumeId

iops

asset.assetDetail.typedAttributes.iops

volumeType

asset.assetDetail.typedAttributes.volumeType

createTime

asset.assetDetail.typedAttributes.createTime

remediationEnabled

asset.assetDetail.typedAttributes.remediationEnabled

controlsFailed

asset.assetDetail.untypedAttributes.controlsFailed

qualysTags

asset.assetDetail.untypedAttributes.qualysTags

additionalDetails

asset.assetDetail.typedAttributes.additionalDetails

deletedFromCloud

asset.assetDetail.typedAttributes.deletedFromCloud

isSnapshotScanEnabled

asset.assetDetail.storageAssetClass.snapshotEnabled

failedControlCids

asset.assetDetail.typedAttributes.failedControlCids

notDiscoveredInLast7Days

asset.assetDetail.typedAttributes.notDiscoveredInLast7Days

connectorUuid

asset.assetDetail.typedAttributes.connectorUuid

attachments

asset.assetDetail.untypedAttributes.attachments

connectorUuids

asset.assetDetail.untypedAttributes.connectorUuids

AWS EFS File System MapAWS EFS File System Map

Source Field Target Field

aws-efs-storage

asset.assetHeader.assetTypeName

data.arn

asset.assetHeader.externalAssetId

data.uuid

asset.assetHeader.vendorAssetId

displayName

asset.assetDetail.name

data.created

asset.assetDetail.sourceCreatedAt

data.updated

asset.assetDetail.sourceUpdatedAt

cloudType

asset.assetDetail.cloudInfo.provider

cloudAccountId

asset.assetDetail.cloudInfo.accountId

accountAlias

asset.assetDetail.cloudInfo.accountName

region

asset.assetDetail.cloudInfo.region

data.tags[].key

asset.assetDetail.externalTags[].key

data.tags[].value

asset.assetDetail.externalTags[].value

resourceType

asset.assetDetail.storageAssetClass.type

cloudAccountId

asset.assetDetail.storageAssetClass.provider

region

asset.assetDetail.storageAssetClass.region

data.TotalSize

asset.assetDetail.storageAssetClass.capacityInBytes

data.Encrypted

asset.assetDetail.storageAssetClass.encryption.enabled

data.kmsKeyId

asset.assetDetail.storageAssetClass.encryption.key

data.NumberOfMountTargets

asset.assetDetail.untypedAttributes.NumberOfMountTargets

data.PerformanceMode

asset.assetDetail.typedAttributes.PerformanceMode

data.ThroughputMode

asset.assetDetail.typedAttributes.ThroughputMode

data.LifeCycleState

asset.assetDetail.typedAttributes.LifeCycleState

data.ReplicationOverwriteProtection

asset.assetDetail.typedAttributes.ReplicationOverwriteProtection

data.cloudResourceId

asset.assetDetail.typedAttributes.cloudResourceId

data.firstDiscoveredOn

asset.assetDetail.typedAttributes.firstDiscoveredOn

data.lastDiscoveredOn

asset.assetDetail.typedAttributes.lastDiscoveredOn

deletedFromCloud

asset.assetDetail.typedAttributes.deletedFromCloud

notDiscoveredInLast7Days

asset.assetDetail.untypedAttributes.notDiscoveredInLast7Days

connectorId

asset.assetDetail.typedAttributes.connectorId

scanId

asset.assetDetail.typedAttributes.scanId

customerId

asset.assetDetail.typedAttributes.customerId

created

asset.assetDetail.typedAttributes.created

qualysTags

asset.assetDetail.untypedAttributes.qualysTags

classifications

asset.assetDetail.untypedAttributes.classifications

AWS IAM Group MapAWS IAM Group Map

Source Field Target Field

group-identity

asset.assetHeader.assetTypeName

cloudType

asset.assetDetail.cloudInfo.provider

cloudAccountId

asset.assetDetail.cloudInfo.accountId

data.uuid

asset.assetHeader.vendorAssetId

data.created

asset.assetDetail.sourceCreatedAt

data.lastDiscoveredOn

asset.assetDetail.sourceUpdatedAt

data.groupId

asset.assetDetail.groupAssetClass.id

data.arn

asset.assetHeader.externalAssetId

accountAlias

asset.assetDetail.cloudInfo.accountName

region

asset.assetDetail.cloudInfo.region

displayName

asset.assetDetail.groupAssetClass.displayName

displayName

asset.assetDetail.groupAssetClass.name

displayName

asset.assetDetail.name

qualysTags

asset.assetDetail.untypedAttributes.qualysTags

data.classifications

asset.assetDetail.untypedAttributes.classifications

data.AttachedManagedPolicies

asset.assetDetail.untypedAttributes.AttachedManagedPolicies

AWS IAM Role MapAWS IAM Role Map

Source Field Target Field

role-identity

asset.assetHeader.assetTypeName

cloudType

asset.assetDetail.cloudInfo.provider

cloudAccountId

asset.assetDetail.cloudInfo.accountId

data.uuid

asset.assetHeader.vendorAssetId

data.created

asset.assetDetail.sourceCreatedAt

data.lastDiscoveredOn

asset.assetDetail.sourceUpdatedAt

data.roleId

asset.assetDetail.roleAssetClass.id

data.arn

asset.assetHeader.externalAssetId

accountAlias

asset.assetDetail.cloudInfo.accountName

region

asset.assetDetail.cloudInfo.region

displayName

asset.assetDetail.roleAssetClass.displayName

displayName

asset.assetDetail.roleAssetClass.name

displayName

asset.assetDetail.name

qualysTags

asset.assetDetail.untypedAttributes.qualysTags

data.tags[].key

asset.assetDetail.externalTags[].key

data.tags[].value

asset.assetDetail.externalTags[].value

data.AttachedManagedPolicies

asset.assetDetail.untypedAttributes.AttachedManagedPolicies

data.classifications

asset.assetDetail.untypedAttributes.classifications

AWS IAM User MapAWS IAM User Map

Source Field Target Field

user-identity

asset.assetHeader.assetTypeName

userDto.arn

asset.assetHeader.externalAssetId

uuid

asset.assetHeader.vendorAssetId

createdOn

asset.assetDetail.sourceCreatedAt

updated

asset.assetDetail.sourceUpdatedAt

cloudType

asset.assetDetail.cloudInfo.provider

cloudAccountId

asset.assetDetail.cloudInfo.accountId

accountAlias

asset.assetDetail.cloudInfo.accountName

region

asset.assetDetail.cloudInfo.region

deletedFromCloud

asset.assetDetail.untypedAttributes.deletedFromCloud

userDto.userId

asset.assetDetail.userAssetClass.id

userDto.username

asset.assetDetail.userAssetClass.name

userDto.username

asset.assetDetail.name

userDto.passwordLastUsed

asset.assetDetail.typedAttributes.passwordLastUsed

userDto.userCreationTime

asset.assetDetail.userAssetClass.activationDate

userDto.mfaActive

asset.assetDetail.userAssetClass.mfaEnabled

userDto.passwordEnabled

asset.assetDetail.typedAttributes.passwordEnabled

userDto.accessKey1Active

asset.assetDetail.typedAttributes.accessKey1Active

userDto.accessKey2Active

asset.assetDetail.typedAttributes.accessKey2Active

userDto.accessKey2LastUsedRegion

asset.assetDetail.typedAttributes.accessKey2LastUsedRegion

userDto.accessKey2LastUsedService

asset.assetDetail.typedAttributes.accessKey2LastUsedService

userPolicies

asset.assetDetail.untypedAttributes.userPolicies

userAttachedPolicies

asset.assetDetail.untypedAttributes.userAttachedPolicies

userGroups

asset.assetDetail.untypedAttributes.userGroups

Azure Disk MapAzure Disk Map

Source Field Target Field

azure-managed-disk-storage

asset.assetHeader.assetTypeName

resourceId

asset.assetHeader.externalAssetId

data.uuid

asset.assetHeader.vendorAssetId

displayName

asset.assetDetail.name

data.created

asset.assetDetail.sourceCreatedAt

data.updated

asset.assetDetail.sourceUpdatedAt

cloudType

asset.assetDetail.cloudInfo.provider

subscriptionId

asset.assetDetail.cloudInfo.accountId

subscriptionName

asset.assetDetail.cloudInfo.accountName

data.location

asset.assetDetail.cloudInfo.region

data.tags[].key

asset.assetDetail.externalTags[].key

data.tags[].value

asset.assetDetail.externalTags[].value

resourceType

asset.assetDetail.storageAssetClass.type

subscriptionId

asset.assetDetail.storageAssetClass.provider

data.location

asset.assetDetail.storageAssetClass.region

resourceType

asset.assetDetail.storageAssetClass.serviceName

data.skuTier

asset.assetDetail.storageAssetClass.tier

data.diskSizeGB

asset.assetDetail.storageAssetClass.capacityInBytes

data.encryptionType

asset.assetDetail.storageAssetClass.encryption.type

data.resourceGroupId

asset.assetDetail.typedAttributes.resourceGroupId

data.tier

asset.assetDetail.typedAttributes.tier

data.publicNetworkAccess

asset.assetDetail.typedAttributes.publicNetworkAccess

data.diskState

asset.assetDetail.typedAttributes.diskState

data.imageReferenceId

asset.assetDetail.typedAttributes.imageReferenceId

data.osType

asset.assetDetail.typedAttributes.osType

data.createOption

asset.assetDetail.typedAttributes.createOption

data.acceleratedNetwork

asset.assetDetail.untypedAttributes.acceleratedNetwork

data.skuName

asset.assetDetail.typedAttributes.skuName

data.resourceGroupName

asset.assetDetail.typedAttributes.resourceGroupName

data.networkAccessPolicy

asset.assetDetail.typedAttributes.networkAccessPolicy

data.hyperVGeneration

asset.assetDetail.typedAttributes.hyperVGeneration

data.firstDiscoveredOn

asset.assetDetail.typedAttributes.firstDiscoveredOn

data.lastDiscoveredOn

asset.assetDetail.typedAttributes.lastDiscoveredOn

data.supportsHibernation

asset.assetDetail.untypedAttributes.supportsHibernation

data.managedBy

asset.assetDetail.typedAttributes.managedBy

data.zones

asset.assetDetail.typedAttributes.zones

data.architecture

asset.assetDetail.typedAttributes.architecture

data.securityType

asset.assetDetail.typedAttributes.securityType

notDiscoveredInLast7Days

asset.assetDetail.untypedAttributes.notDiscoveredInLast7Days

connectorId

asset.assetDetail.typedAttributes.connectorId

created

asset.assetDetail.untypedAttributes.created

scanId

asset.assetDetail.typedAttributes.scanId

customerId

asset.assetDetail.typedAttributes.customerId

region

asset.assetDetail.typedAttributes.region

qualysTags

asset.assetDetail.untypedAttributes.qualysTags

Azure Storage Account MapAzure Storage Account Map

Source Field Target Field

azure-blob-storage

asset.assetHeader.assetTypeName

resourceId

asset.assetHeader.externalAssetId

data.uuid

asset.assetHeader.vendorAssetId

displayName

asset.assetDetail.name

data.created

asset.assetDetail.sourceCreatedAt

data.updated

asset.assetDetail.sourceUpdatedAt

cloudType

asset.assetDetail.cloudInfo.provider

subscriptionId

asset.assetDetail.cloudInfo.accountId

subscriptionName

asset.assetDetail.cloudInfo.accountName

data.location

asset.assetDetail.cloudInfo.region

data.tags[].key

asset.assetDetail.externalTags[].key

data.tags[].value

asset.assetDetail.externalTags[].value

resourceType

asset.assetDetail.storageAssetClass.type

subscriptionId

asset.assetDetail.storageAssetClass.provider

data.location

asset.assetDetail.storageAssetClass.region

resourceType

asset.assetDetail.storageAssetClass.serviceName

data.skuTier

asset.assetDetail.storageAssetClass.tier

data.supportsHttpsTrafficOnly

asset.assetDetail.storageAssetClass.encryption.enabled

data.minimumTlsVersion

asset.assetDetail.storageAssetClass.encryption.key

data.resourceGroupId

asset.assetDetail.typedAttributes.resourceGroupId

data.skuName

asset.assetDetail.typedAttributes.skuName

data.resourceIdentity

asset.assetDetail.untypedAttributes.resourceIdentity

data.hnsEnabled

asset.assetDetail.untypedAttributes.hnsEnabled

data.secondaryLocation

asset.assetDetail.typedAttributes.secondaryLocation

data.resourceGroupName

asset.assetDetail.typedAttributes.resourceGroupName

data.statusOfSecondary

asset.assetDetail.typedAttributes.statusOfSecondary

data.type

asset.assetDetail.typedAttributes.type

data.primaryLocation

asset.assetDetail.typedAttributes.primaryLocation

data.statusOfPrimary

asset.assetDetail.typedAttributes.statusOfPrimary

data.kind

asset.assetDetail.typedAttributes.kind

data.firstDiscoveredOn

asset.assetDetail.typedAttributes.firstDiscoveredOn

data.lastDiscoveredOn

asset.assetDetail.typedAttributes.lastDiscoveredOn

data.file

asset.assetDetail.untypedAttributes.file

data.blob

asset.assetDetail.untypedAttributes.blob

notDiscoveredInLast7Days

asset.assetDetail.untypedAttributes.notDiscoveredInLast7Days

connectorId

asset.assetDetail.typedAttributes.connectorId

created

asset.assetDetail.untypedAttributes.created

scanId

asset.assetDetail.typedAttributes.scanId

customerId

asset.assetDetail.typedAttributes.customerId

region

asset.assetDetail.typedAttributes.region

data.networkAcls

asset.assetDetail.untypedAttributes.networkAcls

qualysTags

asset.assetDetail.untypedAttributes.qualysTags

OCI Bucket MapOCI Bucket Map

Source Field Target Field

oci-object-storage

asset.assetHeader.assetTypeName

resourceId

asset.assetHeader.externalAssetId

uuid

asset.assetHeader.vendorAssetId

name

asset.assetDetail.name

creationDate

asset.assetDetail.sourceCreatedAt

updated

asset.assetDetail.sourceUpdatedAt

cloudType

asset.assetDetail.cloudInfo.provider

resourceType

asset.assetDetail.storageAssetClass.type

cloudAccountId

asset.assetDetail.cloudInfo.accountId

tenantId

asset.assetDetail.cloudInfo.accountName

region

asset.assetDetail.cloudInfo.region

ociTags[].key

asset.assetDetail.externalTags[].key

ociTags[].value

asset.assetDetail.externalTags[].value

cloudType

asset.assetDetail.storageAssetClass.provider

region

asset.assetDetail.storageAssetClass.region

defaultStorageTier

asset.assetDetail.storageAssetClass.tier

encryptionKey

asset.assetDetail.storageAssetClass.encryption.type

emitObjectEvents

asset.assetDetail.storageAssetClass.snapshotEnabled

namespace

asset.assetDetail.typedAttributes.namespace

objectVersioning

asset.assetDetail.typedAttributes.objectVersioning

visibility

asset.assetDetail.typedAttributes.visibility

autoTiering

asset.assetDetail.typedAttributes.autoTiering

availabilityDomain

asset.assetDetail.typedAttributes.availabilityDomain

lifecycleState

asset.assetDetail.typedAttributes.lifecycleState

compartment

asset.assetDetail.untypedAttributes.compartment

ociId

asset.assetDetail.typedAttributes.ociId

tenancyName

asset.assetDetail.typedAttributes.tenancyName

createdBy

asset.assetDetail.typedAttributes.createdBy

firstDiscoveredOn

asset.assetDetail.typedAttributes.firstDiscoveredOn

connectorUuid

asset.assetDetail.typedAttributes.connectorUuid

connectorSource

asset.assetDetail.typedAttributes.connectorSource

lastUpdated

asset.assetDetail.typedAttributes.lastUpdated

notDiscoveredInLast7Days

asset.assetDetail.typedAttributes.notDiscoveredInLast7Days

controlsFailed

asset.assetDetail.untypedAttributes.controlsFailed

qualysTags

asset.assetDetail.untypedAttributes.qualysTags

connectorUuids

asset.assetDetail.untypedAttributes.connectorUuids

scanUuids

asset.assetDetail.untypedAttributes.scanUuids

tagIds

asset.assetDetail.untypedAttributes.tagIds

customers

asset.assetDetail.untypedAttributes.customers

customerId

asset.assetDetail.typedAttributes.customerId

scanId

asset.assetDetail.typedAttributes.scanId

connectorId

asset.assetDetail.typedAttributes.connectorId

OCI IAM User MapOCI IAM User Map

Source Field Target Field

user-identity

asset.assetHeader.assetTypeName

resourceId

asset.assetHeader.externalAssetId

uuid

asset.assetHeader.vendorAssetId

name

asset.assetDetail.name

creationDate

asset.assetDetail.sourceCreatedAt

updated

asset.assetDetail.sourceUpdatedAt

cloudType

asset.assetDetail.cloudInfo.provider

cloudAccountId

asset.assetDetail.cloudInfo.accountId

tenantId

asset.assetDetail.cloudInfo.accountName

region

asset.assetDetail.cloudInfo.region

ociTags[].key

asset.assetDetail.externalTags[].key

ociTags[].value

asset.assetDetail.externalTags[].value

isMfaActivated

asset.assetDetail.userAssetClass.mfaEnabled

lifecycleState

asset.assetDetail.userAssetClass.status

name

asset.assetDetail.userAssetClass.displayName

name

asset.assetDetail.userAssetClass.name

capabilities.canUseApiKeys

asset.assetDetail.untypedAttributes.canUseApiKeys

capabilities.canUseAuthTokens

asset.assetDetail.untypedAttributes.canUseAuthTokens

capabilities.canUseCustomerSecretKeys

asset.assetDetail.untypedAttributes.canUseCustomerSecretKeys

capabilities.canUseConsolePassword

asset.assetDetail.untypedAttributes.canUseConsolePassword

emailVerified

asset.assetDetail.untypedAttributes.emailVerified

firstDiscoveredOn

asset.assetDetail.typedAttributes.firstDiscoveredOn

lastSuccessfulLoginTime

asset.assetDetail.typedAttributes.lastSuccessfulLoginTime

customerId

asset.assetDetail.typedAttributes.customerId

connectorId

asset.assetDetail.typedAttributes.connectorId

scanId

asset.assetDetail.typedAttributes.scanId

tagIds

asset.assetDetail.untypedAttributes.tagIds

scanUuids

asset.assetDetail.untypedAttributes.scanUuids

connectorUuids

asset.assetDetail.untypedAttributes.connectorUuids

controlsFailed

asset.assetDetail.untypedAttributes.controlsFailed

tenancyName

asset.assetDetail.typedAttributes.tenancyName

ociId

asset.assetDetail.typedAttributes.ociId

AWS Lambda MapAWS Lambda Map

Source Field Target Field

aws-lambda-function

asset.assetHeader.assetTypeName

functionArn

asset.assetHeader.externalAssetId

uuid

asset.assetHeader.vendorAssetId

name

asset.assetDetail.name

createdOn

asset.assetDetail.sourceCreatedAt

updated

asset.assetDetail.sourceUpdatedAt

cloudType

asset.assetDetail.cloudInfo.provider

cloudAccountId

asset.assetDetail.cloudInfo.accountId

accountAlias

asset.assetDetail.cloudInfo.accountName

region

asset.assetDetail.cloudInfo.region

tags[].key

asset.assetDetail.externalTags[].key

tags[].value

asset.assetDetail.externalTags[].value

functionName

asset.assetDetail.serverlessAssetClass.functionName

functionArn

asset.assetDetail.serverlessAssetClass.functionURL

runtime

asset.assetDetail.serverlessAssetClass.runtime

handler

asset.assetDetail.serverlessAssetClass.handler

resourceType

asset.assetDetail.serverlessAssetClass.serviceName

memorySize

asset.assetDetail.serverlessAssetClass.memoryInBytes

codeSize

asset.assetDetail.serverlessAssetClass.codeSizeInBytes

aws-lambda-function

asset.assetDetail.serverlessAssetClass.type

eventSourceMappings[].type

asset.assetDetail.serverlessAssetClass.triggers[].type

eventSourceMappings[].eventSourceArn

asset.assetDetail.serverlessAssetClass.triggers[].resource

description

asset.assetDetail.typedAttributes.description

timeout

asset.assetDetail.untypedAttributes.timeout

lastModified

asset.assetDetail.typedAttributes.lastModified

codeSha256

asset.assetDetail.typedAttributes.codeSha256

version

asset.assetDetail.typedAttributes.version

kmsKeyArn

asset.assetDetail.typedAttributes.kmsKeyArn

masterArn

asset.assetDetail.typedAttributes.masterArn

revisionId

asset.assetDetail.typedAttributes.revisionId

tracingConfig

asset.assetDetail.typedAttributes.tracingConfig

vpcId

asset.assetDetail.typedAttributes.vpcId

roleArn

asset.assetDetail.typedAttributes.roleArn

roleName

asset.assetDetail.typedAttributes.roleName

assumeRolePolicyDocument

asset.assetDetail.untypedAttributes.assumeRolePolicyDocument

inlinePolicies

asset.assetDetail.untypedAttributes.inlinePolicies

managedPolicies

asset.assetDetail.untypedAttributes.managedPolicies

layers

asset.assetDetail.untypedAttributes.layers

aliases

asset.assetDetail.untypedAttributes.aliases

functionVersions

asset.assetDetail.untypedAttributes.functionVersions

associations

asset.assetDetail.untypedAttributes.associations

functionUrlConfigs

asset.assetDetail.untypedAttributes.functionUrlConfigs

rawFunctionPolicy

asset.assetDetail.untypedAttributes.rawFunctionPolicy

classifications

asset.assetDetail.untypedAttributes.classifications

remediationEnabled

asset.assetDetail.typedAttributes.remediationEnabled

controlsFailed

asset.assetDetail.untypedAttributes.controlsFailed

qualysTags

asset.assetDetail.untypedAttributes.qualysTags

additionalDetails

asset.assetDetail.untypedAttributes.additionalDetails

deletedFromCloud

asset.assetDetail.typedAttributes.deletedFromCloud

isSnapshotScanEnabled

asset.assetDetail.untypedAttributes.isSnapshotScanEnabled

failedControlCids

asset.assetDetail.untypedAttributes.failedControlCids

notDiscoveredInLast7Days

asset.assetDetail.typedAttributes.notDiscoveredInLast7Days

connectorUuid

asset.assetDetail.typedAttributes.connectorUuid

connectorUuids

asset.assetDetail.untypedAttributes.connectorUuids

AWS Auto Scaling Group MapAWS Auto Scaling Group Map

Source Field Target Field

aws-ec2-instance

asset.assetHeader.assetTypeName

autoScalingGroupARN

asset.assetHeader.externalAssetId

uuid

asset.assetHeader.vendorAssetId

name

asset.assetDetail.name

createdOn

asset.assetDetail.sourceCreatedAt

updated

asset.assetDetail.sourceUpdatedAt

cloudType

asset.assetDetail.cloudInfo.provider

cloudAccountId

asset.assetDetail.cloudInfo.accountId

accountAlias

asset.assetDetail.cloudInfo.accountName

region

asset.assetDetail.cloudInfo.region

tags[].key

asset.assetDetail.externalTags[].key

tags[].value

asset.assetDetail.externalTags[].value

autoScalingGroupName

asset.assetDetail.computeAssetClass.cloudInstance.id

resourceId

asset.assetDetail.typedAttributes.resourceId

resourceType

asset.assetDetail.typedAttributes.resourceType

launchConfigurationName

asset.assetDetail.typedAttributes.launchConfigurationName

healthCheckType

asset.assetDetail.typedAttributes.healthCheckType

connectorUuid

asset.assetDetail.typedAttributes.connectorUuid

remediationEnabled

asset.assetDetail.untypedAttributes.remediationEnabled

additionalDetails

asset.assetDetail.untypedAttributes.additionalDetails

deletedFromCloud

asset.assetDetail.untypedAttributes.deletedFromCloud

failedControlCids

asset.assetDetail.untypedAttributes.failedControlCids

notDiscoveredInLast7Days

asset.assetDetail.untypedAttributes.notDiscoveredInLast7Days

controlsFailed

asset.assetDetail.untypedAttributes.controlsFailed

qualysTags

asset.assetDetail.untypedAttributes.qualysTags

isSnapshotScanEnabled

asset.assetDetail.untypedAttributes.isSnapshotScanEnabled

availabilityZones

asset.assetDetail.untypedAttributes.availabilityZones

loadBalancerNames

asset.assetDetail.untypedAttributes.loadBalancerNames

instances

asset.assetDetail.untypedAttributes.instances

connectorUuids

asset.assetDetail.untypedAttributes.connectorUuids

Azure Virtual Machine MapAzure Virtual Machine Map

Source Field Target Field

azure-virtual-machine

asset.assetHeader.assetTypeName

subscriptionId

asset.assetHeader.externalAssetId

uuid

asset.assetHeader.vendorAssetId

name

asset.assetDetail.name

created

asset.assetDetail.sourceCreatedAt

updated

asset.assetDetail.sourceUpdatedAt

cloudType

asset.assetDetail.cloudInfo.provider

subscriptionId

asset.assetDetail.cloudInfo.accountId

region

asset.assetDetail.cloudInfo.region

tags[].name

asset.assetDetail.externalTags[].key

tags[].value

asset.assetDetail.externalTags[].value

computerName

asset.assetDetail.computeAssetClass.cloudInstance.hostname

name

asset.assetDetail.computeAssetClass.cloudInstance.id

size

asset.assetDetail.computeAssetClass.cloudInstance.type

primaryPrivateIPAddress

asset.assetDetail.computeAssetClass.cloudInstance.privateIpv4Address

primaryPublicIPAddress

asset.assetDetail.computeAssetClass.cloudInstance.publicIpv4Address

resourceId

asset.assetDetail.typedAttributes.resourceId

resourceGroupName

asset.assetDetail.typedAttributes.resourceGroupName

type

asset.assetDetail.typedAttributes.type

osType

asset.assetDetail.typedAttributes.osType

networkSecurityGroupId

asset.assetDetail.typedAttributes.networkSecurityGroupId

primaryPublicIPAddressId

asset.assetDetail.typedAttributes.primaryPublicIPAddressId

availabilitySetId

asset.assetDetail.typedAttributes.availabilitySetId

scanUuid

asset.assetDetail.typedAttributes.scanUuid

connectorUuid

asset.assetDetail.typedAttributes.connectorUuid

customerId

asset.assetDetail.typedAttributes.customerId

subscriptionName

asset.assetDetail.untypedAttributes.subscriptionName

remediationEnabled

asset.assetDetail.untypedAttributes.remediationEnabled

additionalDetails

asset.assetDetail.untypedAttributes.additionalDetails

notDiscoveredInLast7Days

asset.assetDetail.untypedAttributes.notDiscoveredInLast7Days

qualysTags

asset.assetDetail.untypedAttributes.qualysTags

isSnapshotScanEnabled

asset.assetDetail.untypedAttributes.isSnapshotScanEnabled

controlsFailed

asset.assetDetail.untypedAttributes.controlsFailed

privateIpv6Address

asset.assetDetail.untypedAttributes.privateIpv6Address

publicIpv6Address

asset.assetDetail.untypedAttributes.publicIpv6Address

provisioningState

asset.assetDetail.untypedAttributes.provisioningState

licenseType

asset.assetDetail.untypedAttributes.licenseType

criticalityScore

asset.assetDetail.untypedAttributes.criticalityScore

arsScore

asset.assetDetail.untypedAttributes.arsScore

vmssId

asset.assetDetail.untypedAttributes.vmssId

isVmssVM

asset.assetDetail.untypedAttributes.isVmssVM

statuses

asset.assetDetail.untypedAttributes.statuses

imageData

asset.assetDetail.untypedAttributes.imageData

customers

asset.assetDetail.untypedAttributes.customers

connectorUuids

asset.assetDetail.untypedAttributes.connectorUuids

GCP VM Instance MapGCP VM Instance Map

Source Field Target Field

gcp-compute-instance

asset.assetHeader.assetTypeName

projectId

asset.assetHeader.externalAssetId

uuid

asset.assetHeader.vendorAssetId

name

asset.assetDetail.name

created

asset.assetDetail.sourceCreatedAt

updated

asset.assetDetail.sourceUpdatedAt

cloudType

asset.assetDetail.cloudInfo.provider

projectId

asset.assetDetail.cloudInfo.accountId

region

asset.assetDetail.cloudInfo.region

zone

asset.assetDetail.cloudInfo.availabilityZone

labels[].name

asset.assetDetail.externalTags[].key

labels[].value

asset.assetDetail.externalTags[].value

name

asset.assetDetail.computeAssetClass.cloudInstance.hostname

name

asset.assetDetail.computeAssetClass.cloudInstance.id

status

asset.assetDetail.computeAssetClass.cloudInstance.state

machineType

asset.assetDetail.computeAssetClass.cloudInstance.type

privateIpAddress

asset.assetDetail.computeAssetClass.cloudInstance.privateIpv4Address

externalIpAddress

asset.assetDetail.computeAssetClass.cloudInstance.publicIpv4Address

privateIpv6Address

asset.assetDetail.computeAssetClass.cloudInstance.privateIpv6Address

publicIpv6Address

asset.assetDetail.computeAssetClass.cloudInstance.publicIpv6Address

networkInterfaces[].name

asset.assetDetail.network[].interfaceName

networkInterfaces[].networkIP

asset.assetDetail.network[].ipv4Addresses

resourceId

asset.assetDetail.typedAttributes.resourceId

kind

asset.assetDetail.typedAttributes.kind

projectNumber

asset.assetDetail.typedAttributes.projectNumber

scanUuid

asset.assetDetail.typedAttributes.scanUuid

connectorUuid

asset.assetDetail.typedAttributes.connectorUuid

customerId

asset.assetDetail.typedAttributes.customerId

description

asset.assetDetail.typedAttributes.description

controlsFailed

asset.assetDetail.untypedAttributes.controlsFailed

qualysTags

asset.assetDetail.untypedAttributes.qualysTags

notDiscoveredInLast7Days

asset.assetDetail.untypedAttributes.notDiscoveredInLast7Days

type

asset.assetDetail.untypedAttributes.type

tags

asset.assetDetail.untypedAttributes.tags

imageData

asset.assetDetail.untypedAttributes.imageData

customers

asset.assetDetail.untypedAttributes.customers

connectorUuids

asset.assetDetail.untypedAttributes.connectorUuids

OCI Instance MapOCI Instance Map

Source Field Target Field

oci-compute-instance

asset.assetHeader.assetTypeName

ociId

asset.assetHeader.externalAssetId

uuid

asset.assetHeader.vendorAssetId

name

asset.assetDetail.name

creationDate

asset.assetDetail.sourceCreatedAt

updated

asset.assetDetail.sourceUpdatedAt

cloudType

asset.assetDetail.cloudInfo.provider

cloudAccountId

asset.assetDetail.cloudInfo.accountId

tenantId

asset.assetDetail.cloudInfo.accountName

region

asset.assetDetail.cloudInfo.region

availabilityDomain

asset.assetDetail.cloudInfo.availabilityZone

ociTags[].key

asset.assetDetail.externalTags[].key

ociTags[].value

asset.assetDetail.externalTags[].value

name

asset.assetDetail.computeAssetClass.cloudInstance.hostname

ociId

asset.assetDetail.computeAssetClass.cloudInstance.id

lifecycleState

asset.assetDetail.computeAssetClass.cloudInstance.state

shape

asset.assetDetail.computeAssetClass.cloudInstance.type

imageId

asset.assetDetail.computeAssetClass.cloudInstance.imageId

privateIpv4

asset.assetDetail.computeAssetClass.cloudInstance.privateIpv4Address

pubilcIpv4

asset.assetDetail.computeAssetClass.cloudInstance.publicIpv4Address

vnicDto[].macAddress

asset.assetDetail.network[].macAddress

vnicDto[].privateIp

asset.assetDetail.network[].ipv4Addresses

vnicDto[].hostNameLabel

asset.assetDetail.network[].hostname

vnicDto[].displayName

asset.assetDetail.network[].interfaceName

resourceId

asset.assetDetail.typedAttributes.resourceId

tenancyName

asset.assetDetail.typedAttributes.tenancyName

faultDomain

asset.assetDetail.typedAttributes.faultDomain

connectorId

asset.assetDetail.typedAttributes.connectorId

connectorSource

asset.assetDetail.typedAttributes.connectorSource

customerId

asset.assetDetail.typedAttributes.customerId

scanId

asset.assetDetail.typedAttributes.scanId

controlsFailed

asset.assetDetail.untypedAttributes.controlsFailed

qualysTags

asset.assetDetail.untypedAttributes.qualysTags

notDiscoveredInLast7Days

asset.assetDetail.untypedAttributes.notDiscoveredInLast7Days

lastUpdated

asset.assetDetail.untypedAttributes.lastUpdated

launchTime

asset.assetDetail.untypedAttributes.launchTime

connectorUuid

asset.assetDetail.untypedAttributes.connectorUuid

secureBootEnabled

asset.assetDetail.untypedAttributes.secureBootEnabled

pvEncryptionInTransitEnabled

asset.assetDetail.untypedAttributes.pvEncryptionInTransitEnabled

firstDiscoveredOn

asset.assetDetail.untypedAttributes.firstDiscoveredOn

tagIds

asset.assetDetail.untypedAttributes.tagIds

scanUuids

asset.assetDetail.untypedAttributes.scanUuids

connectorUuids

asset.assetDetail.untypedAttributes.connectorUuids

customers

asset.assetDetail.untypedAttributes.customers

vnicDto

asset.assetDetail.untypedAttributes.vnicDto

compartment

asset.assetDetail.untypedAttributes.compartment

GCP Cloud Function MapGCP Cloud Function Map

Source Field Target Field

gcp-cloud-function

asset.assetHeader.assetTypeName

cloudType

asset.assetDetail.cloudInfo.provider

projectId

asset.assetDetail.cloudInfo.accountId

resourceId

asset.assetHeader.externalAssetId

uuid

asset.assetHeader.vendorAssetId

name

asset.assetDetail.name

region

asset.assetDetail.cloudInfo.region

tags[].name

asset.assetDetail.externalTags[].key

tags[].value

asset.assetDetail.externalTags[].value

status

asset.assetHeader.status

runtime

asset.assetDetail.ServerlessAssetClass.runtime

eventTrigger.url

asset.assetDetail.ServerlessAssetClass.functionURL

triggerType

asset.assetDetail.ServerlessAssetClass.Trigger.type

created

asset.assetDetail.sourceCreatedAt

updated

asset.assetDetail.sourceUpdatedAt

Azure Function App MapAzure Function App Map

Source Field Target Field

azure-function

asset.assetHeader.assetTypeName

resourceId

asset.assetHeader.externalAssetId

uuid

asset.assetHeader.vendorAssetId

name

asset.assetDetail.name

created

asset.assetDetail.sourceCreatedAt

updated

asset.assetDetail.sourceUpdatedAt

cloudType

asset.assetDetail.cloudInfo.provider

subscriptionId

asset.assetDetail.cloudInfo.accountId

subscriptionName

asset.assetDetail.cloudInfo.accountName

region

asset.assetDetail.cloudInfo.region

tags[].name

asset.assetDetail.externalTags[].key

tags[].value

asset.assetDetail.externalTags[].value

azure-function

asset.assetDetail.serverlessAssetClass.type

name

asset.assetDetail.serverlessAssetClass.functionName

defaultHostName

asset.assetDetail.serverlessAssetClass.functionURL

language

asset.assetDetail.serverlessAssetClass.runtime

type

asset.assetDetail.serverlessAssetClass.serviceName

kind

asset.assetDetail.serverlessAssetClass.platform

appServicePlan

asset.assetDetail.serverlessAssetClass.plan

state

asset.assetDetail.serverlessAssetClass.status

enabled

asset.assetDetail.serverlessAssetClass.enabled

customerId

asset.assetDetail.typedAttributes.customerId

customers

asset.assetDetail.untypedAttributes.customers

connectorUuid

asset.assetDetail.typedAttributes.connectorUuid

connectorUuids

asset.assetDetail.untypedAttributes.connectorUuids

resourceGroupName

asset.assetDetail.typedAttributes.resourceGroupName

scanUuid

asset.assetDetail.typedAttributes.scanUuid

type

asset.assetDetail.typedAttributes.resourceType

remediationEnabled

asset.assetDetail.untypedAttributes.remediationEnabled

additionalDetails

asset.assetDetail.untypedAttributes.additionalDetails

notDiscoveredInLast7Days

asset.assetDetail.untypedAttributes.notDiscoveredInLast7Days

qualysTags

asset.assetDetail.untypedAttributes.qualysTags

isSnapshotScanEnabled

asset.assetDetail.untypedAttributes.isSnapshotScanEnabled

controlsFailed

asset.assetDetail.untypedAttributes.controlsFailed

key

asset.assetDetail.typedAttributes.key

deploymentId

asset.assetDetail.typedAttributes.deploymentId

subKinds

asset.assetDetail.untypedAttributes.subKinds

usageState

asset.assetDetail.typedAttributes.usageState

availabilityState

asset.assetDetail.typedAttributes.availabilityState

isDefaultContainer

asset.assetDetail.untypedAttributes.isDefaultContainer

httpsonly

asset.assetDetail.untypedAttributes.httpsonly

redundancyMode

asset.assetDetail.typedAttributes.redundancyMode

repositorySiteName

asset.assetDetail.typedAttributes.repositorySiteName

clientAffinityEnabled

asset.assetDetail.untypedAttributes.clientAffinityEnabled

clientCertEnabled

asset.assetDetail.untypedAttributes.clientCertEnabled

enabledHosts

asset.assetDetail.untypedAttributes.enabledHosts

functions

asset.assetDetail.untypedAttributes.functions

AWS CloudFront Distribution MapAWS CloudFront Distribution Map

Source Field Target Field

generic-cloud-network-resource

asset.assetHeader.assetTypeName

cloudResourceId

asset.assetHeader.externalAssetId

uuid

asset.assetHeader.vendorAssetId

name

asset.assetDetail.name

createdOn

asset.assetDetail.sourceCreatedAt

lastUpdated

asset.assetDetail.sourceUpdatedAt

cloudType

asset.assetDetail.cloudInfo.provider

cloudAccountId

asset.assetDetail.cloudInfo.accountId

region

asset.assetDetail.cloudInfo.region

tags[].key

asset.assetDetail.externalTags[].key

tags[].value

asset.assetDetail.externalTags[].value

resourceType

asset.assetDetail.typedAttributes.resourceType

connectorId

asset.assetDetail.typedAttributes.connectorId

accountAlias

asset.assetDetail.typedAttributes.accountAlias

name

asset.assetDetail.typedAttributes.name

scanId

asset.assetDetail.typedAttributes.scanId

data.arn

asset.assetDetail.typedAttributes.dataArn

data.status

asset.assetDetail.typedAttributes.dataStatus

data.priceClass

asset.assetDetail.typedAttributes.dataPriceClass

data.comment

asset.assetDetail.typedAttributes.dataComment

data.httpVersion

asset.assetDetail.typedAttributes.dataHttpVersion

data.minimumProtocolVersion

asset.assetDetail.typedAttributes.dataMinimumProtocolVersion

data.webAclId

asset.assetDetail.typedAttributes.dataWebAclId

data.id

asset.assetDetail.typedAttributes.dataId

data.loggingBucket

asset.assetDetail.typedAttributes.dataLoggingBucket

data.loggingBucketPrefix

asset.assetDetail.typedAttributes.dataLoggingBucketPrefix

data.cloudResourceId

asset.assetDetail.typedAttributes.dataCloudResourceId

data.uuid

asset.assetDetail.typedAttributes.dataUuid

data.updated

asset.assetDetail.typedAttributes.dataUpdated

data.firstDiscoveredOn

asset.assetDetail.typedAttributes.dataFirstDiscoveredOn

data.lastDiscoveredOn

asset.assetDetail.typedAttributes.dataLastDiscoveredOn

data.created

asset.assetDetail.typedAttributes.dataCreated

created

asset.assetDetail.untypedAttributes.created

notDiscoveredInLast7Days

asset.assetDetail.untypedAttributes.notDiscoveredInLast7Days

deletedFromCloud

asset.assetDetail.untypedAttributes.deletedFromCloud

qualysTags

asset.assetDetail.untypedAttributes.qualysTags

accountTags

asset.assetDetail.untypedAttributes.accountTags

data.enabled

asset.assetDetail.untypedAttributes.dataEnabled

data.isIpv6Enabled

asset.assetDetail.untypedAttributes.dataIsIpv6Enabled

data.loggingEnabled

asset.assetDetail.untypedAttributes.dataLoggingEnabled

data.staging

asset.assetDetail.untypedAttributes.dataStaging

data.origins

asset.assetDetail.untypedAttributes.dataOrigins

data.defaultCacheBehavior

asset.assetDetail.untypedAttributes.dataDefaultCacheBehavior

data.geoRestriction

asset.assetDetail.untypedAttributes.dataGeoRestriction

AWS API Gateway MapAWS API Gateway Map

Source Field Target Field

aws-api-gateway

asset.assetHeader.assetTypeName

cloudResourceId

asset.assetHeader.externalAssetId

uuid

asset.assetHeader.vendorAssetId

name

asset.assetDetail.name

createdOn

asset.assetDetail.sourceCreatedAt

lastUpdated

asset.assetDetail.sourceUpdatedAt

cloudType

asset.assetDetail.cloudInfo.provider

cloudAccountId

asset.assetDetail.cloudInfo.accountId

region

asset.assetDetail.cloudInfo.region

tags[].key

asset.assetDetail.externalTags[].key

tags[].value

asset.assetDetail.externalTags[].value

resourceType

asset.assetDetail.typedAttributes.resourceType

connectorId

asset.assetDetail.typedAttributes.connectorId

accountAlias

asset.assetDetail.typedAttributes.accountAlias

name

asset.assetDetail.typedAttributes.name

scanId

asset.assetDetail.typedAttributes.scanId

customerId

asset.assetDetail.typedAttributes.customerId

data.updated

asset.assetDetail.typedAttributes.dataUpdated

data.firstDiscoveredOn

asset.assetDetail.typedAttributes.dataFirstDiscoveredOn

data.lastDiscoveredOn

asset.assetDetail.typedAttributes.dataLastDiscoveredOn

data.created

asset.assetDetail.typedAttributes.dataCreated

data.types

asset.assetDetail.typedAttributes.dataTypes

data.ipv6

asset.assetDetail.typedAttributes.dataIpv6

data.apiDescription

asset.assetDetail.typedAttributes.dataApiDescription

data.protocolType

asset.assetDetail.typedAttributes.dataProtocolType

data.apiEndpoint

asset.assetDetail.typedAttributes.dataApiEndpoint

created

asset.assetDetail.untypedAttributes.created

notDiscoveredInLast7Days

asset.assetDetail.untypedAttributes.notDiscoveredInLast7Days

deletedFromCloud

asset.assetDetail.untypedAttributes.deletedFromCloud

qualysTags

asset.assetDetail.untypedAttributes.qualysTags

accountTags

asset.assetDetail.untypedAttributes.accountTags

data.disableExecuteApiEndpoint

asset.assetDetail.untypedAttributes.dataDisableExecuteApiEndpoint

data.deployments

asset.assetDetail.untypedAttributes.dataDeployments

data.resources

asset.assetDetail.untypedAttributes.dataResources

data.stages

asset.assetDetail.untypedAttributes.dataStages

data.routes

asset.assetDetail.untypedAttributes.dataRoutes

data.corsConfigurations

asset.assetDetail.untypedAttributes.dataCorsConfigurations

AWS Internet Gateway MapAWS Internet Gateway Map

Source Field Target Field

generic-network-node

asset.assetHeader.assetTypeName

region + cloudAccountId + internetGatewayId

asset.assetHeader.externalAssetId

uuid

asset.assetHeader.vendorAssetId

name

asset.assetDetail.name

created

asset.assetDetail.sourceCreatedAt

updated

asset.assetDetail.sourceUpdatedAt

cloudType

asset.assetDetail.cloudInfo.provider

cloudAccountId

asset.assetDetail.cloudInfo.accountId

region

asset.assetDetail.cloudInfo.region

tags[].key

asset.assetDetail.externalTags[].key

tags[].value

asset.assetDetail.externalTags[].value

cloudType

asset.assetDetail.networkAssetClass.provider

region

asset.assetDetail.networkAssetClass.location

internetGatewayId

asset.assetDetail.networkAssetClass.gatewayId

name

asset.assetDetail.networkAssetClass.gatewayName

resourceId

asset.assetDetail.typedAttributes.resourceId

connectorUuid

asset.assetDetail.typedAttributes.connectorUuid

createdOn

asset.assetDetail.typedAttributes.createdOn

remediationEnabled

asset.assetDetail.untypedAttributes.remediationEnabled

qualysTags

asset.assetDetail.untypedAttributes.qualysTags

additionalDetails

asset.assetDetail.untypedAttributes.additionalDetails

failedControlCids

asset.assetDetail.untypedAttributes.failedControlCids

notDiscoveredInLast7Days

asset.assetDetail.untypedAttributes.notDiscoveredInLast7Days

controlsFailed

asset.assetDetail.untypedAttributes.controlsFailed

isSnapshotScanEnabled

asset.assetDetail.untypedAttributes.isSnapshotScanEnabled

connectorUuids

asset.assetDetail.untypedAttributes.connectorUuids

AWS Network Interfaces MapAWS Network Interfaces Map

Source Field Target Field

generic-cloud-network-resource

asset.assetHeader.assetTypeName

data.cloudResourceId

asset.assetHeader.externalAssetId

data.uuid

asset.assetHeader.vendorAssetId

name

asset.assetDetail.name

data.created

asset.assetDetail.sourceCreatedAt

data.updated

asset.assetDetail.sourceUpdatedAt

cloudAccountId

asset.assetDetail.cloudInfo.accountId

region

asset.assetDetail.cloudInfo.region

data.tags[].key

asset.assetDetail.externalTags[].key

data.tags[].value

asset.assetDetail.externalTags[].value

region

asset.assetDetail.networkAssetClass.location

data.subnetId

asset.assetDetail.networkAssetClass.subnetId

data.vpcId

asset.assetDetail.networkAssetClass.vpcId

data.privateIpAddresses[].privateDnsName

asset.assetDetail.networkAssetClass.interfaces[].privateDnsName

data.privateIpAddresses[].privateIpAddress

asset.assetDetail.networkAssetClass.interfaces[].privateIpv4Address[&1]

resourceId

asset.assetDetail.typedAttributes.resourceId

accountAlias

asset.assetDetail.typedAttributes.accountAlias

data.status

asset.assetDetail.typedAttributes.status

data.instanceId

asset.assetDetail.typedAttributes.instanceId

data.attachmentStatus

asset.assetDetail.typedAttributes.attachmentStatus

data.attachmentId

asset.assetDetail.typedAttributes.attachmentId

data.availabilityZone

asset.assetDetail.typedAttributes.availabilityZone

data.description

asset.assetDetail.typedAttributes.description

data.macAddress

asset.assetDetail.typedAttributes.macAddress

data.natEnabled

asset.assetDetail.typedAttributes.natEnabled

data.privateIpAddress

asset.assetDetail.typedAttributes.privateIpAddress

data.privateDnsName

asset.assetDetail.typedAttributes.privateDnsName

data.interfaceType

asset.assetDetail.typedAttributes.interfaceType

data.attachTime

asset.assetDetail.typedAttributes.attachTime

data.firstDiscoveredOn

asset.assetDetail.typedAttributes.firstDiscoveredOn

data.lastDiscoveredOn

asset.assetDetail.typedAttributes.lastDiscoveredOn

data.requesterId

asset.assetDetail.typedAttributes.requesterId

data.requesterManaged

asset.assetDetail.untypedAttributes.requesterManaged

data.sourceDestCheck

asset.assetDetail.untypedAttributes.sourceDestCheck

data.operatorManaged

asset.assetDetail.untypedAttributes.operatorManaged

data.deviceIndex

asset.assetDetail.untypedAttributes.deviceIndex

data.networkCardIndex

asset.assetDetail.untypedAttributes.networkCardIndex

data.ownerId

asset.assetDetail.untypedAttributes.ownerId

data.instanceOwnerId

asset.assetDetail.untypedAttributes.instanceOwnerId

data.ipv4Prefix

asset.assetDetail.untypedAttributes.ipv4Prefix

data.ipv6Addresses

asset.assetDetail.untypedAttributes.ipv6Addresses

data.privateIpAddresses

asset.assetDetail.untypedAttributes.privateIpAddresses

notDiscoveredInLast7Days

asset.assetDetail.untypedAttributes.notDiscoveredInLast7Days

controlsFailed

asset.assetDetail.untypedAttributes.controlsFailed

connectorUuids

asset.assetDetail.untypedAttributes.connectorUuids

qualysTags

asset.assetDetail.untypedAttributes.qualysTags

AWS Load balancer MapAWS Load balancer Map

Source Field Target Field

aws-elastic-load-balancer

asset.assetHeader.assetTypeName

loadBalancerArn

asset.assetHeader.externalAssetId

uuid

asset.assetHeader.vendorAssetId

name

asset.assetDetail.name

createdOn

asset.assetDetail.sourceCreatedAt

updated

asset.assetDetail.sourceUpdatedAt

cloudType

asset.assetDetail.cloudInfo.provider

cloudAccountId

asset.assetDetail.cloudInfo.accountId

region

asset.assetDetail.cloudInfo.region

tags[].key

asset.assetDetail.externalTags[].key

tags[].value

asset.assetDetail.externalTags[].value

cloudType

asset.assetDetail.networkAssetClass.provider

region

asset.assetDetail.networkAssetClass.location

vpcid

asset.assetDetail.networkAssetClass.vpcId

dnsName

asset.assetDetail.networkAssetClass.serviceName

resourceType

asset.assetDetail.typedAttributes.resourceType

connectorUuid

asset.assetDetail.typedAttributes.connectorUuid

accountAlias

asset.assetDetail.typedAttributes.accountAlias

name

asset.assetDetail.typedAttributes.name

loadBalancerArn

asset.assetDetail.typedAttributes.loadBalancerArn

scheme

asset.assetDetail.typedAttributes.scheme

state

asset.assetDetail.typedAttributes.state

type

asset.assetDetail.typedAttributes.type

ipAddressType

asset.assetDetail.typedAttributes.ipAddressType

created

asset.assetDetail.typedAttributes.created

createdTime

asset.assetDetail.typedAttributes.createdTime

controlsFailed

asset.assetDetail.untypedAttributes.controlsFailed

isSnapshotScanEnabled

asset.assetDetail.untypedAttributes.isSnapshotScanEnabled

remediationEnabled

asset.assetDetail.untypedAttributes.remediationEnabled

notDiscoveredInLast7Days

asset.assetDetail.untypedAttributes.notDiscoveredInLast7Days

insightCount

asset.assetDetail.untypedAttributes.insightCount

deletedFromCloud

asset.assetDetail.untypedAttributes.deletedFromCloud

additionalDetails

asset.assetDetail.untypedAttributes.additionalDetails

qualysTags

asset.assetDetail.untypedAttributes.qualysTags

accountTags

asset.assetDetail.untypedAttributes.accountTags

connectorUuids

asset.assetDetail.untypedAttributes.connectorUuids

subnets

asset.assetDetail.untypedAttributes.subnets

availabilityZones

asset.assetDetail.untypedAttributes.availabilityZones

subnetAvailabilityZonePair

asset.assetDetail.untypedAttributes.subnetAvailabilityZonePair

listeners

asset.assetDetail.untypedAttributes.listeners

instances

asset.assetDetail.untypedAttributes.instances

securityGroups

asset.assetDetail.untypedAttributes.securityGroups

failedControlCids

asset.assetDetail.untypedAttributes.failedControlCids

AWS Route 53 Domain MapAWS Route 53 Domain Map

Source Field Target Field

generic-cloud-network-resource

asset.assetHeader.assetTypeName

cloudResourceId

asset.assetHeader.externalAssetId

uuid

asset.assetHeader.vendorAssetId

name

asset.assetDetail.name

createdOn

asset.assetDetail.sourceCreatedAt

lastUpdated

asset.assetDetail.sourceUpdatedAt

cloudType

asset.assetDetail.cloudInfo.provider

cloudAccountId

asset.assetDetail.cloudInfo.accountId

region

asset.assetDetail.cloudInfo.region

tags[].key

asset.assetDetail.externalTags[].key

tags[].value

asset.assetDetail.externalTags[].value

cloudType

asset.assetDetail.networkAssetClass.provider

region

asset.assetDetail.networkAssetClass.location

accountAlias

asset.assetDetail.typedAttributes.accountAlias

name

asset.assetDetail.typedAttributes.name

resourceType

asset.assetDetail.typedAttributes.resourceType

scanId

asset.assetDetail.typedAttributes.scanId

customerId

asset.assetDetail.typedAttributes.customerId

connectorId

asset.assetDetail.typedAttributes.connectorId

data.cloudResourceId

asset.assetDetail.typedAttributes.dataCloudResourceId

data.uuid

asset.assetDetail.typedAttributes.dataUuid

data.registrantName

asset.assetDetail.typedAttributes.registrantName

data.created

asset.assetDetail.typedAttributes.dataCreated

data.expirationDate

asset.assetDetail.typedAttributes.expirationDate

data.registrationDate

asset.assetDetail.typedAttributes.registrationDate

data.firstDiscoveredOn

asset.assetDetail.typedAttributes.firstDiscoveredOn

data.lastDiscoveredOn

asset.assetDetail.typedAttributes.lastDiscoveredOn

created

asset.assetDetail.untypedAttributes.created

notDiscoveredInLast7Days

asset.assetDetail.untypedAttributes.notDiscoveredInLast7Days

deletedFromCloud

asset.assetDetail.untypedAttributes.deletedFromCloud

data.updated

asset.assetDetail.untypedAttributes.dataUpdated

data.transferLock

asset.assetDetail.untypedAttributes.transferLock

data.adminPrivacy

asset.assetDetail.untypedAttributes.adminPrivacy

data.billingPrivacy

asset.assetDetail.untypedAttributes.billingPrivacy

data.autoRenew

asset.assetDetail.untypedAttributes.autoRenew

data.adminContactInfo

asset.assetDetail.untypedAttributes.adminContactInfo

data.billingContactInfo

asset.assetDetail.untypedAttributes.billingContactInfo

data.registrantContact

asset.assetDetail.untypedAttributes.registrantContact

data.techContactInfo

asset.assetDetail.untypedAttributes.techContactInfo

data.nameServers

asset.assetDetail.untypedAttributes.nameServers

qualysTags

asset.assetDetail.untypedAttributes.qualysTags

accountTags

asset.assetDetail.untypedAttributes.accountTags

AWS Route 53 Hosted Zone MapAWS Route 53 Hosted Zone Map

Source Field Target Field

generic-cloud-network-resource

asset.assetHeader.assetTypeName

cloudResourceId

asset.assetHeader.externalAssetId

uuid

asset.assetHeader.vendorAssetId

name

asset.assetDetail.name

createdOn

asset.assetDetail.sourceCreatedAt

data.updated

asset.assetDetail.sourceUpdatedAt

cloudType

asset.assetDetail.cloudInfo.provider

cloudAccountId

asset.assetDetail.cloudInfo.accountId

region

asset.assetDetail.cloudInfo.region

tags[].key

asset.assetDetail.externalTags[].key

tags[].value

asset.assetDetail.externalTags[].value

cloudType

asset.assetDetail.networkAssetClass.provider

region

asset.assetDetail.networkAssetClass.location

accountAlias

asset.assetDetail.typedAttributes.accountAlias

name

asset.assetDetail.typedAttributes.name

resourceType

asset.assetDetail.typedAttributes.resourceType

lastUpdated

asset.assetDetail.typedAttributes.lastUpdated

scanId

asset.assetDetail.typedAttributes.scanId

customerId

asset.assetDetail.typedAttributes.customerId

connectorId

asset.assetDetail.typedAttributes.connectorId

data.hostedZoneId

asset.assetDetail.typedAttributes.hostedZoneId

data.cloudResourceId

asset.assetDetail.typedAttributes.dataCloudResourceId

data.firstDiscoveredOn

asset.assetDetail.typedAttributes.firstDiscoveredOn

data.lastDiscoveredOn

asset.assetDetail.typedAttributes.lastDiscoveredOn

data.uuid

asset.assetDetail.typedAttributes.dataUuid

created

asset.assetDetail.untypedAttributes.created

notDiscoveredInLast7Days

asset.assetDetail.untypedAttributes.notDiscoveredInLast7Days

deletedFromCloud

asset.assetDetail.untypedAttributes.deletedFromCloud

data.privateZone

asset.assetDetail.untypedAttributes.privateZone

data.recordSetCount

asset.assetDetail.untypedAttributes.recordSetCount

data.resourceRecordSets

asset.assetDetail.untypedAttributes.resourceRecordSets

data.queryLoggingConfigs

asset.assetDetail.untypedAttributes.queryLoggingConfigs

qualysTags

asset.assetDetail.untypedAttributes.qualysTags

accountTags

asset.assetDetail.untypedAttributes.accountTags

AWS Route 53 Record MapAWS Route 53 Record Map

Source Field Target Field

generic-cloud-network-resource

asset.assetHeader.assetTypeName

cloudResourceId

asset.assetHeader.externalAssetId

uuid

asset.assetHeader.vendorAssetId

name

asset.assetDetail.name

createdOn

asset.assetDetail.sourceCreatedAt

data.updated

asset.assetDetail.sourceUpdatedAt

cloudType

asset.assetDetail.cloudInfo.provider

cloudAccountId

asset.assetDetail.cloudInfo.accountId

region

asset.assetDetail.cloudInfo.region

tags[].key

asset.assetDetail.externalTags[].key

tags[].value

asset.assetDetail.externalTags[].value

cloudType

asset.assetDetail.networkAssetClass.provider

region

asset.assetDetail.networkAssetClass.location

accountAlias

asset.assetDetail.typedAttributes.accountAlias

name

asset.assetDetail.typedAttributes.name

resourceType

asset.assetDetail.typedAttributes.resourceType

lastUpdated

asset.assetDetail.typedAttributes.lastUpdated

scanId

asset.assetDetail.typedAttributes.scanId

customerId

asset.assetDetail.typedAttributes.customerId

connectorId

asset.assetDetail.typedAttributes.connectorId

data.hostedZoneId

asset.assetDetail.typedAttributes.hostedZoneId

data.cloudResourceId

asset.assetDetail.typedAttributes.dataCloudResourceId

data.firstDiscoveredOn

asset.assetDetail.typedAttributes.firstDiscoveredOn

data.lastDiscoveredOn

asset.assetDetail.typedAttributes.lastDiscoveredOn

data.uuid

asset.assetDetail.typedAttributes.dataUuid

created

asset.assetDetail.untypedAttributes.created

notDiscoveredInLast7Days

asset.assetDetail.untypedAttributes.notDiscoveredInLast7Days

deletedFromCloud

asset.assetDetail.untypedAttributes.deletedFromCloud

data.privateZone

asset.assetDetail.untypedAttributes.privateZone

data.recordSetCount

asset.assetDetail.untypedAttributes.recordSetCount

data.resourceRecordSets

asset.assetDetail.untypedAttributes.resourceRecordSets

data.queryLoggingConfigs

asset.assetDetail.untypedAttributes.queryLoggingConfigs

qualysTags

asset.assetDetail.untypedAttributes.qualysTags

accountTags

asset.assetDetail.untypedAttributes.accountTags

AWS Route Table MapAWS Route Table Map

Source Field Target Field

generic-cloud-network-resource

asset.assetHeader.assetTypeName

region + cloudAccountId + routeTableId

asset.assetHeader.externalAssetId

uuid

asset.assetHeader.vendorAssetId

name

asset.assetDetail.name

created

asset.assetDetail.sourceCreatedAt

updated

asset.assetDetail.sourceUpdatedAt

cloudType

asset.assetDetail.cloudInfo.provider

cloudAccountId

asset.assetDetail.cloudInfo.accountId

region

asset.assetDetail.cloudInfo.region

tags[].key

asset.assetDetail.externalTags[].key

tags[].value

asset.assetDetail.externalTags[].value

cloudType

asset.assetDetail.networkAssetClass.provider

region

asset.assetDetail.networkAssetClass.location

vpcId

asset.assetDetail.networkAssetClass.vpcId

routeTableId

asset.assetDetail.networkAssetClass.routeTableId

connectorUuid

asset.assetDetail.typedAttributes.connectorUuid

createdOn

asset.assetDetail.typedAttributes.createdOn

accountAlias

asset.assetDetail.typedAttributes.accountAlias

remediationEnabled

asset.assetDetail.untypedAttributes.remediationEnabled

qualysTags

asset.assetDetail.untypedAttributes.qualysTags

additionalDetails

asset.assetDetail.untypedAttributes.additionalDetails

deletedFromCloud

asset.assetDetail.untypedAttributes.deletedFromCloud

failedControlCids

asset.assetDetail.untypedAttributes.failedControlCids

notDiscoveredInLast7Days

asset.assetDetail.untypedAttributes.notDiscoveredInLast7Days

insightCount

asset.assetDetail.untypedAttributes.insightCount

controlsFailed

asset.assetDetail.untypedAttributes.controlsFailed

isSnapshotScanEnabled

asset.assetDetail.untypedAttributes.isSnapshotScanEnabled

associations

asset.assetDetail.untypedAttributes.associations

routes

asset.assetDetail.untypedAttributes.routes

routeDtos

asset.assetDetail.untypedAttributes.routeDtos

accountTags

asset.assetDetail.untypedAttributes.accountTags

connectorUuids

asset.assetDetail.untypedAttributes.connectorUuids

AWS Subnet MapAWS Subnet Map

Source Field Target Field

generic-cloud-network-resource

asset.assetHeader.assetTypeName

region + cloudAccountId + subnetId

asset.assetHeader.externalAssetId

uuid

asset.assetHeader.vendorAssetId

name

asset.assetDetail.name

created

asset.assetDetail.sourceCreatedAt

updated

asset.assetDetail.sourceUpdatedAt

cloudType

asset.assetDetail.cloudInfo.provider

cloudAccountId

asset.assetDetail.cloudInfo.accountId

region

asset.assetDetail.cloudInfo.region

tags[].key

asset.assetDetail.externalTags[].key

tags[].value

asset.assetDetail.externalTags[].value

cloudType

asset.assetDetail.networkAssetClass.provider

region

asset.assetDetail.networkAssetClass.location

subnetId

asset.assetDetail.networkAssetClass.subnetId

name

asset.assetDetail.networkAssetClass.subnetName

vpcId

asset.assetDetail.networkAssetClass.vpcId

cidrBlock

asset.assetDetail.networkAssetClass.addressRanges[&1]

resourceId

asset.assetDetail.typedAttributes.resourceId

connectorUuid

asset.assetDetail.typedAttributes.connectorUuid

createdOn

asset.assetDetail.typedAttributes.createdOn

availabilityZone

asset.assetDetail.typedAttributes.availabilityZone

remediationEnabled

asset.assetDetail.untypedAttributes.remediationEnabled

qualysTags

asset.assetDetail.untypedAttributes.qualysTags

additionalDetails

asset.assetDetail.untypedAttributes.additionalDetails

deletedFromCloud

asset.assetDetail.untypedAttributes.deletedFromCloud

failedControlCids

asset.assetDetail.untypedAttributes.failedControlCids

notDiscoveredInLast7Days

asset.assetDetail.untypedAttributes.notDiscoveredInLast7Days

controlsFailed

asset.assetDetail.untypedAttributes.controlsFailed

isSnapshotScanEnabled

asset.assetDetail.untypedAttributes.isSnapshotScanEnabled

mapPublicIpOnLaunch

asset.assetDetail.untypedAttributes.mapPublicIpOnLaunch

assignIpv6AddressOnCreation

asset.assetDetail.untypedAttributes.assignIpv6AddressOnCreation

defaultForAz

asset.assetDetail.untypedAttributes.defaultForAz

availableIpAddressCount

asset.assetDetail.untypedAttributes.availableIpAddressCount

ipv6CidrBlockAssociationSet

asset.assetDetail.untypedAttributes.ipv6CidrBlockAssociationSet

connectorUuids

asset.assetDetail.untypedAttributes.connectorUuids

AWS Transit Gateway MapAWS Transit Gateway Map

Source Field Target Field

aws-transit-gateway

asset.assetHeader.assetTypeName

region + accountId + resourceId

asset.assetHeader.externalAssetId

uuid

asset.assetHeader.vendorAssetId

name

asset.assetDetail.name

firstDiscovered

asset.assetDetail.sourceCreatedAt

updated

asset.assetDetail.sourceUpdatedAt

cloudType

asset.assetDetail.cloudInfo.provider

accountId

asset.assetDetail.cloudInfo.accountId

region

asset.assetDetail.cloudInfo.region

tags[].key

asset.assetDetail.externalTags[].key

tags[].value

asset.assetDetail.externalTags[].value

cloudType

asset.assetDetail.networkAssetClass.provider

region

asset.assetDetail.networkAssetClass.location

resourceId

asset.assetDetail.networkAssetClass.gatewayId

resourceName

asset.assetDetail.networkAssetClass.gatewayName

customerUuid

asset.assetDetail.typedAttributes.customerUuid

connectorUuid

asset.assetDetail.typedAttributes.connectorUuid

scanUuid

asset.assetDetail.typedAttributes.scanUuid

controlFailedCount

asset.assetDetail.untypedAttributes.controlFailedCount

deletedFromCloud

asset.assetDetail.untypedAttributes.deletedFromCloud

notDiscoveredInLast7Days

asset.assetDetail.untypedAttributes.notDiscoveredInLast7Days

AWS VPC Endpoint MapAWS VPC Endpoint Map

Source Field Target Field

aws-privatelink

asset.assetHeader.assetTypeName

data.cloudResourceId

asset.assetHeader.externalAssetId

data.uuid

asset.assetHeader.vendorAssetId

name

asset.assetDetail.name

data.created

asset.assetDetail.sourceCreatedAt

data.updated

asset.assetDetail.sourceUpdatedAt

cloudAccountId

asset.assetDetail.cloudInfo.accountId

region

asset.assetDetail.cloudInfo.region

data.tags[].key

asset.assetDetail.externalTags[].key

data.tags[].value

asset.assetDetail.externalTags[].value

data.serviceName

asset.assetDetail.networkAssetClass.serviceName

region

asset.assetDetail.networkAssetClass.location

data.vpcId

asset.assetDetail.networkAssetClass.vpcId

resourceId

asset.assetDetail.typedAttributes.resourceId

accountAlias

asset.assetDetail.typedAttributes.accountAlias

data.state

asset.assetDetail.typedAttributes.state

data.vpcEndpointType

asset.assetDetail.typedAttributes.vpcEndpointType

data.dnsOption

asset.assetDetail.typedAttributes.dnsOption

data.ipAddressType

asset.assetDetail.typedAttributes.ipAddressType

data.firstDiscoveredOn

asset.assetDetail.typedAttributes.firstDiscoveredOn

data.lastDiscoveredOn

asset.assetDetail.typedAttributes.lastDiscoveredOn

data.requesterManaged

asset.assetDetail.untypedAttributes.requesterManaged

data.privateDnsEnabled

asset.assetDetail.untypedAttributes.privateDnsEnabled

data.networkInterfaceIds

asset.assetDetail.untypedAttributes.networkInterfaceIds

data.dnsEntrySets

asset.assetDetail.untypedAttributes.dnsEntrySets

data.securityGroupSet

asset.assetDetail.untypedAttributes.securityGroupSet

data.policyDocument

asset.assetDetail.untypedAttributes.policyDocument

controlsFailed

asset.assetDetail.untypedAttributes.controlsFailed

connectorUuids

asset.assetDetail.untypedAttributes.connectorUuids

qualysTags

asset.assetDetail.untypedAttributes.qualysTags

AWS VPC Endpoint Service MapAWS VPC Endpoint Service Map

Source Field Target Field

aws-privatelink

asset.assetHeader.assetTypeName

data.cloudResourceId

asset.assetHeader.externalAssetId

data.uuid

asset.assetHeader.vendorAssetId

name

asset.assetDetail.name

data.created

asset.assetDetail.sourceCreatedAt

data.updated

asset.assetDetail.sourceUpdatedAt

cloudAccountId

asset.assetDetail.cloudInfo.accountId

region

asset.assetDetail.cloudInfo.region

data.tags[].key

asset.assetDetail.externalTags[].key

data.tags[].value

asset.assetDetail.externalTags[].value

data.serviceTypes

asset.assetDetail.networkAssetClass.serviceName

region

asset.assetDetail.networkAssetClass.location

resourceId

asset.assetDetail.typedAttributes.resourceId

accountAlias

asset.assetDetail.typedAttributes.accountAlias

data.privateDnsName

asset.assetDetail.typedAttributes.privateDnsName

data.privateDnsNameVerificationState

asset.assetDetail.typedAttributes.privateDnsNameVerificationState

data.firstDiscoveredOn

asset.assetDetail.typedAttributes.firstDiscoveredOn

data.lastDiscoveredOn

asset.assetDetail.typedAttributes.lastDiscoveredOn

data.acceptanceRequired

asset.assetDetail.untypedAttributes.acceptanceRequired

data.vpcEndpointPolicySupported

asset.assetDetail.untypedAttributes.vpcEndpointPolicySupported

data.managesVpcEndpoints

asset.assetDetail.untypedAttributes.managesVpcEndpoints

data.owner

asset.assetDetail.untypedAttributes.owner

data.supportedIpAddressType

asset.assetDetail.untypedAttributes.supportedIpAddressType

data.availabilityZone

asset.assetDetail.untypedAttributes.availabilityZone

data.baseEndpointDnsName

asset.assetDetail.untypedAttributes.baseEndpointDnsName

controlsFailed

asset.assetDetail.untypedAttributes.controlsFailed

connectorUuids

asset.assetDetail.untypedAttributes.connectorUuids

qualysTags

asset.assetDetail.untypedAttributes.qualysTags

AWS VPC MapAWS VPC Map

Source Field Target Field

aws-virtual-private-cloud

asset.assetHeader.assetTypeName

region + cloudAccountId + vpcId

asset.assetHeader.externalAssetId

uuid

asset.assetHeader.vendorAssetId

name

asset.assetDetail.name

created

asset.assetDetail.sourceCreatedAt

updated

asset.assetDetail.sourceUpdatedAt

cloudType

asset.assetDetail.cloudInfo.provider

cloudAccountId

asset.assetDetail.cloudInfo.accountId

region

asset.assetDetail.cloudInfo.region

tags[].key

asset.assetDetail.externalTags[].key

tags[].value

asset.assetDetail.externalTags[].value

cloudType

asset.assetDetail.networkAssetClass.provider

region

asset.assetDetail.networkAssetClass.location

vpcId

asset.assetDetail.networkAssetClass.vpcId

name

asset.assetDetail.networkAssetClass.vpcName

cidrBlock

asset.assetDetail.networkAssetClass.addressRanges[&1]

resourceId

asset.assetDetail.typedAttributes.resourceId

instanceTenancy

asset.assetDetail.typedAttributes.instanceTenancy

connectorUuid

asset.assetDetail.typedAttributes.connectorUuid

createdOn

asset.assetDetail.typedAttributes.createdOn

accountAlias

asset.assetDetail.typedAttributes.accountAlias

remediationEnabled

asset.assetDetail.untypedAttributes.remediationEnabled

qualysTags

asset.assetDetail.untypedAttributes.qualysTags

additionalDetails

asset.assetDetail.untypedAttributes.additionalDetails

deletedFromCloud

asset.assetDetail.untypedAttributes.deletedFromCloud

failedControlCids

asset.assetDetail.untypedAttributes.failedControlCids

notDiscoveredInLast7Days

asset.assetDetail.untypedAttributes.notDiscoveredInLast7Days

controlsFailed

asset.assetDetail.untypedAttributes.controlsFailed

isSnapshotScanEnabled

asset.assetDetail.untypedAttributes.isSnapshotScanEnabled

isDefault

asset.assetDetail.untypedAttributes.isDefault

ipv6CidrBlockAssociationSet

asset.assetDetail.untypedAttributes.ipv6CidrBlockAssociationSet

connectorUuids

asset.assetDetail.untypedAttributes.connectorUuids

Azure Security Group MapAzure Security Group Map

Source Field Target Field

azure-firewall

asset.assetHeader.assetTypeName

resourceId

asset.assetHeader.externalAssetId

uuid

asset.assetHeader.vendorAssetId

name

asset.assetDetail.name

created

asset.assetDetail.sourceCreatedAt

updated

asset.assetDetail.sourceUpdatedAt

cloudType

asset.assetDetail.cloudInfo.provider

subscriptionId

asset.assetDetail.cloudInfo.accountId

region

asset.assetDetail.cloudInfo.region

tags[].name

asset.assetDetail.externalTags[].key

tags[].value

asset.assetDetail.externalTags[].value

cloudType

asset.assetDetail.networkAssetClass.provider

region

asset.assetDetail.networkAssetClass.location

networkInterfaces[].id

asset.assetDetail.networkAssetClass.interfaces[].id

subnets[0].id

asset.assetDetail.networkAssetClass.subnetId

subnets[0].name

asset.assetDetail.networkAssetClass.subnetName

resourceId

asset.assetDetail.typedAttributes.resourceId

resourceGroupName

asset.assetDetail.typedAttributes.resourceGroupName

type

asset.assetDetail.typedAttributes.type

scanUuid

asset.assetDetail.typedAttributes.scanUuid

connectorUuid

asset.assetDetail.typedAttributes.connectorUuid

customerId

asset.assetDetail.typedAttributes.customerId

key

asset.assetDetail.typedAttributes.key

isSnapshotScanEnabled

asset.assetDetail.untypedAttributes.isSnapshotScanEnabled

controlsFailed

asset.assetDetail.untypedAttributes.controlsFailed

inboundSecurityRules

asset.assetDetail.untypedAttributes.inboundSecurityRules

outboundSecurityRules

asset.assetDetail.untypedAttributes.outboundSecurityRules

subnets

asset.assetDetail.untypedAttributes.subnets

connectorUuids

asset.assetDetail.untypedAttributes.connectorUuids

customers

asset.assetDetail.untypedAttributes.customers

Azure Virtual Network MapAzure Virtual Network Map

Source Field Target Field

azure-virtual-network

asset.assetHeader.assetTypeName

resourceId

asset.assetHeader.externalAssetId

uuid

asset.assetHeader.vendorAssetId

name

asset.assetDetail.name

created

asset.assetDetail.sourceCreatedAt

updated

asset.assetDetail.sourceUpdatedAt

cloudType

asset.assetDetail.cloudInfo.provider

subscriptionId

asset.assetDetail.cloudInfo.accountId

region

asset.assetDetail.cloudInfo.region

tags[].name

asset.assetDetail.externalTags[].key

tags[].value

asset.assetDetail.externalTags[].value

cloudType

asset.assetDetail.networkAssetClass.provider

region

asset.assetDetail.networkAssetClass.location

resourceId

asset.assetDetail.networkAssetClass.vpcId

name

asset.assetDetail.networkAssetClass.vpcName

addressPrefixes[]

asset.assetDetail.networkAssetClass.addressRanges[]

subnets[0].id

asset.assetDetail.networkAssetClass.subnetId

subnets[0].name

asset.assetDetail.networkAssetClass.subnetName

resourceId

asset.assetDetail.typedAttributes.resourceId

resourceGroupName

asset.assetDetail.typedAttributes.resourceGroupName

type

asset.assetDetail.typedAttributes.type

scanUuid

asset.assetDetail.typedAttributes.scanUuid

connectorUuid

asset.assetDetail.typedAttributes.connectorUuid

customerId

asset.assetDetail.typedAttributes.customerId

isSnapshotScanEnabled

asset.assetDetail.untypedAttributes.isSnapshotScanEnabled

controlsFailed

asset.assetDetail.untypedAttributes.controlsFailed

connectorUuids

asset.assetDetail.untypedAttributes.connectorUuids

customers

asset.assetDetail.untypedAttributes.customers

addressSpaces

asset.assetDetail.untypedAttributes.addressSpaces

dnsServerIPs

asset.assetDetail.untypedAttributes.dnsServerIPs

dnsServers

asset.assetDetail.untypedAttributes.dnsServers

subnets

asset.assetDetail.untypedAttributes.subnets

GCP Firewall MapGCP Firewall Map

Source Field Target Field

generic-cloud-network-resource

asset.assetHeader.assetTypeName

projectId + name

asset.assetHeader.externalAssetId

uuid

asset.assetHeader.vendorAssetId

name

asset.assetDetail.name

created

asset.assetDetail.sourceCreatedAt

updated

asset.assetDetail.sourceUpdatedAt

cloudType

asset.assetDetail.cloudInfo.provider

projectId

asset.assetDetail.cloudInfo.accountId

cloudType

asset.assetDetail.networkAssetClass.provider

network

asset.assetDetail.networkAssetClass.vpcName

sourceRanges[]

asset.assetDetail.networkAssetClass.addressRanges[]

resourceId

asset.assetDetail.typedAttributes.resourceId

kind

asset.assetDetail.typedAttributes.kind

projectId

asset.assetDetail.typedAttributes.projectId

scanUuid

asset.assetDetail.typedAttributes.scanUuid

connectorUuid

asset.assetDetail.typedAttributes.connectorUuid

customerId

asset.assetDetail.typedAttributes.customerId

creationTimeStamp

asset.assetDetail.typedAttributes.creationTimeStamp

controlsFailed

asset.assetDetail.untypedAttributes.controlsFailed

connectorUuids

asset.assetDetail.untypedAttributes.connectorUuids

customers

asset.assetDetail.untypedAttributes.customers

targetTags

asset.assetDetail.untypedAttributes.targetTags

allowed

asset.assetDetail.untypedAttributes.allowed

GCP Load balancer MapGCP Load balancer Map

Source Field Target Field

gcp-load-balancer

asset.assetHeader.assetTypeName

projectId + data.region + displayName

asset.assetHeader.externalAssetId

data.uuid

asset.assetHeader.vendorAssetId

name

asset.assetDetail.name

data.created

asset.assetDetail.sourceCreatedAt

data.updated

asset.assetDetail.sourceUpdatedAt

projectId

asset.assetDetail.cloudInfo.accountId

data.region

asset.assetDetail.cloudInfo.region

data.region

asset.assetDetail.networkAssetClass.location

data.network

asset.assetDetail.networkAssetClass.vpcName

resourceId

asset.assetDetail.typedAttributes.resourceId

connectorId

asset.assetDetail.typedAttributes.connectorId

scanId

asset.assetDetail.typedAttributes.scanId

customerId

asset.assetDetail.typedAttributes.customerId

resourceType

asset.assetDetail.typedAttributes.resourceType

data.loadBalancingScheme

asset.assetDetail.typedAttributes.loadBalancingScheme

data.IPProtocol

asset.assetDetail.typedAttributes.IPProtocol

data.IPAddress

asset.assetDetail.typedAttributes.IPAddress

data.portRange

asset.assetDetail.typedAttributes.portRange

data.forwardingRuleTarget

asset.assetDetail.typedAttributes.forwardingRuleTarget

data.forwardingRuleTargetId

asset.assetDetail.typedAttributes.forwardingRuleTargetId

data.backendService

asset.assetDetail.typedAttributes.backendService

data.backendServiceId

asset.assetDetail.typedAttributes.backendServiceId

data.network

asset.assetDetail.typedAttributes.network

data.subnetwork

asset.assetDetail.typedAttributes.subnetwork

data.firstDiscoveredOn

asset.assetDetail.typedAttributes.firstDiscoveredOn

data.lastDiscoveredOn

asset.assetDetail.typedAttributes.lastDiscoveredOn

notDiscoveredInLast7Days

asset.assetDetail.untypedAttributes.notDiscoveredInLast7Days

qualysTags

asset.assetDetail.untypedAttributes.qualysTags

data.ports

asset.assetDetail.untypedAttributes.ports

GCP Network MapGCP Network Map

Source Field Target Field

gcp-virtual-private-cloud

asset.assetHeader.assetTypeName

projectId + name

asset.assetHeader.externalAssetId

uuid

asset.assetHeader.vendorAssetId

name

asset.assetDetail.name

created

asset.assetDetail.sourceCreatedAt

updated

asset.assetDetail.sourceUpdatedAt

cloudType

asset.assetDetail.cloudInfo.provider

projectId

asset.assetDetail.cloudInfo.accountId

cloudType

asset.assetDetail.networkAssetClass.provider

name

asset.assetDetail.networkAssetClass.vpcName

resourceId

asset.assetDetail.typedAttributes.resourceId

kind

asset.assetDetail.typedAttributes.kind

scanUuid

asset.assetDetail.typedAttributes.scanUuid

connectorUuid

asset.assetDetail.typedAttributes.connectorUuid

customerId

asset.assetDetail.typedAttributes.customerId

creationTimeStamp

asset.assetDetail.typedAttributes.creationTimeStamp

controlsFailed

asset.assetDetail.untypedAttributes.controlsFailed

subnetworks

asset.assetDetail.untypedAttributes.subnetworks

connectorUuids

asset.assetDetail.untypedAttributes.connectorUuids

customers

asset.assetDetail.untypedAttributes.customers

GCP Subnetwork MapGCP Subnetwork Map

Source Field Target Field

generic-cloud-network-resource

asset.assetHeader.assetTypeName

projectId + region + name

asset.assetHeader.externalAssetId

uuid

asset.assetHeader.vendorAssetId

name

asset.assetDetail.name

created

asset.assetDetail.sourceCreatedAt

updated

asset.assetDetail.sourceUpdatedAt

cloudType

asset.assetDetail.cloudInfo.provider

projectId

asset.assetDetail.cloudInfo.accountId

region

asset.assetDetail.cloudInfo.region

cloudType

asset.assetDetail.networkAssetClass.provider

region

asset.assetDetail.networkAssetClass.location

name

asset.assetDetail.networkAssetClass.subnetName

network

asset.assetDetail.networkAssetClass.vpcName

ipCidrRange

asset.assetDetail.networkAssetClass.addressRanges[&1]

resourceId

asset.assetDetail.typedAttributes.resourceId

kind

asset.assetDetail.typedAttributes.kind

scanUuid

asset.assetDetail.typedAttributes.scanUuid

connectorUuid

asset.assetDetail.typedAttributes.connectorUuid

customerId

asset.assetDetail.typedAttributes.customerId

creationTimeStamp

asset.assetDetail.typedAttributes.creationTimeStamp

type

asset.assetDetail.typedAttributes.type

ipv6Prefix

asset.assetDetail.typedAttributes.ipv6Prefix

ipv6AccessType

asset.assetDetail.typedAttributes.ipv6AccessType

controlsFailed

asset.assetDetail.untypedAttributes.controlsFailed

connectorUuids

asset.assetDetail.untypedAttributes.connectorUuids

customers

asset.assetDetail.untypedAttributes.customers

OCI Load Balancer MapOCI Load Balancer Map

Source Field Target Field

oci-load-balancer

asset.assetHeader.assetTypeName

resourceId

asset.assetHeader.externalAssetId

data.uuid

asset.assetHeader.vendorAssetId

name

asset.assetDetail.name

data.created

asset.assetDetail.sourceCreatedAt

data.updated

asset.assetDetail.sourceUpdatedAt

resourceId

asset.assetDetail.cloudInfo.accountId

tenantId

asset.assetDetail.cloudInfo.accountName

region

asset.assetDetail.cloudInfo.region

data.ociTags[].key

asset.assetDetail.externalTags[].key

data.ociTags[].value

asset.assetDetail.externalTags[].value

region

asset.assetDetail.networkAssetClass.location

resourceId

asset.assetDetail.typedAttributes.resourceId

connectorId

asset.assetDetail.typedAttributes.connectorId

scanId

asset.assetDetail.typedAttributes.scanId

customerId

asset.assetDetail.typedAttributes.customerId

resourceType

asset.assetDetail.typedAttributes.resourceType

data.compartmentId

asset.assetDetail.typedAttributes.compartmentId

data.shapeName

asset.assetDetail.typedAttributes.shapeName

data.lifecycleState

asset.assetDetail.typedAttributes.lifecycleState

data.firstDiscoveredOn

asset.assetDetail.typedAttributes.firstDiscoveredOn

data.lastDiscoveredOn

asset.assetDetail.typedAttributes.lastDiscoveredOn

data.isDeleteProtectionEnabled

asset.assetDetail.typedAttributes.isDeleteProtectionEnabled

notDiscoveredInLast7Days

asset.assetDetail.untypedAttributes.notDiscoveredInLast7Days

data.isLoadbalancerPrivate

asset.assetDetail.untypedAttributes.isLoadbalancerPrivate

qualysTags

asset.assetDetail.untypedAttributes.qualysTags

data.ipAddress

asset.assetDetail.untypedAttributes.ipAddress

OCI Security List mapOCI Security List map

Source Field Target Field

oci-network-firewall

asset.assetHeader.assetTypeName

resourceId

asset.assetHeader.externalAssetId

uuid

asset.assetHeader.vendorAssetId

name

asset.assetDetail.name

creationDate

asset.assetDetail.sourceCreatedAt

updated

asset.assetDetail.sourceUpdatedAt

cloudType

asset.assetDetail.cloudInfo.provider

cloudAccountId

asset.assetDetail.cloudInfo.accountId

tenantId

asset.assetDetail.cloudInfo.accountName

region

asset.assetDetail.cloudInfo.region

availabilityDomain

asset.assetDetail.cloudInfo.availabilityZone

ociTags[].key

asset.assetDetail.externalTags[].key

ociTags[].value

asset.assetDetail.externalTags[].value

region

asset.assetDetail.networkAssetClass.location

vcnId

asset.assetDetail.networkAssetClass.vpcId

resourceId

asset.assetDetail.typedAttributes.resourceId

connectorId

asset.assetDetail.typedAttributes.connectorId

customerId

asset.assetDetail.typedAttributes.customerId

scanId

asset.assetDetail.typedAttributes.scanId

lifecycleState

asset.assetDetail.typedAttributes.lifecycleState

type

asset.assetDetail.typedAttributes.type

controlsFailed

asset.assetDetail.untypedAttributes.controlsFailed

firstDiscoveredOn

asset.assetDetail.untypedAttributes.firstDiscoveredOn

connectorUuids

asset.assetDetail.untypedAttributes.connectorUuids

customers

asset.assetDetail.untypedAttributes.customers

scanUuids

asset.assetDetail.untypedAttributes.scanUuids

tagIds

asset.assetDetail.untypedAttributes.tagIds

compartment

asset.assetDetail.untypedAttributes.compartment

Misconfiguration Maps

GCP Cloud Function Misconfig MapGCP Cloud Function Misconfig Map

Source Field Target Field
gcp-cloud-function asset.assetHeader.assetTypeName
cloudType asset.assetDetail.cloudInfo.provider
projectId asset.assetDetail.cloudInfo.accountId
resourceId asset.assetHeader.externalAssetId
uuid asset.assetHeader.vendorAssetId
name asset.assetDetail.name
region asset.assetDetail.cloudInfo.region
tags[].name asset.assetDetail.externalTags[].key
tags[].value asset.assetDetail.externalTags[].value
status asset.assetHeader.status
runtime asset.assetDetail.ServerlessAssetClass.runtime
eventTrigger.url asset.assetDetail.ServerlessAssetClass.functionURL
triggerType asset.assetDetail.ServerlessAssetClass.Trigger.type
created asset.assetDetail.sourceCreatedAt
updated asset.assetDetail.sourceUpdatedAt
evaluations[].cid findingGroup.findings[].asset.internalAssetId
evaluations[].resourceId findingGroup.findings[].asset.assetName
resourceId findingGroup.findings[].asset.externalAssetId
evaluations[].uuid findingGroup.findings[].externalFindingId
evaluations[].criticality findingGroup.findings[].severity
evaluations[].result findingGroup.findings[].findingStatus
evaluations[].evaluationDates.firstEvaluated findingGroup.findings[].firstFoundOn
evaluations[].evaluationDates.lastEvaluated findingGroup.findings[].lastFoundOn
evaluations[].evaluationDates.dateReopen findingGroup.findings[].reopenedOn
evaluations[].evaluationDates.dateFixed findingGroup.findings[].lastFixedOn
evaluations[].cid findingGroup.findings[].findingType.misconfiguration.policy.control.id
evaluations[].evidences findingGroup.findings[].detectionResult
evaluations[].controlName findingGroup.findings[].name
evaluations[].controlName findingGroup.findings[].findingType.misconfiguration.policy.title

GCP VM Instance Misconfig MapGCP VM Instance Misconfig Map

Source Field Target Field
gcp-compute-instance asset.assetHeader.assetTypeName
projectId asset.assetHeader.externalAssetId
uuid asset.assetHeader.vendorAssetId
name asset.assetDetail.name
created asset.assetDetail.sourceCreatedAt
updated asset.assetDetail.sourceUpdatedAt
cloudType asset.assetDetail.cloudInfo.provider
projectId asset.assetDetail.cloudInfo.accountId
region asset.assetDetail.cloudInfo.region
zone asset.assetDetail.cloudInfo.availabilityZone
labels[].name asset.assetDetail.externalTags[].key
labels[].value asset.assetDetail.externalTags[].value
name asset.assetDetail.computeAssetClass.cloudInstance.hostname
name asset.assetDetail.computeAssetClass.cloudInstance.id
status asset.assetDetail.computeAssetClass.cloudInstance.state
machineType asset.assetDetail.computeAssetClass.cloudInstance.type
privateIpAddress asset.assetDetail.computeAssetClass.cloudInstance.privateIpv4Address
externalIpAddress asset.assetDetail.computeAssetClass.cloudInstance.publicIpv4Address
privateIpv6Address asset.assetDetail.computeAssetClass.cloudInstance.privateIpv6Address
publicIpv6Address asset.assetDetail.computeAssetClass.cloudInstance.publicIpv6Address
networkInterfaces[].name asset.assetDetail.network[].interfaceName
networkInterfaces[].networkIP asset.assetDetail.network[].ipv4Addresses
resourceId asset.assetDetail.typedAttributes.resourceId
kind asset.assetDetail.typedAttributes.kind
projectNumber asset.assetDetail.typedAttributes.projectNumber
scanUuid asset.assetDetail.typedAttributes.scanUuid
connectorUuid asset.assetDetail.typedAttributes.connectorUuid
customerId asset.assetDetail.typedAttributes.customerId
description asset.assetDetail.typedAttributes.description
controlsFailed asset.assetDetail.untypedAttributes.controlsFailed
qualysTags asset.assetDetail.untypedAttributes.qualysTags
notDiscoveredInLast7Days asset.assetDetail.untypedAttributes.notDiscoveredInLast7Days
type asset.assetDetail.untypedAttributes.type
tags asset.assetDetail.untypedAttributes.tags
imageData asset.assetDetail.untypedAttributes.imageData
customers asset.assetDetail.untypedAttributes.customers
connectorUuids asset.assetDetail.untypedAttributes.connectorUuids
evaluations[].cid findingGroup.findings[].asset.internalAssetId
evaluations[].resourceId findingGroup.findings[].asset.assetName
projectId findingGroup.findings[].asset.externalAssetId
evaluations[].uuid findingGroup.findings[].externalFindingId
evaluations[].criticality findingGroup.findings[].severity
evaluations[].result findingGroup.findings[].findingStatus
evaluations[].evaluationDates.firstEvaluated findingGroup.findings[].firstFoundOn
evaluations[].evaluationDates.lastEvaluated findingGroup.findings[].lastFoundOn
evaluations[].evaluationDates.dateReopen findingGroup.findings[].reopenedOn
evaluations[].evaluationDates.dateFixed findingGroup.findings[].lastFixedOn
evaluations[].cid findingGroup.findings[].findingType.misconfiguration.policy.control.id
evaluations[].evidences findingGroup.findings[].detectionResult
evaluations[].controlName findingGroup.findings[].name
evaluations[].controlName findingGroup.findings[].findingType.misconfiguration.policy.title

OCI Bucket Misconfig MapOCI Bucket Misconfig Map

Source Field Target Field
oci-object-storage asset.assetHeader.assetTypeName
resourceId asset.assetHeader.externalAssetId
uuid asset.assetHeader.vendorAssetId
name asset.assetDetail.name
creationDate asset.assetDetail.sourceCreatedAt
updated asset.assetDetail.sourceUpdatedAt
cloudType asset.assetDetail.cloudInfo.provider
resourceType asset.assetDetail.storageAssetClass.type
cloudAccountId asset.assetDetail.cloudInfo.accountId
tenantId asset.assetDetail.cloudInfo.accountName
region asset.assetDetail.cloudInfo.region
ociTags[].key asset.assetDetail.externalTags[].key
ociTags[].value asset.assetDetail.externalTags[].value
cloudType asset.assetDetail.storageAssetClass.provider
region asset.assetDetail.storageAssetClass.region
defaultStorageTier asset.assetDetail.storageAssetClass.tier
encryptionKey asset.assetDetail.storageAssetClass.encryption.type
emitObjectEvents asset.assetDetail.storageAssetClass.snapshotEnabled
namespace asset.assetDetail.typedAttributes.namespace
objectVersioning asset.assetDetail.typedAttributes.objectVersioning
visibility asset.assetDetail.typedAttributes.visibility
autoTiering asset.assetDetail.typedAttributes.autoTiering
availabilityDomain asset.assetDetail.typedAttributes.availabilityDomain
lifecycleState asset.assetDetail.typedAttributes.lifecycleState
compartment asset.assetDetail.untypedAttributes.compartment
ociId asset.assetDetail.typedAttributes.ociId
tenancyName asset.assetDetail.typedAttributes.tenancyName
createdBy asset.assetDetail.typedAttributes.createdBy
firstDiscoveredOn asset.assetDetail.typedAttributes.firstDiscoveredOn
connectorUuid asset.assetDetail.typedAttributes.connectorUuid
connectorSource asset.assetDetail.typedAttributes.connectorSource
lastUpdated asset.assetDetail.typedAttributes.lastUpdated
notDiscoveredInLast7Days asset.assetDetail.typedAttributes.notDiscoveredInLast7Days
controlsFailed asset.assetDetail.untypedAttributes.controlsFailed
qualysTags asset.assetDetail.untypedAttributes.qualysTags
connectorUuids asset.assetDetail.untypedAttributes.connectorUuids
scanUuids asset.assetDetail.untypedAttributes.scanUuids
tagIds asset.assetDetail.untypedAttributes.tagIds
customers asset.assetDetail.untypedAttributes.customers
customerId asset.assetDetail.typedAttributes.customerId
scanId asset.assetDetail.typedAttributes.scanId
connectorId asset.assetDetail.typedAttributes.connectorId
evaluations[].cid findingGroup.findings[].asset.internalAssetId
evaluations[].resourceId findingGroup.findings[].asset.assetName
resourceId findingGroup.findings[].asset.externalAssetId
evaluations[].uuid findingGroup.findings[].externalFindingId
evaluations[].criticality findingGroup.findings[].severity
evaluations[].result findingGroup.findings[].findingStatus
evaluations[].evaluationDates.firstEvaluated findingGroup.findings[].firstFoundOn
evaluations[].evaluationDates.lastEvaluated findingGroup.findings[].lastFoundOn
evaluations[].evaluationDates.dateReopen findingGroup.findings[].reopenedOn
evaluations[].evaluationDates.dateFixed findingGroup.findings[].lastFixedOn
evaluations[].cid findingGroup.findings[].findingType.misconfiguration.policy.control.id
evaluations[].evidences findingGroup.findings[].detectionResult
evaluations[].controlName findingGroup.findings[].name
evaluations[].controlName findingGroup.findings[].findingType.misconfiguration.policy.title

OCI IAM User Misconfig MapOCI IAM User Misconfig Map

Source Field Target Field
user-identity asset.assetHeader.assetTypeName
resourceId asset.assetHeader.externalAssetId
uuid asset.assetHeader.vendorAssetId
name asset.assetDetail.name
creationDate asset.assetDetail.sourceCreatedAt
updated asset.assetDetail.sourceUpdatedAt
cloudType asset.assetDetail.cloudInfo.provider
cloudAccountId asset.assetDetail.cloudInfo.accountId
tenantId asset.assetDetail.cloudInfo.accountName
region asset.assetDetail.cloudInfo.region
ociTags[].key asset.assetDetail.externalTags[].key
ociTags[].value asset.assetDetail.externalTags[].value
isMfaActivated asset.assetDetail.userAssetClass.mfaEnabled
lifecycleState asset.assetDetail.userAssetClass.status
name asset.assetDetail.userAssetClass.displayName
name asset.assetDetail.userAssetClass.name
capabilities.canUseApiKeys asset.assetDetail.untypedAttributes.canUseApiKeys
capabilities.canUseAuthTokens asset.assetDetail.untypedAttributes.canUseAuthTokens
capabilities.canUseCustomerSecretKeys asset.assetDetail.untypedAttributes.canUseCustomerSecretKeys
capabilities.canUseConsolePassword asset.assetDetail.untypedAttributes.canUseConsolePassword
emailVerified asset.assetDetail.untypedAttributes.emailVerified
firstDiscoveredOn asset.assetDetail.typedAttributes.firstDiscoveredOn
lastSuccessfulLoginTime asset.assetDetail.typedAttributes.lastSuccessfulLoginTime
customerId asset.assetDetail.typedAttributes.customerId
connectorId asset.assetDetail.typedAttributes.connectorId
scanId asset.assetDetail.typedAttributes.scanId
tagIds asset.assetDetail.untypedAttributes.tagIds
scanUuids asset.assetDetail.untypedAttributes.scanUuids
connectorUuids asset.assetDetail.untypedAttributes.connectorUuids
controlsFailed asset.assetDetail.untypedAttributes.controlsFailed
tenancyName asset.assetDetail.typedAttributes.tenancyName
ociId asset.assetDetail.typedAttributes.ociId
evaluations[].cid findingGroup.findings[].asset.internalAssetId
evaluations[].resourceId findingGroup.findings[].asset.assetName
resourceId findingGroup.findings[].asset.externalAssetId
evaluations[].uuid findingGroup.findings[].externalFindingId
evaluations[].criticality findingGroup.findings[].severity
evaluations[].result findingGroup.findings[].findingStatus
evaluations[].evaluationDates.firstEvaluated findingGroup.findings[].firstFoundOn
evaluations[].evaluationDates.lastEvaluated findingGroup.findings[].lastFoundOn
evaluations[].evaluationDates.dateReopen findingGroup.findings[].reopenedOn
evaluations[].evaluationDates.dateFixed findingGroup.findings[].lastFixedOn
evaluations[].cid findingGroup.findings[].findingType.misconfiguration.policy.control.id
evaluations[].evidences findingGroup.findings[].detectionResult
evaluations[].controlName findingGroup.findings[].name
evaluations[].controlName findingGroup.findings[].findingType.misconfiguration.policy.title

Azure Storage Account Misconfig MapAzure Storage Account Misconfig Map

Source Field Target Field
azure-blob-storage asset.assetHeader.assetTypeName
resourceId asset.assetHeader.externalAssetId
uuid asset.assetHeader.vendorAssetId
name asset.assetDetail.name
created asset.assetDetail.sourceCreatedAt
updated asset.assetDetail.sourceUpdatedAt
cloudType asset.assetDetail.cloudInfo.provider
subscriptionId asset.assetDetail.cloudInfo.accountId
subscriptionName asset.assetDetail.cloudInfo.accountName
data.location asset.assetDetail.cloudInfo.region
data.tags[].name asset.assetDetail.externalTags[].key
data.tags[].value asset.assetDetail.externalTags[].value
resourceType asset.assetDetail.storageAssetClass.type
subscriptionId asset.assetDetail.storageAssetClass.provider
data.location asset.assetDetail.storageAssetClass.region
resourceType asset.assetDetail.storageAssetClass.serviceName
data.skuTier asset.assetDetail.storageAssetClass.tier
data.supportsHttpsTrafficOnly asset.assetDetail.storageAssetClass.encryption.enabled
data.minimumTlsVersion asset.assetDetail.storageAssetClass.encryption.key
data.resourceGroupId asset.assetDetail.typedAttributes.resourceGroupId
data.skuName asset.assetDetail.typedAttributes.skuName
data.resourceIdentity asset.assetDetail.untypedAttributes.resourceIdentity
data.hnsEnabled asset.assetDetail.untypedAttributes.hnsEnabled
data.secondaryLocation asset.assetDetail.typedAttributes.secondaryLocation
data.resourceGroupName asset.assetDetail.typedAttributes.resourceGroupName
data.statusOfSecondary asset.assetDetail.typedAttributes.statusOfSecondary
data.type asset.assetDetail.typedAttributes.type
data.primaryLocation asset.assetDetail.typedAttributes.primaryLocation
data.statusOfPrimary asset.assetDetail.typedAttributes.statusOfPrimary
data.kind asset.assetDetail.typedAttributes.kind
data.firstDiscoveredOn asset.assetDetail.typedAttributes.firstDiscoveredOn
data.lastDiscoveredOn asset.assetDetail.typedAttributes.lastDiscoveredOn
data.file asset.assetDetail.untypedAttributes.file
data.blob asset.assetDetail.untypedAttributes.blob
notDiscoveredInLast7Days asset.assetDetail.untypedAttributes.notDiscoveredInLast7Days
connectorId asset.assetDetail.typedAttributes.connectorId
created asset.assetDetail.untypedAttributes.created
scanId asset.assetDetail.typedAttributes.scanId
customerId asset.assetDetail.typedAttributes.customerId
region asset.assetDetail.typedAttributes.region
data.networkAcls asset.assetDetail.untypedAttributes.networkAcls
qualysTags asset.assetDetail.untypedAttributes.qualysTags
evaluations[].cid findingGroup.findings[].asset.internalAssetId
evaluations[].resourceId findingGroup.findings[].asset.assetName
resourceId findingGroup.findings[].asset.externalAssetId
evaluations[].uuid findingGroup.findings[].externalFindingId
evaluations[].criticality findingGroup.findings[].severity
evaluations[].result findingGroup.findings[].findingStatus
evaluations[].evaluationDates.firstEvaluated findingGroup.findings[].firstFoundOn
evaluations[].evaluationDates.lastEvaluated findingGroup.findings[].lastFoundOn
evaluations[].evaluationDates.dateReopen findingGroup.findings[].reopenedOn
evaluations[].evaluationDates.dateFixed findingGroup.findings[].lastFixedOn
evaluations[].cid findingGroup.findings[].findingType.misconfiguration.policy.control.id
evaluations[].evidences findingGroup.findings[].detectionResult
evaluations[].controlName findingGroup.findings[].name
evaluations[].controlName findingGroup.findings[].findingType.misconfiguration.policy.title

Azure Function App Misconfig MapAzure Function App Misconfig Map

Source Field Target Field
azure-function asset.assetHeader.assetTypeName
resourceId asset.assetHeader.externalAssetId
uuid asset.assetHeader.vendorAssetId
name asset.assetDetail.name
created asset.assetDetail.sourceCreatedAt
updated asset.assetDetail.sourceUpdatedAt
cloudType asset.assetDetail.cloudInfo.provider
subscriptionId asset.assetDetail.cloudInfo.accountId
subscriptionName asset.assetDetail.cloudInfo.accountName
region asset.assetDetail.cloudInfo.region
tags[].name asset.assetDetail.externalTags[].key
tags[].value asset.assetDetail.externalTags[].value
azure-function asset.assetDetail.serverlessAssetClass.type
name asset.assetDetail.serverlessAssetClass.functionName
defaultHostName asset.assetDetail.serverlessAssetClass.functionURL
language asset.assetDetail.serverlessAssetClass.runtime
type asset.assetDetail.serverlessAssetClass.serviceName
kind asset.assetDetail.serverlessAssetClass.platform
appServicePlan asset.assetDetail.serverlessAssetClass.plan
state asset.assetDetail.serverlessAssetClass.status
enabled asset.assetDetail.serverlessAssetClass.enabled
customerId asset.assetDetail.typedAttributes.customerId
customers asset.assetDetail.untypedAttributes.customers
connectorUuid asset.assetDetail.typedAttributes.connectorUuid
connectorUuids asset.assetDetail.untypedAttributes.connectorUuids
resourceGroupName asset.assetDetail.typedAttributes.resourceGroupName
scanUuid asset.assetDetail.typedAttributes.scanUuid
type asset.assetDetail.typedAttributes.resourceType
remediationEnabled asset.assetDetail.untypedAttributes.remediationEnabled
additionalDetails asset.assetDetail.untypedAttributes.additionalDetails
notDiscoveredInLast7Days asset.assetDetail.untypedAttributes.notDiscoveredInLast7Days
qualysTags asset.assetDetail.untypedAttributes.qualysTags
isSnapshotScanEnabled asset.assetDetail.untypedAttributes.isSnapshotScanEnabled
controlsFailed asset.assetDetail.untypedAttributes.controlsFailed
key asset.assetDetail.typedAttributes.key
deploymentId asset.assetDetail.typedAttributes.deploymentId
subKinds asset.assetDetail.untypedAttributes.subKinds
usageState asset.assetDetail.typedAttributes.usageState
availabilityState asset.assetDetail.typedAttributes.availabilityState
isDefaultContainer asset.assetDetail.untypedAttributes.isDefaultContainer
httpsonly asset.assetDetail.untypedAttributes.httpsonly
redundancyMode asset.assetDetail.typedAttributes.redundancyMode
repositorySiteName asset.assetDetail.typedAttributes.repositorySiteName
clientAffinityEnabled asset.assetDetail.untypedAttributes.clientAffinityEnabled
clientCertEnabled asset.assetDetail.untypedAttributes.clientCertEnabled
enabledHosts asset.assetDetail.untypedAttributes.enabledHosts
functions asset.assetDetail.untypedAttributes.functions
evaluations[].cid findingGroup.findings[].asset.internalAssetId
evaluations[].resourceId findingGroup.findings[].asset.assetName
resourceId findingGroup.findings[].asset.externalAssetId
evaluations[].uuid findingGroup.findings[].externalFindingId
evaluations[].criticality findingGroup.findings[].severity
evaluations[].result findingGroup.findings[].findingStatus
evaluations[].evaluationDates.firstEvaluated findingGroup.findings[].firstFoundOn
evaluations[].evaluationDates.lastEvaluated findingGroup.findings[].lastFoundOn
evaluations[].evaluationDates.dateReopen findingGroup.findings[].reopenedOn
evaluations[].evaluationDates.dateFixed findingGroup.findings[].lastFixedOn
evaluations[].cid findingGroup.findings[].findingType.misconfiguration.policy.control.id
evaluations[].evidences findingGroup.findings[].detectionResult
evaluations[].controlName findingGroup.findings[].name
evaluations[].controlName findingGroup.findings[].findingType.misconfiguration.policy.title

Azure Virtual Machine Misconfig MapAzure Virtual Machine Misconfig Map

Source Field Target Field
azure-virtual-machine asset.assetHeader.assetTypeName
subscriptionId asset.assetHeader.externalAssetId
uuid asset.assetHeader.vendorAssetId
name asset.assetDetail.name
created asset.assetDetail.sourceCreatedAt
updated asset.assetDetail.sourceUpdatedAt
cloudType asset.assetDetail.cloudInfo.provider
subscriptionId asset.assetDetail.cloudInfo.accountId
region asset.assetDetail.cloudInfo.region
tags[].name asset.assetDetail.externalTags[].key
tags[].value asset.assetDetail.externalTags[].value
computerName asset.assetDetail.computeAssetClass.cloudInstance.hostname
name asset.assetDetail.computeAssetClass.cloudInstance.id
size asset.assetDetail.computeAssetClass.cloudInstance.type
primaryPrivateIPAddress asset.assetDetail.computeAssetClass.cloudInstance.privateIpv4Address
primaryPublicIPAddress asset.assetDetail.computeAssetClass.cloudInstance.publicIpv4Address
resourceId asset.assetDetail.typedAttributes.resourceId
resourceGroupName asset.assetDetail.typedAttributes.resourceGroupName
type asset.assetDetail.typedAttributes.type
osType asset.assetDetail.typedAttributes.osType
networkSecurityGroupId asset.assetDetail.typedAttributes.networkSecurityGroupId
primaryPublicIPAddressId asset.assetDetail.typedAttributes.primaryPublicIPAddressId
availabilitySetId asset.assetDetail.typedAttributes.availabilitySetId
scanUuid asset.assetDetail.typedAttributes.scanUuid
connectorUuid asset.assetDetail.typedAttributes.connectorUuid
customerId asset.assetDetail.typedAttributes.customerId
subscriptionName asset.assetDetail.untypedAttributes.subscriptionName
remediationEnabled asset.assetDetail.untypedAttributes.remediationEnabled
additionalDetails asset.assetDetail.untypedAttributes.additionalDetails
notDiscoveredInLast7Days asset.assetDetail.untypedAttributes.notDiscoveredInLast7Days
qualysTags asset.assetDetail.untypedAttributes.qualysTags
isSnapshotScanEnabled asset.assetDetail.untypedAttributes.isSnapshotScanEnabled
controlsFailed asset.assetDetail.untypedAttributes.controlsFailed
privateIpv6Address asset.assetDetail.untypedAttributes.privateIpv6Address
publicIpv6Address asset.assetDetail.untypedAttributes.publicIpv6Address
provisioningState asset.assetDetail.untypedAttributes.provisioningState
licenseType asset.assetDetail.untypedAttributes.licenseType
criticalityScore asset.assetDetail.untypedAttributes.criticalityScore
arsScore asset.assetDetail.untypedAttributes.arsScore
vmssId asset.assetDetail.untypedAttributes.vmssId
isVmssVM asset.assetDetail.untypedAttributes.isVmssVM
statuses asset.assetDetail.untypedAttributes.statuses
imageData asset.assetDetail.untypedAttributes.imageData
customers asset.assetDetail.untypedAttributes.customers
connectorUuids asset.assetDetail.untypedAttributes.connectorUuids
evaluations[].cid findingGroup.findings[].asset.internalAssetId
evaluations[].resourceId findingGroup.findings[].asset.assetName
subscriptionId findingGroup.findings[].asset.externalAssetId
evaluations[].uuid findingGroup.findings[].externalFindingId
evaluations[].criticality findingGroup.findings[].severity
evaluations[].result findingGroup.findings[].findingStatus
evaluations[].evaluationDates.firstEvaluated findingGroup.findings[].firstFoundOn
evaluations[].evaluationDates.lastEvaluated findingGroup.findings[].lastFoundOn
evaluations[].evaluationDates.dateReopen findingGroup.findings[].reopenedOn
evaluations[].evaluationDates.dateFixed findingGroup.findings[].lastFixedOn
evaluations[].cid findingGroup.findings[].findingType.misconfiguration.policy.control.id
evaluations[].evidences findingGroup.findings[].detectionResult
evaluations[].controlName findingGroup.findings[].name
evaluations[].controlName findingGroup.findings[].findingType.misconfiguration.policy.title

AWS EBS Misconfig MapAWS EBS Misconfig Map

Source Field Target Field
aws-ebs-storage asset.assetHeader.assetTypeName
region asset.assetHeader.externalAssetId
uuid asset.assetHeader.vendorAssetId
volumeId asset.assetDetail.name
createdOn asset.assetDetail.sourceCreatedAt
updated asset.assetDetail.sourceUpdatedAt
cloudType asset.assetDetail.cloudInfo.provider
cloudAccountId asset.assetDetail.cloudInfo.accountId
accountAlias asset.assetDetail.cloudInfo.accountName
region asset.assetDetail.cloudInfo.region
tags[].key asset.assetDetail.externalTags[].key
tags[].value asset.assetDetail.externalTags[].value
resourceType asset.assetDetail.storageAssetClass.type
cloudType asset.assetDetail.storageAssetClass.provider
region asset.assetDetail.storageAssetClass.region
size asset.assetDetail.typedAttributes.size
volumeType asset.assetDetail.storageAssetClass.tier
availabilityZone asset.assetDetail.typedAttributes.availabilityZone
encrypted asset.assetDetail.typedAttributes.encrypted
kmsKeyId asset.assetDetail.typedAttributes.kmsKeyId
snapshotId asset.assetDetail.typedAttributes.snapshotId
state asset.assetDetail.typedAttributes.state
volumeId asset.assetDetail.typedAttributes.volumeId
iops asset.assetDetail.typedAttributes.iops
volumeType asset.assetDetail.typedAttributes.volumeType
createTime asset.assetDetail.typedAttributes.createTime
remediationEnabled asset.assetDetail.typedAttributes.remediationEnabled
controlsFailed asset.assetDetail.untypedAttributes.controlsFailed
qualysTags asset.assetDetail.untypedAttributes.qualysTags
additionalDetails asset.assetDetail.typedAttributes.additionalDetails
deletedFromCloud asset.assetDetail.typedAttributes.deletedFromCloud
isSnapshotScanEnabled asset.assetDetail.storageAssetClass.snapshotEnabled
failedControlCids asset.assetDetail.typedAttributes.failedControlCids
notDiscoveredInLast7Days asset.assetDetail.typedAttributes.notDiscoveredInLast7Days
connectorUuid asset.assetDetail.typedAttributes.connectorUuid
attachments asset.assetDetail.untypedAttributes.attachments
connectorUuids asset.assetDetail.untypedAttributes.connectorUuids
evaluations[].cid findingGroup.findings[].asset.internalAssetId
evaluations[].resourceId findingGroup.findings[].asset.assetName
cloudAccountId findingGroup.findings[].asset.externalAssetId
evaluations[].uuid findingGroup.findings[].externalFindingId
evaluations[].criticality findingGroup.findings[].severity
evaluations[].result findingGroup.findings[].findingStatus
evaluations[].evaluationDates.firstEvaluated findingGroup.findings[].firstFoundOn
evaluations[].evaluationDates.lastEvaluated findingGroup.findings[].lastFoundOn
evaluations[].evaluationDates.dateReopen findingGroup.findings[].reopenedOn
evaluations[].evaluationDates.dateFixed findingGroup.findings[].lastFixedOn
evaluations[].cid findingGroup.findings[].findingType.misconfiguration.policy.control.id
evaluations[].evidences findingGroup.findings[].detectionResult
evaluations[].controlName findingGroup.findings[].name
evaluations[].controlName findingGroup.findings[].findingType.misconfiguration.policy.title

AWS Route 53 Record Misconfig MapAWS Route 53 Record Misconfig Map

Source Field Target Field

generic-cloud-network-resource (default)

asset.assetHeader.assetTypeName

arn:aws:route53:::resourcerecordset/resourceName/resourceId

asset.assetHeader.externalAssetId

uuid

asset.assetHeader.vendorAssetId

assetDetailName

asset.assetDetail.name

firstDiscovered

asset.assetDetail.sourceCreatedAt

updated

asset.assetDetail.sourceUpdatedAt

cloudType

asset.assetDetail.cloudInfo.provider

accountId

asset.assetDetail.cloudInfo.accountId

region

asset.assetDetail.cloudInfo.region

tags[].key

asset.assetDetail.externalTags[].key

tags[].value

asset.assetDetail.externalTags[].value

DNS_RECORD (default)

asset.assetDetail.networkAssetClass.deviceType

cloudType

asset.assetDetail.networkAssetClass.provider

region

asset.assetDetail.networkAssetClass.location

name

asset.assetDetail.typedAttributes.name

customerUuid

asset.assetDetail.typedAttributes.customerUuid

connectorUuid

asset.assetDetail.typedAttributes.connectorUuid

scanUuid

asset.assetDetail.typedAttributes.scanUuid

controlFailedCount

asset.assetDetail.untypedAttributes.controlFailedCount

notDiscoveredInLast7Days

asset.assetDetail.untypedAttributes.notDiscoveredInLast7Days

deletedFromCloud

asset.assetDetail.untypedAttributes.deletedFromCloud

evaluations[].cid

findingGroup.findings[].asset.internalAssetId

evaluations[].resourceId

findingGroup.findings[].asset.assetName

arn:aws:route53:::resourcerecordset/resourceName/resourceId

findingGroup.findings[].asset.externalAssetId

evaluations[].uuid

findingGroup.findings[].externalFindingId

evaluations[].criticality

findingGroup.findings[].severity

evaluations[].result

findingGroup.findings[].findingStatus

evaluations[].evaluationDates.firstEvaluated

findingGroup.findings[].firstFoundOn

evaluations[].evaluationDates.lastEvaluated

findingGroup.findings[].lastFoundOn

evaluations[].evaluationDates.dateReopen

findingGroup.findings[].reopenedOn

evaluations[].evaluationDates.dateFixed

findingGroup.findings[].lastFixedOn

evaluations[].cid

findingGroup.findings[].findingType.misconfiguration.policy.control.id

evaluations[].evidences

findingGroup.findings[].detectionResult

evaluations[].controlName

findingGroup.findings[].name

evaluations[].controlName

findingGroup.findings[].findingType.misconfiguration.policy.title

AWS Route Table Misconfig MapAWS Route Table Misconfig Map

Source Field Target Field

generic-cloud-network-resource (default)

asset.assetHeader.assetTypeName

arn:aws:ec2:region:cloudAccountId:route-table/routeTableId

asset.assetHeader.externalAssetId

uuid

asset.assetHeader.vendorAssetId

assetDetailName

asset.assetDetail.name

created

asset.assetDetail.sourceCreatedAt

updated

asset.assetDetail.sourceUpdatedAt

cloudType

asset.assetDetail.cloudInfo.provider

cloudAccountId

asset.assetDetail.cloudInfo.accountId

region

asset.assetDetail.cloudInfo.region

tags[].key

asset.assetDetail.externalTags[].key

tags[].value

asset.assetDetail.externalTags[].value

resourceType

asset.assetDetail.networkAssetClass.deviceType

cloudType

asset.assetDetail.networkAssetClass.provider

region

asset.assetDetail.networkAssetClass.location

vpcId

asset.assetDetail.networkAssetClass.vpcId

routeTableId

asset.assetDetail.networkAssetClass.routeTableId

connectorUuid

asset.assetDetail.typedAttributes.connectorUuid

createdOn

asset.assetDetail.typedAttributes.createdOn

accountAlias

asset.assetDetail.typedAttributes.accountAlias

remediationEnabled

asset.assetDetail.untypedAttributes.remediationEnabled

qualysTags

asset.assetDetail.untypedAttributes.qualysTags

additionalDetails

asset.assetDetail.untypedAttributes.additionalDetails

deletedFromCloud

asset.assetDetail.untypedAttributes.deletedFromCloud

failedControlCids

asset.assetDetail.untypedAttributes.failedControlCids

notDiscoveredInLast7Days

asset.assetDetail.untypedAttributes.notDiscoveredInLast7Days

insightCount

asset.assetDetail.untypedAttributes.insightCount

controlsFailed

asset.assetDetail.untypedAttributes.controlsFailed

isSnapshotScanEnabled

asset.assetDetail.untypedAttributes.isSnapshotScanEnabled

associations

asset.assetDetail.untypedAttributes.associations

routes

asset.assetDetail.untypedAttributes.routes

routeDtos

asset.assetDetail.untypedAttributes.routeDtos

accountTags

asset.assetDetail.untypedAttributes.accountTags

connectorUuids

asset.assetDetail.untypedAttributes.connectorUuids

evaluations[].cid

findingGroup.findings[].asset.internalAssetId

evaluations[].resourceId

findingGroup.findings[].asset.assetName

arn:aws:ec2:region:cloudAccountId:route-table/routeTableId

findingGroup.findings[].asset.externalAssetId

evaluations[].uuid

findingGroup.findings[].externalFindingId

evaluations[].criticality

findingGroup.findings[].severity

evaluations[].result

findingGroup.findings[].findingStatus

evaluations[].evaluationDates.firstEvaluated

findingGroup.findings[].firstFoundOn

evaluations[].evaluationDates.lastEvaluated

findingGroup.findings[].lastFoundOn

evaluations[].evaluationDates.dateReopen

findingGroup.findings[].reopenedOn

evaluations[].evaluationDates.dateFixed

findingGroup.findings[].lastFixedOn

evaluations[].cid

findingGroup.findings[].findingType.misconfiguration.policy.control.id

evaluations[].evidences

findingGroup.findings[].detectionResult

evaluations[].controlName

findingGroup.findings[].name

evaluations[].controlName

findingGroup.findings[].findingType.misconfiguration.policy.title

AWS Transit Gateway Misconfig MapAWS Transit Gateway Misconfig Map

Source Field Target Field

aws-transit-gateway (default)

asset.assetHeader.assetTypeName

arn:aws:ec2:region:accountId:transit-gateway/resourceId

asset.assetHeader.externalAssetId

uuid

asset.assetHeader.vendorAssetId

assetDetailName

asset.assetDetail.name

firstDiscovered

asset.assetDetail.sourceCreatedAt

updated

asset.assetDetail.sourceUpdatedAt

cloudType

asset.assetDetail.cloudInfo.provider

accountId

asset.assetDetail.cloudInfo.accountId

region

asset.assetDetail.cloudInfo.region

tags[].key

asset.assetDetail.externalTags[].key

tags[].value

asset.assetDetail.externalTags[].value

resourceType

asset.assetDetail.networkAssetClass.deviceType

cloudType

asset.assetDetail.networkAssetClass.provider

region

asset.assetDetail.networkAssetClass.location

resourceId

asset.assetDetail.networkAssetClass.gatewayId

resourceName

asset.assetDetail.networkAssetClass.gatewayName

customerUuid

asset.assetDetail.typedAttributes.customerUuid

connectorUuid

asset.assetDetail.typedAttributes.connectorUuid

scanUuid

asset.assetDetail.typedAttributes.scanUuid

controlFailedCount

asset.assetDetail.untypedAttributes.controlFailedCount

deletedFromCloud

asset.assetDetail.untypedAttributes.deletedFromCloud

notDiscoveredInLast7Days

asset.assetDetail.untypedAttributes.notDiscoveredInLast7Days

evaluations[].cid

findingGroup.findings[].asset.internalAssetId

evaluations[].resourceId

findingGroup.findings[].asset.assetName

arn:aws:ec2:region:accountId:transit-gateway/resourceId

findingGroup.findings[].asset.externalAssetId

evaluations[].uuid

findingGroup.findings[].externalFindingId

evaluations[].criticality

findingGroup.findings[].severity

evaluations[].result

findingGroup.findings[].findingStatus

evaluations[].evaluationDates.firstEvaluated

findingGroup.findings[].firstFoundOn

evaluations[].evaluationDates.lastEvaluated

findingGroup.findings[].lastFoundOn

evaluations[].evaluationDates.dateReopen

findingGroup.findings[].reopenedOn

evaluations[].evaluationDates.dateFixed

findingGroup.findings[].lastFixedOn

evaluations[].cid

findingGroup.findings[].findingType.misconfiguration.policy.control.id

evaluations[].evidences

findingGroup.findings[].detectionResult

evaluations[].controlName

findingGroup.findings[].name

evaluations[].controlName

findingGroup.findings[].findingType.misconfiguration.policy.title

OCI Compute Misconfig MapOCI Compute Misconfig Map

Source Field Target Field

oci-compute (default)

asset.assetHeader.assetTypeName

ociId

asset.assetHeader.externalAssetId

uuid

asset.assetHeader.vendorAssetId

assetDetailName

asset.assetDetail.name

creationDate

asset.assetDetail.sourceCreatedAt

updated

asset.assetDetail.sourceUpdatedAt

cloudType

asset.assetDetail.cloudInfo.provider

cloudAccountId

asset.assetDetail.cloudInfo.accountId

tenantId

asset.assetDetail.cloudInfo.accountName

region

asset.assetDetail.cloudInfo.region

availabilityDomain

asset.assetDetail.cloudInfo.availabilityZone

ociTags[].key

asset.assetDetail.externalTags[].key

ociTags[].value

asset.assetDetail.externalTags[].value

region

asset.assetDetail.computeAssetClass.location

cloudType

asset.assetDetail.computeAssetClass.provider

shape

asset.assetDetail.computeAssetClass.type

ocpuCount

asset.assetDetail.computeAssetClass.cpuCount

memoryInGBs

asset.assetDetail.computeAssetClass.memoryGB

resourceId

asset.assetDetail.typedAttributes.resourceId

connectorId

asset.assetDetail.typedAttributes.connectorId

customerId

asset.assetDetail.typedAttributes.customerId

scanId

asset.assetDetail.typedAttributes.scanId

lifecycleState

asset.assetDetail.typedAttributes.lifecycleState

timeCreated

asset.assetDetail.typedAttributes.timeCreated

compartmentId

asset.assetDetail.typedAttributes.compartmentId

shape

asset.assetDetail.typedAttributes.shape

ocpuCount

asset.assetDetail.typedAttributes.ocpuCount

memoryInGBs

asset.assetDetail.typedAttributes.memoryInGBs

isPvEncryptionInTransitEnabled

asset.assetDetail.untypedAttributes.pvEncryptionInTransitEnabled

firstDiscoveredOn

asset.assetDetail.untypedAttributes.firstDiscoveredOn

tagIds

asset.assetDetail.untypedAttributes.tagIds

scanUuids

asset.assetDetail.untypedAttributes.scanUuids

connectorUuids

asset.assetDetail.untypedAttributes.connectorUuids

customers

asset.assetDetail.untypedAttributes.customers

vnicDto

asset.assetDetail.untypedAttributes.vnicDto

compartment

asset.assetDetail.untypedAttributes.compartment

evaluations[].cid

findingGroup.findings[].asset.internalAssetId

evaluations[].resourceId

findingGroup.findings[].asset.assetName

ociId

findingGroup.findings[].asset.externalAssetId

evaluations[].uuid

findingGroup.findings[].externalFindingId

evaluations[].criticality

findingGroup.findings[].severity

evaluations[].result

findingGroup.findings[].findingStatus

evaluations[].evaluationDates.firstEvaluated

findingGroup.findings[].firstFoundOn

evaluations[].evaluationDates.lastEvaluated

findingGroup.findings[].lastFoundOn

evaluations[].evaluationDates.dateReopen

findingGroup.findings[].reopenedOn

evaluations[].evaluationDates.dateFixed

findingGroup.findings[].lastFixedOn

evaluations[].cid

findingGroup.findings[].findingType.misconfiguration.policy.control.id

evaluations[].evidences

findingGroup.findings[].detectionResult

evaluations[].controlName

findingGroup.findings[].name

evaluations[].controlName

findingGroup.findings[].findingType.misconfiguration.policy.title

OCI Load Balancer Misconfig MapOCI Load Balancer Misconfig Map

Source Field Target Field

oci-load-balancer (default)

asset.assetHeader.assetTypeName

resourceId

asset.assetHeader.externalAssetId

data.uuid

asset.assetHeader.vendorAssetId

assetDetailName

asset.assetDetail.name

data.created

asset.assetDetail.sourceCreatedAt

data.updated

asset.assetDetail.sourceUpdatedAt

OCI (default)

asset.assetDetail.cloudInfo.provider

resourceId

asset.assetDetail.cloudInfo.accountId

tenantId

asset.assetDetail.cloudInfo.accountName

region

asset.assetDetail.cloudInfo.region

data.ociTags[].key

asset.assetDetail.externalTags[].key

data.ociTags[].value

asset.assetDetail.externalTags[].value

LOAD_BALANCER (default)

asset.assetDetail.networkAssetClass.deviceType

OCI (default)

asset.assetDetail.networkAssetClass.provider

region

asset.assetDetail.networkAssetClass.location

resourceId

asset.assetDetail.typedAttributes.resourceId

connectorId

asset.assetDetail.typedAttributes.connectorId

scanId

asset.assetDetail.typedAttributes.scanId

customerId

asset.assetDetail.typedAttributes.customerId

resourceType

asset.assetDetail.typedAttributes.resourceType

data.compartmentId

asset.assetDetail.typedAttributes.compartmentId

data.shapeName

asset.assetDetail.typedAttributes.shapeName

data.lifecycleState

asset.assetDetail.typedAttributes.lifecycleState

data.firstDiscoveredOn

asset.assetDetail.typedAttributes.firstDiscoveredOn

data.lastDiscoveredOn

asset.assetDetail.typedAttributes.lastDiscoveredOn

data.isDeleteProtectionEnabled

asset.assetDetail.typedAttributes.isDeleteProtectionEnabled

notDiscoveredInLast7Days

asset.assetDetail.untypedAttributes.notDiscoveredInLast7Days

data.isLoadbalancerPrivate

asset.assetDetail.untypedAttributes.isLoadbalancerPrivate

qualysTags

asset.assetDetail.untypedAttributes.qualysTags

subnetId

asset.assetDetail.typedAttributes.subnetId

data.ipAddress

asset.assetDetail.untypedAttributes.ipAddress

listernerDetails

asset.assetDetail.typedAttributes.listernerDetails

evaluations[].cid

findingGroup.findings[].asset.internalAssetId

evaluations[].resourceId

findingGroup.findings[].asset.assetName

resourceId

findingGroup.findings[].asset.externalAssetId

evaluations[].uuid

findingGroup.findings[].externalFindingId

evaluations[].criticality

findingGroup.findings[].severity

evaluations[].result

findingGroup.findings[].findingStatus

evaluations[].evaluationDates.firstEvaluated

findingGroup.findings[].firstFoundOn

evaluations[].evaluationDates.lastEvaluated

findingGroup.findings[].lastFoundOn

evaluations[].evaluationDates.dateReopen

findingGroup.findings[].reopenedOn

evaluations[].evaluationDates.dateFixed

findingGroup.findings[].lastFixedOn

evaluations[].cid

findingGroup.findings[].findingType.misconfiguration.policy.control.id

evaluations[].evidences

findingGroup.findings[].detectionResult

evaluations[].controlName

findingGroup.findings[].name

evaluations[].controlName

findingGroup.findings[].findingType.misconfiguration.policy.title

OCI Security List Misconfig MapOCI Security List Misconfig Map

Source Field Target Field

oci-network-firewall (default)

asset.assetHeader.assetTypeName

resourceId

asset.assetHeader.externalAssetId

uuid

asset.assetHeader.vendorAssetId

assetDetailName

asset.assetDetail.name

creationDate

asset.assetDetail.sourceCreatedAt

updated

asset.assetDetail.sourceUpdatedAt

cloudType

asset.assetDetail.cloudInfo.provider

cloudAccountId

asset.assetDetail.cloudInfo.accountId

tenantId

asset.assetDetail.cloudInfo.accountName

region

asset.assetDetail.cloudInfo.region

availabilityDomain

asset.assetDetail.cloudInfo.availabilityZone

ociTags[].key

asset.assetDetail.externalTags[].key

ociTags[].value

asset.assetDetail.externalTags[].value

FIREWALL (default)

asset.assetDetail.networkAssetClass.deviceType

OCI (default)

asset.assetDetail.networkAssetClass.provider

region

asset.assetDetail.networkAssetClass.location

vcnId

asset.assetDetail.networkAssetClass.vpcId

resourceId

asset.assetDetail.typedAttributes.resourceId

connectorId

asset.assetDetail.typedAttributes.connectorId

customerId

asset.assetDetail.typedAttributes.customerId

scanId

asset.assetDetail.typedAttributes.scanId

lifecycleState

asset.assetDetail.typedAttributes.lifecycleState

type

asset.assetDetail.typedAttributes.type

controlsFailed

asset.assetDetail.untypedAttributes.controlsFailed

firstDiscoveredOn

asset.assetDetail.untypedAttributes.firstDiscoveredOn

connectorUuids

asset.assetDetail.untypedAttributes.connectorUuids

customers

asset.assetDetail.untypedAttributes.customers

scanUuids

asset.assetDetail.untypedAttributes.scanUuids

tagIds

asset.assetDetail.untypedAttributes.tagIds

compartment

asset.assetDetail.untypedAttributes.compartment

additionalDetails

asset.assetDetail.typedAttributes.additionalDetails

evaluations[].cid

findingGroup.findings[].asset.internalAssetId

evaluations[].resourceId

findingGroup.findings[].asset.assetName

resourceId

findingGroup.findings[].asset.externalAssetId

evaluations[].uuid

findingGroup.findings[].externalFindingId

evaluations[].criticality

findingGroup.findings[].severity

evaluations[].result

findingGroup.findings[].findingStatus

evaluations[].evaluationDates.firstEvaluated

findingGroup.findings[].firstFoundOn

evaluations[].evaluationDates.lastEvaluated

findingGroup.findings[].lastFoundOn

evaluations[].evaluationDates.dateReopen

findingGroup.findings[].reopenedOn

evaluations[].evaluationDates.dateFixed

findingGroup.findings[].lastFixedOn

evaluations[].cid

findingGroup.findings[].findingType.misconfiguration.policy.control.id

evaluations[].evidences

findingGroup.findings[].detectionResult

evaluations[].controlName

findingGroup.findings[].name

evaluations[].controlName

findingGroup.findings[].findingType.misconfiguration.policy.title

Azure Disk Misconfig MapAzure Disk Misconfig Map

Source Field Target Field

azure-managed-disk-storage (default)

asset.assetHeader.assetTypeName

resourceId

asset.assetHeader.externalAssetId

data.uuid

asset.assetHeader.vendorAssetId

assetDetailName

asset.assetDetail.name

data.created

asset.assetDetail.sourceCreatedAt

data.updated

asset.assetDetail.sourceUpdatedAt

cloudType

asset.assetDetail.cloudInfo.provider

subscriptionId

asset.assetDetail.cloudInfo.accountId

subscriptionName

asset.assetDetail.cloudInfo.accountName

data.location

asset.assetDetail.cloudInfo.region

data.tags[].key

asset.assetDetail.externalTags[].key

data.tags[].value

asset.assetDetail.externalTags[].value

resourceType

asset.assetDetail.storageAssetClass.type

subscriptionId

asset.assetDetail.storageAssetClass.provider

data.location

asset.assetDetail.storageAssetClass.region

resourceType

asset.assetDetail.storageAssetClass.serviceName

data.skuTier

asset.assetDetail.storageAssetClass.tier

data.diskSizeGB

asset.assetDetail.storageAssetClass.capacityInBytes

data.encryptionType

asset.assetDetail.storageAssetClass.encryption.type

data.resourceGroupId

asset.assetDetail.typedAttributes.resourceGroupId

data.tier

asset.assetDetail.typedAttributes.tier

data.publicNetworkAccess

asset.assetDetail.typedAttributes.publicNetworkAccess

data.diskState

asset.assetDetail.typedAttributes.diskState

data.imageReferenceId

asset.assetDetail.typedAttributes.imageReferenceId

data.osType

asset.assetDetail.typedAttributes.osType

data.createOption

asset.assetDetail.typedAttributes.createOption

data.acceleratedNetwork

asset.assetDetail.untypedAttributes.acceleratedNetwork

data.skuName

asset.assetDetail.typedAttributes.skuName

data.resourceGroupName

asset.assetDetail.typedAttributes.resourceGroupName

data.networkAccessPolicy

asset.assetDetail.typedAttributes.networkAccessPolicy

data.hyperVGeneration

asset.assetDetail.typedAttributes.hyperVGeneration

data.firstDiscoveredOn

asset.assetDetail.typedAttributes.firstDiscoveredOn

data.lastDiscoveredOn

asset.assetDetail.typedAttributes.lastDiscoveredOn

data.supportsHibernation

asset.assetDetail.untypedAttributes.supportsHibernation

data.managedBy

asset.assetDetail.typedAttributes.managedBy

data.zones

asset.assetDetail.typedAttributes.zones

data.architecture

asset.assetDetail.typedAttributes.architecture

data.securityType

asset.assetDetail.typedAttributes.securityType

notDiscoveredInLast7Days

asset.assetDetail.untypedAttributes.notDiscoveredInLast7Days

connectorId

asset.assetDetail.typedAttributes.connectorId

created

asset.assetDetail.untypedAttributes.created

scanId

asset.assetDetail.typedAttributes.scanId

customerId

asset.assetDetail.typedAttributes.customerId

region

asset.assetDetail.typedAttributes.region

qualysTags

asset.assetDetail.untypedAttributes.qualysTags

evaluations[].cid

findingGroup.findings[].asset.internalAssetId

evaluations[].resourceId

findingGroup.findings[].asset.assetName

resourceId

findingGroup.findings[].asset.externalAssetId

evaluations[].uuid

findingGroup.findings[].externalFindingId

evaluations[].criticality

findingGroup.findings[].severity

evaluations[].result

findingGroup.findings[].findingStatus

evaluations[].evaluationDates.firstEvaluated

findingGroup.findings[].firstFoundOn

evaluations[].evaluationDates.lastEvaluated

findingGroup.findings[].lastFoundOn

evaluations[].evaluationDates.dateReopen

findingGroup.findings[].reopenedOn

evaluations[].evaluationDates.dateFixed

findingGroup.findings[].lastFixedOn

evaluations[].cid

findingGroup.findings[].findingType.misconfiguration.policy.control.id

evaluations[].evidences

findingGroup.findings[].detectionResult

evaluations[].controlName

findingGroup.findings[].name

evaluations[].controlName

findingGroup.findings[].findingType.misconfiguration.policy.title

Azure Storage Account Misconfig MapAzure Storage Account Misconfig Map

Source Field Target Field

azure-blob-storage (default)

asset.assetHeader.assetTypeName

resourceId

asset.assetHeader.externalAssetId

data.uuid

asset.assetHeader.vendorAssetId

assetDetailName

asset.assetDetail.name

data.created

asset.assetDetail.sourceCreatedAt

data.updated

asset.assetDetail.sourceUpdatedAt

cloudType

asset.assetDetail.cloudInfo.provider

subscriptionId

asset.assetDetail.cloudInfo.accountId

subscriptionName

asset.assetDetail.cloudInfo.accountName

data.location

asset.assetDetail.cloudInfo.region

data.tags[].key

asset.assetDetail.externalTags[].key

data.tags[].value

asset.assetDetail.externalTags[].value

resourceType

asset.assetDetail.storageAssetClass.type

subscriptionId

asset.assetDetail.storageAssetClass.provider

data.location

asset.assetDetail.storageAssetClass.region

resourceType

asset.assetDetail.storageAssetClass.serviceName

data.skuTier

asset.assetDetail.storageAssetClass.tier

data.supportsHttpsTrafficOnly

asset.assetDetail.storageAssetClass.encryption.enabled

data.minimumTlsVersion

asset.assetDetail.storageAssetClass.encryption.key

data.resourceGroupId

asset.assetDetail.typedAttributes.resourceGroupId

data.skuName

asset.assetDetail.typedAttributes.skuName

data.resourceIdentity

asset.assetDetail.untypedAttributes.resourceIdentity

data.hnsEnabled

asset.assetDetail.untypedAttributes.hnsEnabled

data.secondaryLocation

asset.assetDetail.typedAttributes.secondaryLocation

data.resourceGroupName

asset.assetDetail.typedAttributes.resourceGroupName

data.statusOfSecondary

asset.assetDetail.typedAttributes.statusOfSecondary

data.type

asset.assetDetail.typedAttributes.type

data.primaryLocation

asset.assetDetail.typedAttributes.primaryLocation

data.statusOfPrimary

asset.assetDetail.typedAttributes.statusOfPrimary

data.kind

asset.assetDetail.typedAttributes.kind

data.firstDiscoveredOn

asset.assetDetail.typedAttributes.firstDiscoveredOn

data.lastDiscoveredOn

asset.assetDetail.typedAttributes.lastDiscoveredOn

data.file

asset.assetDetail.untypedAttributes.file

data.blob

asset.assetDetail.untypedAttributes.blob

notDiscoveredInLast7Days

asset.assetDetail.untypedAttributes.notDiscoveredInLast7Days

connectorId

asset.assetDetail.typedAttributes.connectorId

created

asset.assetDetail.untypedAttributes.created

scanId

asset.assetDetail.typedAttributes.scanId

customerId

asset.assetDetail.typedAttributes.customerId

region

asset.assetDetail.typedAttributes.region

data.networkAcls

asset.assetDetail.untypedAttributes.networkAcls

qualysTags

asset.assetDetail.untypedAttributes.qualysTags

evaluations[].cid

findingGroup.findings[].asset.internalAssetId

evaluations[].resourceId

findingGroup.findings[].asset.assetName

resourceId

findingGroup.findings[].asset.externalAssetId

evaluations[].uuid

findingGroup.findings[].externalFindingId

evaluations[].criticality

findingGroup.findings[].severity

evaluations[].result

findingGroup.findings[].findingStatus

evaluations[].evaluationDates.firstEvaluated

findingGroup.findings[].firstFoundOn

evaluations[].evaluationDates.lastEvaluated

findingGroup.findings[].lastFoundOn

evaluations[].evaluationDates.dateReopen

findingGroup.findings[].reopenedOn

evaluations[].evaluationDates.dateFixed

findingGroup.findings[].lastFixedOn

evaluations[].cid

findingGroup.findings[].findingType.misconfiguration.policy.control.id

evaluations[].evidences

findingGroup.findings[].detectionResult

evaluations[].controlName

findingGroup.findings[].name

evaluations[].controlName

findingGroup.findings[].findingType.misconfiguration.policy.title

Azure Function App Misconfig MapAzure Function App Misconfig Map

Source Field Target Field

azure-function (default)

asset.assetHeader.assetTypeName

resourceId

asset.assetHeader.externalAssetId

uuid

asset.assetHeader.vendorAssetId

assetDetailName

asset.assetDetail.name

created

asset.assetDetail.sourceCreatedAt

updated

asset.assetDetail.sourceUpdatedAt

cloudType

asset.assetDetail.cloudInfo.provider

subscriptionId

asset.assetDetail.cloudInfo.accountId

subscriptionName

asset.assetDetail.cloudInfo.accountName

region

asset.assetDetail.cloudInfo.region

tags[].name

asset.assetDetail.externalTags[].key

tags[].value

asset.assetDetail.externalTags[].value

FUNCTION_APP (default)

asset.assetDetail.serverlessAssetClass.type

name

asset.assetDetail.serverlessAssetClass.functionName

defaultHostName

asset.assetDetail.serverlessAssetClass.functionURL

language

asset.assetDetail.serverlessAssetClass.runtime

type

asset.assetDetail.serverlessAssetClass.serviceName

kind

asset.assetDetail.serverlessAssetClass.platform

appServicePlan

asset.assetDetail.serverlessAssetClass.plan

state

asset.assetDetail.serverlessAssetClass.status

enabled

asset.assetDetail.serverlessAssetClass.enabled

customerId

asset.assetDetail.typedAttributes.customerId

customers

asset.assetDetail.untypedAttributes.customers

connectorUuid

asset.assetDetail.typedAttributes.connectorUuid

connectorUuids

asset.assetDetail.untypedAttributes.connectorUuids

resourceGroupName

asset.assetDetail.typedAttributes.resourceGroupName

scanUuid

asset.assetDetail.typedAttributes.scanUuid

type

asset.assetDetail.typedAttributes.resourceType

remediationEnabled

asset.assetDetail.untypedAttributes.remediationEnabled

additionalDetails

asset.assetDetail.untypedAttributes.additionalDetails

notDiscoveredInLast7Days

asset.assetDetail.untypedAttributes.notDiscoveredInLast7Days

qualysTags

asset.assetDetail.untypedAttributes.qualysTags

isSnapshotScanEnabled

asset.assetDetail.untypedAttributes.isSnapshotScanEnabled

evaluations[].cid

findingGroup.findings[].asset.internalAssetId

evaluations[].resourceId

findingGroup.findings[].asset.assetName

resourceId

findingGroup.findings[].asset.externalAssetId

evaluations[].uuid

findingGroup.findings[].externalFindingId

evaluations[].criticality

findingGroup.findings[].severity

evaluations[].result

findingGroup.findings[].findingStatus

evaluations[].evaluationDates.firstEvaluated

findingGroup.findings[].firstFoundOn

evaluations[].evaluationDates.lastEvaluated

findingGroup.findings[].lastFoundOn

evaluations[].evaluationDates.dateReopen

findingGroup.findings[].reopenedOn

evaluations[].evaluationDates.dateFixed

findingGroup.findings[].lastFixedOn

evaluations[].cid

findingGroup.findings[].findingType.misconfiguration.policy.control.id

evaluations[].evidences

findingGroup.findings[].detectionResult

evaluations[].controlName

findingGroup.findings[].name

evaluations[].controlName

findingGroup.findings[].findingType.misconfiguration.policy.title

Azure Virtual Machine Misconfig MapAzure Virtual Machine Misconfig Map

Source Field Target Field

azure-compute (default)

asset.assetHeader.assetTypeName

resourceId

asset.assetHeader.externalAssetId

uuid

asset.assetHeader.vendorAssetId

assetDetailName

asset.assetDetail.name

created

asset.assetDetail.sourceCreatedAt

updated

asset.assetDetail.sourceUpdatedAt

cloudType

asset.assetDetail.cloudInfo.provider

subscriptionId

asset.assetDetail.cloudInfo.accountId

region

asset.assetDetail.cloudInfo.region

tags[].name

asset.assetDetail.externalTags[].key

tags[].value

asset.assetDetail.externalTags[].value

computerName

asset.assetDetail.computeAssetClass.cloudInstance.hostname

name

asset.assetDetail.computeAssetClass.cloudInstance.id

size

asset.assetDetail.computeAssetClass.cloudInstance.type

primaryPrivateIPAddress

asset.assetDetail.computeAssetClass.cloudInstance.privateIpv4Address

primaryPublicIPAddress

asset.assetDetail.computeAssetClass.cloudInstance.publicIpv4Address

resourceId

asset.assetDetail.typedAttributes.resourceId

resourceGroupName

asset.assetDetail.typedAttributes.resourceGroupName

type

asset.assetDetail.typedAttributes.type

osType

asset.assetDetail.typedAttributes.osType

networkSecurityGroupId

asset.assetDetail.typedAttributes.networkSecurityGroupId

primaryPublicIPAddressId

asset.assetDetail.typedAttributes.primaryPublicIPAddressId

availabilitySetId

asset.assetDetail.typedAttributes.availabilitySetId

scanUuid

asset.assetDetail.typedAttributes.scanUuid

connectorUuid

asset.assetDetail.typedAttributes.connectorUuid

customerId

asset.assetDetail.typedAttributes.customerId

subscriptionName

asset.assetDetail.untypedAttributes.subscriptionName

remediationEnabled

asset.assetDetail.untypedAttributes.remediationEnabled

additionalDetails

asset.assetDetail.untypedAttributes.additionalDetails

notDiscoveredInLast7Days

asset.assetDetail.untypedAttributes.notDiscoveredInLast7Days

qualysTags

asset.assetDetail.untypedAttributes.qualysTags

isSnapshotScanEnabled

asset.assetDetail.untypedAttributes.isSnapshotScanEnabled

controlsFailed

asset.assetDetail.untypedAttributes.controlsFailed

privateIpv6Address

asset.assetDetail.untypedAttributes.privateIpv6Address

publicIpv6Address

asset.assetDetail.untypedAttributes.publicIpv6Address

provisioningState

asset.assetDetail.untypedAttributes.provisioningState

licenseType

asset.assetDetail.untypedAttributes.licenseType

criticalityScore

asset.assetDetail.untypedAttributes.criticalityScore

arsScore

asset.assetDetail.untypedAttributes.arsScore

vmssId

asset.assetDetail.untypedAttributes.vmssId

isVmssVM

asset.assetDetail.untypedAttributes.isVmssVM

statuses

asset.assetDetail.untypedAttributes.statuses

imageData

asset.assetDetail.untypedAttributes.imageData

customers

asset.assetDetail.untypedAttributes.customers

connectorUuids

asset.assetDetail.untypedAttributes.connectorUuids

evaluations[].cid

findingGroup.findings[].asset.internalAssetId

evaluations[].resourceId

findingGroup.findings[].asset.assetName

/subscriptions/subscriptionId/resourceGroups/resourceGroupName/providers/type/name

findingGroup.findings[].asset.externalAssetId

evaluations[].uuid

findingGroup.findings[].externalFindingId

evaluations[].criticality

findingGroup.findings[].severity

evaluations[].result

findingGroup.findings[].findingStatus

evaluations[].evaluationDates.firstEvaluated

findingGroup.findings[].firstFoundOn

evaluations[].evaluationDates.lastEvaluated

findingGroup.findings[].lastFoundOn

evaluations[].evaluationDates.dateReopen

findingGroup.findings[].reopenedOn

evaluations[].evaluationDates.dateFixed

findingGroup.findings[].lastFixedOn

evaluations[].cid

findingGroup.findings[].findingType.misconfiguration.policy.control.id

evaluations[].evidences

findingGroup.findings[].detectionResult

evaluations[].controlName

findingGroup.findings[].name

evaluations[].controlName

findingGroup.findings[].findingType.misconfiguration.policy.title

Azure Virtual Network Misconfig MapAzure Virtual Network Misconfig Map

Source Field Target Field

azure-virtual-network (default)

asset.assetHeader.assetTypeName

resourceId

asset.assetHeader.externalAssetId

uuid

asset.assetHeader.vendorAssetId

assetDetailName

asset.assetDetail.name

created

asset.assetDetail.sourceCreatedAt

updated

asset.assetDetail.sourceUpdatedAt

cloudType

asset.assetDetail.cloudInfo.provider

subscriptionId

asset.assetDetail.cloudInfo.accountId

region

asset.assetDetail.cloudInfo.region

tags[].name

asset.assetDetail.externalTags[].key

tags[].value

asset.assetDetail.externalTags[].value

VPC (default)

asset.assetDetail.networkAssetClass.deviceType

cloudType

asset.assetDetail.networkAssetClass.provider

region

asset.assetDetail.networkAssetClass.location

resourceId

asset.assetDetail.networkAssetClass.vpcId

name

asset.assetDetail.networkAssetClass.vpcName

addressPrefixes[]

asset.assetDetail.networkAssetClass.addressRanges[]

subnets[0].id

asset.assetDetail.networkAssetClass.subnetId

subnets[0].name

asset.assetDetail.networkAssetClass.subnetName

resourceId

asset.assetDetail.typedAttributes.resourceId

resourceGroupName

asset.assetDetail.typedAttributes.resourceGroupName

type

asset.assetDetail.typedAttributes.type

scanUuid

asset.assetDetail.typedAttributes.scanUuid

connectorUuid

asset.assetDetail.typedAttributes.connectorUuid

customerId

asset.assetDetail.typedAttributes.customerId

isSnapshotScanEnabled

asset.assetDetail.untypedAttributes.isSnapshotScanEnabled

controlsFailed

asset.assetDetail.untypedAttributes.controlsFailed

connectorUuids

asset.assetDetail.untypedAttributes.connectorUuids

customers

asset.assetDetail.untypedAttributes.customers

addressSpaces

asset.assetDetail.untypedAttributes.addressSpaces

dnsServerIPs

asset.assetDetail.untypedAttributes.dnsServerIPs

dnsServers

asset.assetDetail.untypedAttributes.dnsServers

subnets

asset.assetDetail.untypedAttributes.subnets

evaluations[].cid

findingGroup.findings[].asset.internalAssetId

evaluations[].resourceId

findingGroup.findings[].asset.assetName

resourceId

findingGroup.findings[].asset.externalAssetId

evaluations[].uuid

findingGroup.findings[].externalFindingId

evaluations[].criticality

findingGroup.findings[].severity

evaluations[].result

findingGroup.findings[].findingStatus

evaluations[].evaluationDates.firstEvaluated

findingGroup.findings[].firstFoundOn

evaluations[].evaluationDates.lastEvaluated

findingGroup.findings[].lastFoundOn

evaluations[].evaluationDates.dateReopen

findingGroup.findings[].reopenedOn

evaluations[].evaluationDates.dateFixed

findingGroup.findings[].lastFixedOn

evaluations[].cid

findingGroup.findings[].findingType.misconfiguration.policy.control.id

evaluations[].evidences

findingGroup.findings[].detectionResult

evaluations[].controlName

findingGroup.findings[].name

evaluations[].controlName

findingGroup.findings[].findingType.misconfiguration.policy.title

Azure Security Group Misconfig MapAzure Security Group Misconfig Map

Source Field Target Field

azure-firewall (default)

asset.assetHeader.assetTypeName

resourceId

asset.assetHeader.externalAssetId

uuid

asset.assetHeader.vendorAssetId

assetDetailName

asset.assetDetail.name

created

asset.assetDetail.sourceCreatedAt

updated

asset.assetDetail.sourceUpdatedAt

cloudType

asset.assetDetail.cloudInfo.provider

subscriptionId

asset.assetDetail.cloudInfo.accountId

region

asset.assetDetail.cloudInfo.region

tags[].name

asset.assetDetail.externalTags[].key

tags[].value

asset.assetDetail.externalTags[].value

SECURITY_GROUP (default)

asset.assetDetail.networkAssetClass.deviceType

cloudType

asset.assetDetail.networkAssetClass.provider

region

asset.assetDetail.networkAssetClass.location

networkInterfaces[].id

asset.assetDetail.networkAssetClass.interfaces[].id

subnets[0].id

asset.assetDetail.networkAssetClass.subnetId

subnets[0].name

asset.assetDetail.networkAssetClass.subnetName

resourceId

asset.assetDetail.typedAttributes.resourceId

resourceGroupName

asset.assetDetail.typedAttributes.resourceGroupName

type

asset.assetDetail.typedAttributes.type

scanUuid

asset.assetDetail.typedAttributes.scanUuid

connectorUuid

asset.assetDetail.typedAttributes.connectorUuid

customerId

asset.assetDetail.typedAttributes.customerId

key

asset.assetDetail.typedAttributes.key

isSnapshotScanEnabled

asset.assetDetail.untypedAttributes.isSnapshotScanEnabled

controlsFailed

asset.assetDetail.untypedAttributes.controlsFailed

inboundSecurityRules

asset.assetDetail.untypedAttributes.inboundSecurityRules

outboundSecurityRules

asset.assetDetail.untypedAttributes.outboundSecurityRules

subnets

asset.assetDetail.untypedAttributes.subnets

connectorUuids

asset.assetDetail.untypedAttributes.connectorUuids

customers

asset.assetDetail.untypedAttributes.customers

evaluations[].cid

findingGroup.findings[].asset.internalAssetId

evaluations[].resourceId

findingGroup.findings[].asset.assetName

resourceId

findingGroup.findings[].asset.externalAssetId

evaluations[].uuid

findingGroup.findings[].externalFindingId

evaluations[].criticality

findingGroup.findings[].severity

evaluations[].result

findingGroup.findings[].findingStatus

evaluations[].evaluationDates.firstEvaluated

findingGroup.findings[].firstFoundOn

evaluations[].evaluationDates.lastEvaluated

findingGroup.findings[].lastFoundOn

evaluations[].evaluationDates.dateReopen

findingGroup.findings[].reopenedOn

evaluations[].evaluationDates.dateFixed

findingGroup.findings[].lastFixedOn

evaluations[].cid

findingGroup.findings[].findingType.misconfiguration.policy.control.id

evaluations[].evidences

findingGroup.findings[].detectionResult

evaluations[].controlName

findingGroup.findings[].name

evaluations[].controlName

findingGroup.findings[].findingType.misconfiguration.policy.title