September 2026

New API Ingestions

These are the Cortex Cloud API ingestions introduced in the September 2026 release. For the complete list of API ingestions see the Cortex Cloud Discovery Catalog.

Cloud Service Provider	RIT Name	Service	Permission Required	Asset Type ID	Action
Alibaba Cloud	alibaba-cloud-api-gateway	cloudapi	cloudapi:DescribeApis	ALIBABA_CLOUD_API_GATEWAY	DescribeApis
Alibaba Cloud	alibaba-cloud-api-gateway	cloudapi	cloudapi:DescribeApi	ALIBABA_CLOUD_API_GATEWAY	DescribeApi
Alibaba Cloud	alibaba-cloud-api-gateway	cloudapi	cloudapi:DescribeApiGroups	ALIBABA_CLOUD_API_GATEWAY	DescribeApiGroups
Alibaba Cloud	alibaba-cloud-api-gateway	cloudapi	cloudapi:DescribeTrafficControls	ALIBABA_CLOUD_API_GATEWAY	DescribeTrafficControls
Alibaba Cloud	alibaba-cloud-apsaradb-for-mongodb	dds	dds:DescribeDBInstances	ALIBABA_CLOUD_APSARADB_FOR_MONGODB	DescribeDBInstances
Alibaba Cloud	alibaba-cloud-apsaradb-for-mongodb	dds	dds:DescribeDBInstanceAttribute	ALIBABA_CLOUD_APSARADB_FOR_MONGODB	DescribeDBInstanceAttribute
Alibaba Cloud	alibaba-cloud-apsaradb-for-mongodb	dds	dds:DescribeSecurityIps	ALIBABA_CLOUD_APSARADB_FOR_MONGODB	DescribeSecurityIps
Alibaba Cloud	alibaba-cloud-apsaradb-for-mongodb	dds	dds:DescribeAuditPolicy	ALIBABA_CLOUD_APSARADB_FOR_MONGODB	DescribeAuditPolicy
Alibaba Cloud	alibaba-cloud-apsaradb-for-mongodb	dds	dds:DescribeBackupPolicy	ALIBABA_CLOUD_APSARADB_FOR_MONGODB	DescribeBackupPolicy
Alibaba Cloud	alibaba-cloud-apsaramq-for-kafka	alikafka	alikafka:ListInstance	ALIBABA_CLOUD_APSARAMQ_FOR_KAFKA	ListInstance
Alibaba Cloud	alibaba-cloud-apsaramq-for-kafka	alikafka	alikafka:ListTopic	ALIBABA_CLOUD_APSARAMQ_FOR_KAFKA	ListTopic
Alibaba Cloud	alibaba-cloud-apsaramq-for-kafka	alikafka	alikafka:ListGroup	ALIBABA_CLOUD_APSARAMQ_FOR_KAFKA	ListGroup
Alibaba Cloud	alibaba-cloud-bastionhost-instance	yundun-bastionhost	yundun-bastionhost:DescribeInstanceBastionhost	ALIBABA_CLOUD_BASTION_HOST_INSTANCE	DescribeInstanceBastionhost
Alibaba Cloud	alibaba-cloud-bastionhost-instance	yundun-bastionhost	yundun-bastionhost:DescribeInstanceAttribute	ALIBABA_CLOUD_BASTION_HOST_INSTANCE	DescribeInstanceAttribute
Alibaba Cloud	alibaba-cloud-bastionhost-instance	yundun-bastionhost	yundun-bastionhost:ListTagResources	ALIBABA_CLOUD_BASTION_HOST_INSTANCE	ListTagResources
Alibaba Cloud	alibaba-cloud-cbn-transit-router-attachment	cbn	cen:ListTransitRouterVpcAttachments	ALIBABA_CLOUD_CBN_TRANSIT_ROUTER_ATTACHMENT	ListTransitRouterVpcAttachments
Alibaba Cloud	alibaba-cloud-cbn-transit-router-attachment	cbn	cen:ListTransitRouterVbrAttachments	ALIBABA_CLOUD_CBN_TRANSIT_ROUTER_ATTACHMENT	ListTransitRouterVbrAttachments
Alibaba Cloud	alibaba-cloud-cbn-transit-router-attachment	cbn	cen:ListTransitRouterPeerAttachments	ALIBABA_CLOUD_CBN_TRANSIT_ROUTER_ATTACHMENT	ListTransitRouterPeerAttachments
Alibaba Cloud	alibaba-cloud-cbn-transit-router-attachment	cbn	cen:ListTransitRouterVpnAttachments	ALIBABA_CLOUD_CBN_TRANSIT_ROUTER_ATTACHMENT	ListTransitRouterVpnAttachments
Alibaba Cloud	alibaba-cloud-cbn-transit-router-attachment	cbn	cen:ListTransitRouterRouteTables	ALIBABA_CLOUD_CBN_TRANSIT_ROUTER_ATTACHMENT	ListTransitRouterRouteTables
Alibaba Cloud	alibaba-cloud-cbn-transit-router-attachment	cbn	cen:ListTransitRouterRouteTableAssociations	ALIBABA_CLOUD_CBN_TRANSIT_ROUTER_ATTACHMENT	ListTransitRouterRouteTableAssociations
Alibaba Cloud	alibaba-cloud-cbn-transit-router-attachment	cbn	cen:ListTransitRouterRouteTablePropagations	ALIBABA_CLOUD_CBN_TRANSIT_ROUTER_ATTACHMENT	ListTransitRouterRouteTablePropagations
Alibaba Cloud	alibaba-cloud-data-transmission-job	dts	dts:DescribeDtsJobs	ALIBABA_CLOUD_DATA_TRANSMISSION_JOB	DescribeDtsJobs
Alibaba Cloud	alibaba-cloud-dns-domain	alidns	alidns:DescribeDomains	ALIBABA_CLOUD_DNS_DOMAIN	DescribeDomains
Alibaba Cloud	alibaba-cloud-dns-domain	alidns	alidns:DescribeDomainDnssecInfo	ALIBABA_CLOUD_DNS_DOMAIN	DescribeDomainDnssecInfo
Alibaba Cloud	alibaba-cloud-dns-record	alidns	alidns:DescribeDomainRecords	ALIBABA_CLOUD_DNS_RECORD	DescribeDomainRecords
Alibaba Cloud	alibaba-cloud-eiam-conditional-access-policy	eiam	eiam:ListConditionalAccessPolicies	ALIBABA_CLOUD_EIAM_CONDITIONAL_ACCESS_POLICY	ListConditionalAccessPolicies
Alibaba Cloud	alibaba-cloud-hbr-vault	hbr	hbr:DescribeVaults	ALIBABA_CLOUD_HBR_VAULT	DescribeVaults
Alibaba Cloud	alibaba-cloud-hbr-vault	hbr	hbr:DescribeBackupPlans	ALIBABA_CLOUD_HBR_VAULT	DescribeBackupPlans
Alibaba Cloud	alibaba-cloud-privatelink-vpc-endpoint	privatelink	privatelink:ListVpcEndpoints	ALIBABA_CLOUD_PRIVATELINK_VPC_ENDPOINT	ListVpcEndpoints
Alibaba Cloud	alibaba-cloud-privatelink-vpc-endpoint	privatelink	privatelink:ListVpcEndpointSecurityGroups	ALIBABA_CLOUD_PRIVATELINK_VPC_ENDPOINT	ListVpcEndpointSecurityGroups
Alibaba Cloud	alibaba-cloud-privatelink-vpc-endpoint	privatelink	privatelink:ListVpcEndpointZones	ALIBABA_CLOUD_PRIVATELINK_VPC_ENDPOINT	ListVpcEndpointZones
Alibaba Cloud	alibaba-cloud-privatelink-vpc-endpoint-service	privatelink	privatelink:ListVpcEndpointServices	ALIBABA_CLOUD_PRIVATELINK_VPC_ENDPOINT_SERVICE	ListVpcEndpointServices
AWS	aws-sagemaker-model-card	sagemaker	sagemaker:ListModelCards	AMAZON_SAGEMAKER_MODEL_CARD	ListModelCards
AWS	aws-sagemaker-model-card	sagemaker	sagemaker:DescribeModelCard	AMAZON_SAGEMAKER_MODEL_CARD	DescribeModelCard
AWS	aws-sagemaker-model-card	sagemaker	sagemaker:ListTags	AMAZON_SAGEMAKER_MODEL_CARD	ListTags
AWS	aws-apigateway-client-certificate	apigateway	apigateway:GET	AWS_API_GATEWAY_CLIENT_CERTIFICATE	GET
AWS	aws-datazone-environment	datazone	datazone:ListEnvironments	AWS_DATAZONE_ENVIRONMENT	ListEnvironments
AWS	aws-datazone-environment-blueprint-configuration	datazone	datazone:ListEnvironmentBlueprintConfigurations	AWS_DATAZONE_ENVIRONMENT_BLUEPRINT_CONFIGURATION	ListEnvironmentBlueprintConfigurations
AWS	aws-ec2-verified-access-endpoint	ec2	ec2:DescribeVerifiedAccessEndpoints	AWS_EC2_VERIFIED_ACCESS_ENDPOINT	DescribeVerifiedAccessEndpoints
AWS	aws-ec2-verified-access-instance	ec2	ec2:DescribeVerifiedAccessInstances	AWS_EC2_VERIFIED_ACCESS_INSTANCE	DescribeVerifiedAccessInstances
AWS	aws-ec2-verified-access-trust-provider	ec2	ec2:DescribeVerifiedAccessTrustProviders	AWS_EC2_VERIFIED_ACCESS_TRUST_PROVIDER	DescribeVerifiedAccessTrustProviders
AWS	aws-s3-bucket-replication	s3	s3:GetReplicationConfiguration	AWS_S3_BUCKET_REPLICATION	GetReplicationConfiguration
AWS	aws-sagemaker-experiment	sagemaker	sagemaker:ListExperiments	AWS_SAGEMAKER_EXPERIMENT	ListExperiments
AWS	aws-sagemaker-experiment	sagemaker	sagemaker:DescribeExperiment	AWS_SAGEMAKER_EXPERIMENT	DescribeExperiment
AWS	aws-sagemaker-experiment	sagemaker	sagemaker:ListTags	AWS_SAGEMAKER_EXPERIMENT	ListTags
AWS	aws-sagemaker-model-package	sagemaker	sagemaker:ListModelPackages	AWS_SAGEMAKER_MODEL_PACKAGE	ListModelPackages
AWS	aws-sagemaker-model-package	sagemaker	sagemaker:DescribeModelPackage	AWS_SAGEMAKER_MODEL_PACKAGE	DescribeModelPackage
AWS	aws-sagemaker-model-package	sagemaker	sagemaker:ListTags	AWS_SAGEMAKER_MODEL_PACKAGE	ListTags
AWS	aws-storage-gateway-information	storagegateway	storagegateway:ListGateways	AWS_STORAGE_GATEWAY	ListGateways
AWS	aws-storage-gateway-information	storagegateway	storagegateway:DescribeGatewayInformation	AWS_STORAGE_GATEWAY	DescribeGatewayInformation
AWS	aws-storage-gateway-information	storagegateway	storagegateway:DescribeSMBSettings	AWS_STORAGE_GATEWAY	DescribeSMBSettings
Azure	azure-data-factory-v2-private-endpoint-connection	Microsoft.DataFactory	Microsoft.DataFactory/factories/privateEndpointConnections/read	AZURE_DATA_FACTORY_V2_PRIVATE_ENDPOINT_CONNECTION	read
Azure	azure-documentdb-mongo-clusters	Microsoft.DocumentDB	Microsoft.DocumentDB/mongoClusters/read	AZURE_DOCUMENT_DB_MONGO_CLUSTERS	read
Azure	azure-monitor-private-link-scope	Microsoft.Insights	Microsoft.Insights/PrivateLinkScopes/ScopedResources/Read	AZURE_MONITOR_PRIVATE_LINK_SCOPE	Read
Azure	azure-monitor-private-link-scope	Microsoft.Insights	Microsoft.Insights/PrivateLinkScopes/Read	AZURE_MONITOR_PRIVATE_LINK_SCOPE	Read
Azure	azure-saas-resource	Microsoft.ResourceGraph	Microsoft.ResourceGraph/resources/read	AZURE_SAAS_RESOURCE	read
GCP	gcloud-dataproc-metastore-service	metastore	metastore.services.getIamPolicy	DATAPROC_METASTORE_SERVICE	getIamPolicy
GCP	gcloud-dataproc-metastore-service	metastore	metastore.services.list	DATAPROC_METASTORE_SERVICE	list
GCP	gcloud-dataproc-metastore-federation	metastore	metastore.federations.getIamPolicy	DATAPROC_METASTORE_FEDERATION	getIamPolicy
GCP	gcloud-dataproc-metastore-federation	metastore	metastore.federations.list	DATAPROC_METASTORE_FEDERATION	list
GCP	gcloud-ai-applications-cmek-config	discoveryengine	discoveryengine.cmekConfigs.list	GCLOUD_AI_APPLICATIONS_CMEK_CONFIG	list
GCP	gcloud-security-command-center-organization-event-threat-detection-custom-module	securitycentermanagement	securitycentermanagement.eventThreatDetectionCustomModules.list	GOOGLE_SCC_EVENT_THREAT_DETECTION_CUSTOM_MODULE	list

Updated API Ingestions

These are the Cortex Cloud API ingestions introduced in the September 2026 release. For the complete list of API ingestions see the Cortex Cloud Discovery Catalog.

Cloud Service Provider	RIT Name	Service	Permission Required	Asset Type ID	Action
Alibaba Cloud	alibaba-cloud-ecs-instance	ecs	ecs:DescribeInstances	ALIBABA_CLOUD_ECS_INSTANCE	DescribeInstances
Alibaba Cloud	alibaba-cloud-ecs-instance	ecs	ecs:DescribeInstanceRamRole	ALIBABA_CLOUD_ECS_INSTANCE	DescribeInstanceRamRole
Alibaba Cloud	alibaba-cloud-ecs-disk	ecs	ecs:DescribeDisks	ALIBABA_CLOUD_DISK	DescribeDisks
Alibaba Cloud	alibaba-cloud-eiam-instance	eiam	eiam:ListInstances	ALIBABA_CLOUD_EIAM_INSTANCE	ListInstances
Alibaba Cloud	alibaba-cloud-eiam-instance	eiam	eiam:GetPasswordComplexityConfiguration	ALIBABA_CLOUD_EIAM_INSTANCE	GetPasswordComplexityConfiguration
Alibaba Cloud	alibaba-cloud-eiam-instance	eiam	eiam:GetPasswordExpirationConfiguration	ALIBABA_CLOUD_EIAM_INSTANCE	GetPasswordExpirationConfiguration
Alibaba Cloud	alibaba-cloud-eiam-instance	eiam	eiam:GetInstanceControlConfiguration	ALIBABA_CLOUD_EIAM_INSTANCE	GetInstanceControlConfiguration
Alibaba Cloud	alibaba-cloud-enterprise-network	cen	cen:DescribeCens	ALIBABA_CLOUD_ENTERPRISE_NETWORK	DescribeCens
Alibaba Cloud	alibaba-cloud-enterprise-network	cen	cen:DescribeCenInterRegionBandwidthLimits	ALIBABA_CLOUD_ENTERPRISE_NETWORK	DescribeCenInterRegionBandwidthLimits
AWS	aws-api-gateway-authorizer	apigateway	apigateway:GET	AMAZON_API_GATEWAY_AUTHORIZER	GET
AWS	aws-apigateway-get-rest-apis	apigateway	apigateway:GET	AMAZON_API_GATEWAY_REST_API	GET
AWS	aws-apigateway-get-stages	apigateway	apigateway:GET	AMAZON_API_GATEWAY_REST_API_STAGE	GET
AWS	aws-apigateway-method	apigateway	apigateway:GET	AMAZON_API_GATEWAY_METHOD	GET
AWS	aws-apigateway-spec-export	apigateway	apigateway:GET	AWS_STAGE_SPEC	GET
AWS	aws-apigatewayv2-api	apigateway	apigateway:GET	AWS_APIGATEWAYV2_API	GET
AWS	aws-apigatewayv2-route	apigateway	apigateway:GET	AWS_API_GATEWAYV2_ROUTE	GET
AWS	aws-apigatewayv2-stage	apigateway	apigateway:GET	AWS_APIGATEWAYV2_STAGE	GET
AWS	aws-athena-workgroup	athena	athena:ListWorkGroups	AMAZON_ATHENA_WORKGROUP	ListWorkGroups
AWS	aws-athena-workgroup	athena	athena:GetWorkGroup	AMAZON_ATHENA_WORKGROUP	GetWorkGroup
AWS	aws-budgets-budget	budgets	budgets:ViewBudget	AWS_BUDGETS_BUDGET	ViewBudget
AWS	aws-cloudfront-list-distributions	cloudfront	cloudfront:ListDistributions	CLOUDFRONT_DISTRIBUTION	ListDistributions
AWS	aws-cloudfront-list-distributions	cloudfront	cloudfront:GetDistributionConfig	CLOUDFRONT_DISTRIBUTION	GetDistributionConfig
AWS	aws-cloudfront-list-distributions	cloudfront	cloudfront:ListTagsForResource	CLOUDFRONT_DISTRIBUTION	ListTagsForResource
AWS	aws-cloudfront-origin-access-control	cloudfront	cloudfront:ListOriginAccessControls	AMAZON_CLOUDFRONT_ORIGIN_ACCESS_CONTROL	ListOriginAccessControls
AWS	aws-cloudfront-response-headers-policy	cloudfront	cloudfront:ListResponseHeadersPolicies	AMAZON_CLOUDFRONT_RESPONSE_HEADERS_POLICY	ListResponseHeadersPolicies
AWS	aws-cloudfront-response-headers-policy	cloudfront	cloudfront:GetResponseHeadersPolicy	AMAZON_CLOUDFRONT_RESPONSE_HEADERS_POLICY	GetResponseHeadersPolicy
AWS	aws-cloudwatch-insight-rule	cloudwatch	cloudwatch:DescribeInsightRules	AMAZON_CLOUDWATCH_INSIGHT_RULE	DescribeInsightRules
AWS	aws-cloudwatch-insight-rule	cloudwatch	cloudwatch:ListTagsForResource	AMAZON_CLOUDWATCH_INSIGHT_RULE	ListTagsForResource
AWS	aws-code-build-report-group	codebuild	codebuild:BatchGetReportGroups	AWS_CODE_BUILD_REPORT_GROUP	BatchGetReportGroups
AWS	aws-code-build-report-group	codebuild	codebuild:ListReportGroups	AWS_CODE_BUILD_REPORT_GROUP	ListReportGroups
AWS	aws-code-commit-repository	codecommit	codecommit:ListRepositories	AWS_CODE_COMMIT_REPOSITORY	ListRepositories
AWS	aws-code-commit-repository	codecommit	codecommit:GetRepository	AWS_CODE_COMMIT_REPOSITORY	GetRepository
AWS	aws-code-deploy-application	codedeploy	codedeploy:ListApplications	AWS_CODE_DEPLOY_APPLICATION	ListApplications
AWS	aws-code-deploy-application	codedeploy	codedeploy:BatchGetApplications	AWS_CODE_DEPLOY_APPLICATION	BatchGetApplications
AWS	aws-code-deploy-application	codedeploy	codedeploy:ListTagsForResource	AWS_CODE_DEPLOY_APPLICATION	ListTagsForResource
AWS	aws-cognito-sync-pool-usage	cognito-sync	cognito-sync:ListIdentityPoolUsage	AMAZON_COGNITO_SYNC_POOL_USAGE	ListIdentityPoolUsage
AWS	aws-comprehend-document-classifier-summary	comprehend	comprehend:ListDocumentClassifiers	AMAZON_COMPREHEND_DOCUMENT_CLASSIFIER_SUMMARY	ListDocumentClassifiers
AWS	aws-configservice-describe-configuration-recorders	config	config:DescribeConfigurationRecorders	AWS_CONFIG_SERVICE_CONFIGURATION_RECORDER	DescribeConfigurationRecorders
AWS	aws-configservice-describe-configuration-recorders	config	config:DescribeConfigurationRecorderStatus	AWS_CONFIG_SERVICE_CONFIGURATION_RECORDER	DescribeConfigurationRecorderStatus
AWS	aws-datazone-data-source	datazone	datazone:ListDataSources	AWS_DATAZONE_DATA_SOURCE	ListDataSources
AWS	aws-datazone-domain	datazone	datazone:ListDomains	AWS_DATAZONE_DOMAIN	ListDomains
AWS	aws-dax-parameter-group	dax	dax:DescribeParameterGroups	AMAZON_DAX_PARAMETER_GROUP	DescribeParameterGroups
AWS	aws-describe-account-attributes	ec2	ec2:DescribeAccountAttributes	AWS_EC2_ACCOUNT_ATTRIBUTE	DescribeAccountAttributes
AWS	aws-describe-delivery-channels	config	config:DescribeDeliveryChannels	AWS_CONFIG_SERVICE_DELIVERY_CHANNEL	DescribeDeliveryChannels
AWS	aws-describe-mount-targets	elasticfilesystem	elasticfilesystem:DescribeMountTargets	AWS_EFS_MOUNT_TARGET	DescribeMountTargets
AWS	aws-describe-vpc-endpoints	ec2	ec2:DescribeVpcEndpoints	AWS_VPC_ENDPOINT	DescribeVpcEndpoints
AWS	aws-describe-workspace-directories	workspaces	workspaces:DescribeWorkspaceDirectories	AWS_WORKSPACE_DIRECTORY	DescribeWorkspaceDirectories
AWS	aws-ds-directory	ds	ds:DescribeDirectories	AWS_DIRECTORY_SERVICE	DescribeDirectories
AWS	aws-ec2-customer-gateway	ec2	ec2:DescribeCustomerGateways	AWS_CUSTOMER_GATEWAY	DescribeCustomerGateways
AWS	aws-ec2-describe-flow-logs	ec2	ec2:DescribeFlowLogs	AWS_EC2_FLOW_LOG	DescribeFlowLogs
AWS	aws-ec2-describe-images	ec2	ec2:DescribeImages	AWS_EC2_IMAGE	DescribeImages
AWS	aws-ec2-describe-internet-gateways	ec2	ec2:DescribeInternetGateways	AWS_INTERNET_GATEWAY	DescribeInternetGateways
AWS	aws-ec2-describe-network-acls	ec2	ec2:DescribeNetworkAcls	AWS_EC2_NETWORK_ACL	DescribeNetworkAcls
AWS	aws-ec2-describe-network-interfaces	ec2	ec2:DescribeNetworkInterfaces	AWS_EC2_NETWORK_INTERFACE	DescribeNetworkInterfaces
AWS	aws-ec2-describe-route-tables	ec2	ec2:DescribeRouteTables	AWS_EC2_ROUTE_TABLE	DescribeRouteTables
AWS	aws-ec2-describe-vpc-peering-connections	ec2	ec2:DescribeVpcPeeringConnections	AWS_VPC_PEERING_CONNECTION	DescribeVpcPeeringConnections
AWS	aws-ec2-describe-vpcs	ec2	ec2:DescribeVpcs	AWS_VPC	DescribeVpcs
AWS	aws-ec2-describe-vpn-connections	ec2	ec2:DescribeVpnConnections	AWS_VPN_CONNECTION	DescribeVpnConnections
AWS	aws-ec2-describe-vpn-gateways	ec2	ec2:DescribeVpnGateways	AWS_VPN_GATEWAY	DescribeVpnGateways
AWS	aws-ec2-elastic-address	ec2	ec2:DescribeAddresses	AWS_EIP	DescribeAddresses
AWS	aws-ec2-key-pair	ec2	ec2:DescribeKeyPairs	AWS_EC2_KEY_PAIR	DescribeKeyPairs
AWS	aws-ec2-launch-template-data	ec2	ec2:DescribeLaunchTemplates	AWS_EC2_LAUNCH_TEMPLATE	DescribeLaunchTemplates
AWS	aws-ec2-launch-template	ec2	ec2:DescribeLaunchTemplates	AWS_EC2_LAUNCH_TEMPLATE	DescribeLaunchTemplates
AWS	aws-ec2-vpc-endpoint-service-configuration	ec2	ec2:DescribeVpcEndpointServiceConfigurations	AWS_EC2_VPC_ENDPOINT_SERVICE_CONFIGURATION	DescribeVpcEndpointServiceConfigurations
AWS	aws-ec2-vpc-endpoint-service-permission	ec2	ec2:DescribeVpcEndpointServicePermissions	AWS_VPC_ENDPOINT_SERVICE_PERMISSIONS	DescribeVpcEndpointServicePermissions
AWS	aws-ec2-vpc-endpoint-service	ec2	ec2:DescribeVpcEndpointServices	AWS_VPC_ENDPOINT_SERVICE	DescribeVpcEndpointServices
AWS	aws-ec2-vpc-stats	ec2	ec2:DescribeVpcs	AWS_VPC	DescribeVpcs
AWS	aws-ecr-image	ecr	ecr:DescribeRepositories	AWS_ECR_IMAGE	DescribeRepositories
AWS	aws-ecr-image	ecr	ecr:DescribeImages	AWS_ECR_IMAGE	DescribeImages
AWS	aws-ecr-registry	ecr	ecr:DescribeRegistry	AWS_ECR_REGISTRY	DescribeRegistry
AWS	aws-elasticache-cache-clusters	elasticache	elasticache:DescribeCacheClusters	AWS_ELASTICACHE_CACHE_CLUSTER	DescribeCacheClusters
AWS	aws-elasticache-describe-replication-groups	elasticache	elasticache:DescribeReplicationGroups	AWS_ELASTICACHE_REPLICATION_GROUP	DescribeReplicationGroups
AWS	aws-elbv2-target-health	elasticloadbalancing	elasticloadbalancing:DescribeTargetGroups	AWS_ELBV2_TARGET_HEALTH	DescribeTargetGroups
AWS	aws-elbv2-target-health	elasticloadbalancing	elasticloadbalancing:DescribeTargetHealth	AWS_ELBV2_TARGET_HEALTH	DescribeTargetHealth
AWS	aws-emr-security-configuration	elasticmapreduce	elasticmapreduce:ListSecurityConfigurations	AWS_EMR_SECURITY_CONFIGURATION	ListSecurityConfigurations
AWS	aws-es-describe-elasticsearch-domain	es	es:ListDomainNames	AWS_ES_DOMAIN	ListDomainNames
AWS	aws-es-describe-elasticsearch-domain	es	es:DescribeElasticsearchDomains	AWS_ES_DOMAIN	DescribeElasticsearchDomains
AWS	aws-glue-connection	glue	glue:GetConnections	AWS_GLUE_CONNECTION	GetConnections
AWS	aws-glue-crawler	glue	glue:GetCrawlers	AWS_GLUE_CRAWLER	GetCrawlers
AWS	aws-glue-job	glue	glue:GetJobs	AWS_GLUE_JOB	GetJobs
AWS	aws-glue-security-configuration	glue	glue:GetSecurityConfigurations	AWS_GLUE_SECURITY_CONFIGURATION	GetSecurityConfigurations
AWS	aws-iam-list-access-keys	iam	iam:ListUsers	AWS_IAM_ACCESS_KEY	ListUsers
AWS	aws-iam-list-access-keys	iam	iam:ListAccessKeys	AWS_IAM_ACCESS_KEY	ListAccessKeys
AWS	aws-iam-list-ssh-public-keys	iam	iam:ListUsers	AWS_IAM_USER_SSH_PUBLIC_KEY	ListUsers
AWS	aws-iam-list-ssh-public-keys	iam	iam:ListSSHPublicKeys	AWS_IAM_USER_SSH_PUBLIC_KEY	ListSSHPublicKeys
AWS	aws-iam-list-user-policies	iam	iam:ListUsers	AWS_IAM_USER_POLICY	ListUsers
AWS	aws-iam-list-user-policies	iam	iam:ListUserPolicies	AWS_IAM_USER_POLICY	ListUserPolicies
AWS	aws-inspector-v2-coverage	inspector2	inspector2:ListCoverage	AWS_INSPECTOR_V2_COVERAGE	ListCoverage
AWS	aws-kms-get-key-rotation-status	kms	kms:ListKeys	AWS_KMS_KEY_ROTATION_STATUS	ListKeys
AWS	aws-kms-get-key-rotation-status	kms	kms:GetKeyRotationStatus	AWS_KMS_KEY_ROTATION_STATUS	GetKeyRotationStatus
AWS	aws-lexv2-bot	lex	lex:ListBots	AWS_LEXV2_BOT	ListBots
AWS	aws-logs-describe-metric-filters	logs	logs:DescribeMetricFilters	AWS_LOG_METRIC_FILTER	DescribeMetricFilters
AWS	aws-mediastore-container	mediastore	mediastore:ListContainers	AWS_MEDIASTORE_CONTAINER	ListContainers
AWS	aws-mediastore-container	mediastore	mediastore:GetContainerPolicy	AWS_MEDIASTORE_CONTAINER	GetContainerPolicy
AWS	aws-mq-broker	mq	mq:ListBrokers	AMAZON_MQ_BROKER	ListBrokers
AWS	aws-opsworks-user-profiles	opsworks	opsworks:DescribeUserProfiles	AWS_OPSWORKS_USER_PROFILE	DescribeUserProfiles
AWS	aws-pinpoint-email-channel	pinpoint	pinpoint:GetEmailChannel	AWS_PINPOINT_EMAIL_CHANNEL	GetEmailChannel
AWS	aws-pinpoint-sms-channel	pinpoint	pinpoint:GetSmsChannel	AWS_PINPOINT_SMS_CHANNEL	GetSmsChannel
AWS	aws-quicksight-account-setting	quicksight	quicksight:DescribeAccountSettings	AWS_QUICKSIGHT_ACCOUNT_SETTING	DescribeAccountSettings
AWS	aws-rds-describe-event-subscriptions	rds	rds:DescribeEventSubscriptions	AWS_RDS_EVENT_SUBSCRIPTION	DescribeEventSubscriptions
AWS	aws-route53-domain	route53domains	route53domains:ListDomains	AWS_ROUTE53_DOMAIN	ListDomains
AWS	aws-route53-health-check	route53	route53:ListHealthChecks	AWS_ROUTE53_HEALTH_CHECK	ListHealthChecks
AWS	aws-route53-query-logging-config	route53	route53:ListQueryLoggingConfigs	AWS_ROUTE53_QUERY_LOGGING_CONFIG	ListQueryLoggingConfigs
AWS	aws-route53resolver-query-logging-config-association	route53resolver	route53resolver:ListResolverQueryLogConfigAssociations	AWS_ROUTE53RESOLVER_QUERY_LOGGING_CONFIG_ASSOCIATION	ListResolverQueryLogConfigAssociations
AWS	aws-s3api-get-bucket-acl	s3	s3:ListAllMyBuckets	AWS_S3_BUCKET_ACL	ListAllMyBuckets
AWS	aws-s3api-get-bucket-acl	s3	s3:GetBucketAcl	AWS_S3_BUCKET_ACL	GetBucketAcl
AWS	aws-sagemaker-endpoint	sagemaker	sagemaker:ListEndpoints	AWS_SAGEMAKER_ENDPOINT	ListEndpoints
AWS	aws-sagemaker-endpoint	sagemaker	sagemaker:DescribeEndpoint	AWS_SAGEMAKER_ENDPOINT	DescribeEndpoint
AWS	aws-sagemaker-model	sagemaker	sagemaker:ListModels	AWS_SAGEMAKER_MODEL	ListModels
AWS	aws-sagemaker-model	sagemaker	sagemaker:DescribeModel	AWS_SAGEMAKER_MODEL	DescribeModel
AWS	aws-ses-configuration-set	ses	ses:ListConfigurationSets	AWS_SES_CONFIGURATION_SET	ListConfigurationSets
AWS	aws-ssm-association	ssm	ssm:ListAssociations	AWS_SSM_ASSOCIATION	ListAssociations
AWS	aws-ssm-document	ssm	ssm:ListDocuments	AWS_SSM_DOCUMENT	ListDocuments
AWS	aws-ssm-parameter	ssm	ssm:DescribeParameters	AWS_SSM_PARAMETER	DescribeParameters
AWS	aws-storage-gateway-information	storagegateway	storagegateway:ListGateways	AWS_STORAGE_GATEWAY	ListGateways
AWS	aws-storage-gateway-information	storagegateway	storagegateway:DescribeGatewayInformation	AWS_STORAGE_GATEWAY	DescribeGatewayInformation
AWS	aws-storage-gateway-information	storagegateway	storagegateway:DescribeSMBSettings	AWS_STORAGE_GATEWAY	DescribeSMBSettings
AWS	aws-trusted-advisor-check-result	support	support:DescribeTrustedAdvisorChecks	AWS_TRUSTED_ADVISOR_CHECK_RESULT	DescribeTrustedAdvisorChecks
AWS	aws-vpc-dhcp-options	ec2	ec2:DescribeDhcpOptions	AWS_DHCP_OPTIONS	DescribeDhcpOptions
AWS	aws-vpc-nat-gateway	ec2	ec2:DescribeNatGateways	AWS_NAT_GATEWAY	DescribeNatGateways
AWS	aws-vpc-transit-gateway-attachment	ec2	ec2:DescribeTransitGatewayAttachments	AWS_TRANSIT_GATEWAY_ATTACHMENT	DescribeTransitGatewayAttachments
AWS	aws-vpc-transit-gateway-route-table	ec2	ec2:DescribeTransitGatewayRouteTables	AWS_TRANSIT_GATEWAY_ROUTE_TABLE	DescribeTransitGatewayRouteTables
AWS	aws-waf-classic-global-ip-set	waf	waf:ListIPSets	AWS_WAF_CLASSIC_GLOBAL_IP_SET	ListIPSets
AWS	aws-waf-classic-regional-ip-set	waf-regional	waf-regional:ListIPSets	AWS_WAF_CLASSIC_REGIONAL_IP_SET	ListIPSets
AWS	aws-workspace-ip-group	workspaces	workspaces:DescribeWorkspaceIpGroups	AWS_WORKSPACE_IP_GROUP	DescribeWorkspaceIpGroups
AWS	eai-aws-apigateway-get-rest-apis	apigateway	apigateway:GET	AMAZON_API_GATEWAY_REST_API	GET
AWS	eai-aws-apigateway-get-stages	apigateway	apigateway:GET	AMAZON_API_GATEWAY_REST_API_STAGE	GET
AWS	eai-aws-apigateway-method	apigateway	apigateway:GET	AMAZON_API_GATEWAY_METHOD	GET
AWS	eai-aws-cloudfront-list-distributions	cloudfront	cloudfront:GetDistribution	CLOUDFRONT_DISTRIBUTION	GetDistribution
AWS	eai-aws-cloudfront-list-distributions	cloudfront	cloudfront:ListTagsForResource	CLOUDFRONT_DISTRIBUTION	ListTagsForResource
AWS	eai-aws-configservice-describe-configuration-recorders	config	config:DescribeConfigurationRecorders	AWS_CONFIG_SERVICE_CONFIGURATION_RECORDER	DescribeConfigurationRecorders
AWS	eai-aws-configservice-describe-configuration-recorders	config	config:DescribeConfigurationRecorderStatus	AWS_CONFIG_SERVICE_CONFIGURATION_RECORDER	DescribeConfigurationRecorderStatus
AWS	eai-aws-describe-mount-targets	elasticfilesystem	elasticfilesystem:DescribeMountTargets	AWS_EFS_MOUNT_TARGET	DescribeMountTargets
AWS	eai-aws-describe-vpc-endpoints	ec2	ec2:DescribeVpcEndpoints	AWS_VPC_ENDPOINT	DescribeVpcEndpoints
AWS	eai-aws-ec2-describe-flow-logs	ec2	ec2:DescribeFlowLogs	AWS_EC2_FLOW_LOG	DescribeFlowLogs
AWS	eai-aws-ec2-describe-images	ec2	ec2:DescribeImages	AWS_EC2_IMAGE	DescribeImages
AWS	eai-aws-ec2-describe-instances	ec2	ec2:DescribeInstances	AWS_EC2_INSTANCE	DescribeInstances
AWS	eai-aws-ec2-describe-internet-gateways	ec2	ec2:DescribeInternetGateways	AWS_INTERNET_GATEWAY	DescribeInternetGateways
AWS	eai-aws-ec2-describe-network-acls	ec2	ec2:DescribeNetworkAcls	AWS_EC2_NETWORK_ACL	DescribeNetworkAcls
AWS	eai-aws-ec2-describe-network-interfaces	ec2	ec2:DescribeNetworkInterfaces	AWS_EC2_NETWORK_INTERFACE	DescribeNetworkInterfaces
AWS	eai-aws-ec2-describe-route-tables	ec2	ec2:DescribeRouteTables	AWS_EC2_ROUTE_TABLE	DescribeRouteTables
AWS	eai-aws-ec2-describe-security-groups	ec2	ec2:DescribeSecurityGroups	AWS_EC2_SECURITY_GROUP	DescribeSecurityGroups
AWS	eai-aws-ec2-describe-snapshots	ec2	ec2:DescribeSnapshots	AWS_EBS_SNAPSHOT	DescribeSnapshots
AWS	eai-aws-ec2-describe-subnets	ec2	ec2:DescribeSubnets	AWS_SUBNET	DescribeSubnets
AWS	eai-aws-ec2-describe-volumes	ec2	ec2:DescribeVolumes	AWS_EBS_VOLUME	DescribeVolumes
AWS	eai-aws-ec2-describe-vpc-peering-connections	ec2	ec2:DescribeVpcPeeringConnections	AWS_VPC_PEERING_CONNECTION	DescribeVpcPeeringConnections
AWS	eai-aws-ec2-describe-vpcs	ec2	ec2:DescribeVpcs	AWS_VPC	DescribeVpcs
AWS	eai-aws-ec2-describe-vpn-connections	ec2	ec2:DescribeVpnConnections	AWS_VPN_CONNECTION	DescribeVpnConnections
AWS	eai-aws-ec2-describe-vpn-gateways	ec2	ec2:DescribeVpnGateways	AWS_VPN_GATEWAY	DescribeVpnGateways
AWS	eai-aws-ec2-elastic-address	ec2	ec2:DescribeAddresses	AWS_EIP	DescribeAddresses
AWS	eai-aws-ec2-key-pair	ec2	ec2:DescribeKeyPairs	AWS_EC2_KEY_PAIR	DescribeKeyPairs
AWS	eai-aws-elasticache-cache-clusters	elasticache	elasticache:DescribeCacheClusters	AWS_ELASTICACHE_CACHE_CLUSTER	DescribeCacheClusters
AWS	eai-aws-elasticache-describe-replication-groups	elasticache	elasticache:DescribeReplicationGroups	AWS_ELASTICACHE_REPLICATION_GROUP	DescribeReplicationGroups
AWS	eai-aws-emr-security-configuration	elasticmapreduce	elasticmapreduce:DescribeSecurityConfiguration	AWS_EMR_SECURITY_CONFIGURATION	DescribeSecurityConfiguration
AWS	eai-aws-es-describe-elasticsearch-domain	es	es:DescribeElasticsearchDomains	AWS_ES_DOMAIN	DescribeElasticsearchDomains
AWS	eai-aws-glue-connection	glue	glue:GetConnection	AWS_GLUE_CONNECTION	GetConnection
AWS	eai-aws-kms-get-key-rotation-status	kms	kms:GetKeyRotationStatus	AWS_KMS_KEY_ROTATION_STATUS	GetKeyRotationStatus
AWS	eai-aws-logs-describe-metric-filters	logs	logs:DescribeMetricFilters	AWS_LOG_METRIC_FILTER	DescribeMetricFilters
AWS	eai-aws-mq-broker	mq	mq:DescribeBroker	AMAZON_MQ_BROKER	DescribeBroker
AWS	eai-aws-rds-db-cluster-snapshots	rds	rds:DescribeDBClusterSnapshots	AWS_RDS_DB_CLUSTER_SNAPSHOT	DescribeDBClusterSnapshots
AWS	eai-aws-rds-db-cluster	rds	rds:DescribeDBClusters	AWS_RDS_DB_CLUSTER	DescribeDBClusters
AWS	eai-aws-rds-describe-db-snapshots	rds	rds:DescribeDBSnapshots	AWS_RDS_DB_SNAPSHOT	DescribeDBSnapshots
AWS	eai-aws-rds-describe-event-subscriptions	rds	rds:DescribeEventSubscriptions	AWS_RDS_EVENT_SUBSCRIPTION	DescribeEventSubscriptions
AWS	eai-aws-route53-list-hosted-zones	route53	route53:GetHostedZone	AWS_ROUTE53_HOSTED_ZONE	GetHostedZone
AWS	eai-aws-ssm-parameter	ssm	ssm:GetParameters	AWS_SSM_PARAMETER	GetParameters
AWS	eai-aws-vpc-dhcp-options	ec2	ec2:DescribeDhcpOptions	AWS_DHCP_OPTIONS	DescribeDhcpOptions
AWS	eai-aws-vpc-nat-gateway	ec2	ec2:DescribeNatGateways	AWS_NAT_GATEWAY	DescribeNatGateways
AWS	eai-aws-vpc-transit-gateway-route-table	ec2	ec2:DescribeTransitGatewayRouteTables	AWS_TRANSIT_GATEWAY_ROUTE_TABLE	DescribeTransitGatewayRouteTables
AWS	eai-aws-waf-classic-web-acl-resource	waf	waf:GetWebACL	AWS_WAF_CLASSIC_GLOBAL_WEB_ACL	GetWebACL
Azure	azure-data-factory-v2-private-endpoint-connection	Microsoft.DataFactory	Microsoft.DataFactory/factories/privateEndpointConnections/read	AZURE_DATA_FACTORY_V2_PRIVATE_ENDPOINT_CONNECTION	read
Azure	azure-data-factory-v2	Microsoft.DataFactory	Microsoft.DataFactory/factories/read	AZURE_DATA_FACTORY_V2	read
Azure	azure-documentdb-mongo-clusters	Microsoft.DocumentDB	Microsoft.DocumentDB/mongoClusters/read	AZURE_DOCUMENT_DB_MONGO_CLUSTERS	read
Azure	azure-key-vault-certificate	Microsoft.KeyVault	Microsoft.KeyVault/vaults/certificates/read	AZURE_KEY_VAULT_CERTIFICATE	read
Azure	azure-key-vault-key	Microsoft.KeyVault	Microsoft.KeyVault/vaults/keys/read	AZURE_KEY_VAULT_KEY	read
Azure	azure-management-locks	Microsoft.Authorization	Microsoft.Authorization/locks/read	AZURE_MANAGEMENT_LOCKS	read
Azure	azure-monitor-private-link-scope	Microsoft.Insights	Microsoft.Insights/PrivateLinkScopes/ScopedResources/Read	AZURE_MONITOR_PRIVATE_LINK_SCOPE	Read
Azure	azure-monitor-private-link-scope	Microsoft.Insights	Microsoft.Insights/PrivateLinkScopes/Read	AZURE_MONITOR_PRIVATE_LINK_SCOPE	Read
Azure	azure-saas-resource	Microsoft.ResourceGraph	Microsoft.ResourceGraph/resources/read	AZURE_SAAS_RESOURCE	read
Azure	azure-storage-account-blob-container	Microsoft.Storage	Microsoft.Storage/storageAccounts/blobServices/containers/read	AZURE_STORAGE_BLOB_CONTAINER	read
Azure	azure-subscription-tenantpolicy import-state	Microsoft.Subscription	Microsoft.Subscription/policies/read	AZURE_SUBSCRIPTION_POLICY	read
GCP	eai-gcloud-iam-service-accounts-keys-list	iam	iam.serviceAccountKeys.list	GCLOUD_IAM_SERVICE_ACCOUNT_KEY	list
GCP	gcloud-ai-applications-cmek-config	discoveryengine	discoveryengine.cmekConfigs.list	GCLOUD_AI_APPLICATIONS_CMEK_CONFIG	list
GCP	gcloud-apigateway-config-export	apigateway	apigateway.apis.list	GCLOUD_API_GATEWAY_CONFIG	list
GCP	gcloud-cloud-spanner-instance-backup	spanner	spanner.backups.list	GCLOUD_CLOUD_SPANNER_INSTANCE_BACKUP	list
GCP	gcloud-compute-project-firewall-policy	compute	compute.firewallPolicies.get	GCLOUD_COMPUTE_FIREWALL_POLICY	get
GCP	gcloud-dataproc-metastore-federation	metastore	metastore.federations.getIamPolicy	DATAPROC_METASTORE_FEDERATION	getIamPolicy
GCP	gcloud-dataproc-metastore-federation	metastore	metastore.federations.list	DATAPROC_METASTORE_FEDERATION	list
GCP	gcloud-dataproc-metastore-service	metastore	metastore.services.getIamPolicy	DATAPROC_METASTORE_SERVICE	getIamPolicy
GCP	gcloud-dataproc-metastore-service	metastore	metastore.services.list	DATAPROC_METASTORE_SERVICE	list
GCP	gcloud-iam-service-accounts-keys-list	iam	iam.serviceAccountKeys.list	GCLOUD_IAM_SERVICE_ACCOUNT_KEY	list
GCP	gcloud-logging-folder-sinks-list	logging	logging.sinks.list	GCLOUD_LOGGING_FOLDER_SINK	list
GCP	gcloud-network-security-address-group	networksecurity	networksecurity.addressGroups.get	GCLOUD_NETWORK_SECURITY_ADDRESS_GROUP	get
GCP	gcloud-organization-folder	resourcemanager	resourcemanager.folders.list	GCLOUD_ORGANIZATION_FOLDER	list
GCP	gcloud-security-command-center-organization-event-threat-detection-custom-module	securitycentermanagement	securitycentermanagement.eventThreatDetectionCustomModules.list	GOOGLE_SCC_EVENT_THREAT_DETECTION_CUSTOM_MODULE	list
GCP	gcloud-service-directory-namespace-service	servicedirectory	servicedirectory.services.list	GCLOUD_SERVICE_DIRECTORY_NAMESPACE_SERVICE	list
GCP	gcloud-vertex-ai-aiplatform-garden-model	aiplatform	aiplatform.publisherModels.get	GCLOUD_VERTEX_AI_GARDEN_MODEL	get
OCI	oci-compartment-get	identity	COMPARTMENT_INSPECT	OCI_COMPARTMENT	COMPARTMENT_INSPECT
OCI	oci-compartment-get	identity	POLICY_READ	OCI_COMPARTMENT	POLICY_READ