> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/asset-management/asset-classes/data-assets.md).

# Data assets

**Data assets**

The data assets inventory provides a centralized repository for all data assets within your environment. Powered by the Cortex Cloud Data Security (DSPM) module, it provides continuous visibility into where sensitive data resides, how it is used, and its exposure risk.

{% hint style="info" %}

### Note

The data assets inventory requires a Cortex XSIAM Premium license, or a base Cortex XSIAM license that includes the Cloud Posture Security or Cloud Runtime Security add-on.
{% endhint %}

Navigate to **Inventory** → **All Assets** → **Data** → **All Data Assets** to view your data landscape. The top of the page features interactive widgets that summarize your risk:

* **Assets at risk:** Displays a bar with various risk levels. You can hover your mouse to see the number of risks for each level.
* **Data stored in AWS, Azure, and GCP:** Displays the number of data assets located within each specific cloud platform. You can click any of these cloud platform icons to dynamically filter the inventory results below, and click them again to remove the filter.
* **Sensitive Assets:** Displays the number of assets containing sensitive data profiles.
* **Sensitive Assets Open to World:** Highlights sensitive assets that are publicly accessible.

You can filter the inventory to focus on specific data categories: **Databases** (structured data), **Storage Buckets** (folders and files), or **Disks** (VM disks like AWS EBS or Azure Managed Disks).

**Data asset details**

Clicking an asset in the inventory opens a detailed asset card with the following tabs:

* **Overview:** Provides highlights, properties, and identities with access to the resource, if any are found.
* **Identity:** Displays an aggregated view of the identities and permissions associated with the asset, including an interactive graph of the access paths.
* **Configurations:** Displays any Cloud Configuration Issues detected on the asset and provides the raw Asset Configuration JSON.
* **Data:** Provides an overview of the displayed asset and its associated risks, including the presence of Data Profiles like Financial or PCI and Data Patterns like credit card numbers.
* **Compliance:** Shows the Overall Compliance Score, a breakdown of Controls by Status, and a detailed list of compliance results based on industry standards.
* **Objects:** Provides a granular list of the objects stored within the asset and information pertaining to their contents.
* **AI Ecosystem:** Visualizes the Asset Story, providing a topological map of how the data asset interacts with connected AI components. This tab does not appear on every data asset. It only appears dynamically if Cortex XDR detects that the data asset is actively functioning as part of an AI supply chain, such as acting as an inference dataset or training dataset connected to an AI model

**Backups**

Alongside databases, storage buckets, and disks, the data asset class also provides an inventory of your environment's backups, such as AWS Backup resources. Navigate to **Inventory** → **All Assets** → **Data** → **Backups**.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://cortex-docs.paloaltonetworks.com/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/asset-management/asset-classes/data-assets.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.