Qualys Total Cloud
Cloud Security- Overview
- Setup
- Data & mappings
- Operations & API
- Changelog
The Qualys Total Cloud (TotalCloud / CloudView) connector integrates with the Qualys TotalCloud platform to synchronize multi-cloud (AWS, Azure, GCP) inventory and compliance posture data into the Brinqa platform. It uses the Qualys CloudView v2 REST API (/cloudview-api/rest/v2/...) to retrieve cloud resource inventory, control definitions, and control evaluations.
The connector synchronizes the following categories of data:
- Cloud Resources — Inventory of AWS, Azure, and GCP resources (compute, storage, network, database, identity, serverless, container, etc.)
- Hosts — Compute instances that map to the Host model (EC2 instances, Azure virtual machines, SQL servers/databases, EKS Fargate profiles)
- Violation Definitions — CloudView control definitions
- Violations — Control evaluations against individual cloud resources
Data retrieved from Qualys Total Cloud
| Connector Object | Required | Maps to Data Model |
|---|---|---|
| Auto Scaling Group | Yes | Cloud Resource |
| Bucket | Yes | Cloud Resource |
| Cloud Function | Yes | Cloud Resource |
| Ebs Volume | Yes | Cloud Resource |
| Ec2 Instance | Yes | Host |
| Eks Cluster | Yes | Cloud Resource |
| Eks Fargate Profile | Yes | Host |
| Eks Node Group | Yes | Cloud Resource |
| Firewall Rules | Yes | Cloud Resource |
| Function App | Yes | Cloud Resource |
| IAM User | Yes | Cloud Resource |
| Internet Gateway | Yes | Cloud Resource |
| Lambda | Yes | Cloud Resource |
| Load Balancer | Yes | Cloud Resource |
| Network | Yes | Cloud Resource |
| Network Acl | Yes | Cloud Resource |
| Network Security Group | Yes | Cloud Resource |
| Rds | Yes | Cloud Resource |
| Resource Group | Yes | Cloud Resource |
| Route Table | Yes | Cloud Resource |
| Sql Server | Yes | Host |
| Sql Server Database | Yes | Host |
| Subnet | Yes | Cloud Resource |
| Subnetwork | Yes | Cloud Resource |
| Violation | Yes | Violation |
| Violation Definition | Yes | Violation Definition |
| Virtual Machine | Yes | Host |
| Virtual Network | Yes | Cloud Resource |
| Vm Instance | Yes | Cloud Resource |
| Vpc | Yes | Cloud Resource |
| Vpc Security Group | Yes | Cloud Resource |
| Web App | Yes | Cloud Resource |
Model relationships
note
For detailed steps on how to view the data retrieved from Qualys Total Cloud in the Brinqa Platform, see How to view your data.
Connection settings
When setting up a data integration, select Qualys Total Cloud from the Connector dropdown and provide the following:
| Setting | Required | Default | Description |
|---|---|---|---|
| API URL | Yes | https://qualysguard.qg3.apps.qualys.com/ | Qualys platform API server url |
| Username | Yes | — | Qualys user login |
| Password | Yes | — | Qualys user password |
| Page size | No | 300 | Maximum number of records to get per API request |
| Parallel requests | No | 2 (or available processors) | Maximum number of parallel API requests |
| Maximum retries | No | 5 | The maximum number of retry attempts before giving up a request |
Authentication
The connector authenticates with the Qualys API using HTTP Basic Authentication. The username and password from the connector configuration are Base64-encoded and sent in the Authorization header on every request; all requests use Content-Type: application/json.
Endpoint
| Method | URL |
|---|---|
GET | {baseUrl}/cloudview-api/rest/v2/... |
Usage
All API requests include the Basic Auth credentials:
Authorization: Basic <base64(username:password)>
Content-Type: application/json
How to obtain Qualys Total Cloud credentials
Create a Qualys user
To ensure the user account that the Qualys Total Cloud connector uses to access the Qualys server has the appropriate permissions and retrieve data, follow these steps.
-
Log in to your organization's Qualys server as an administrator.
-
Navigate to Users, and then select the Users tab.
-
Click New and select User. The New User dialog displays.
-
Fill out the general information for the new user.
-
Click User Role on the left menu.
-
From the User Role drop-down, select Reader.
-
Select GUI and API to enable API access, and leave Business Unit Unassigned.
-
Note: GUI access allows the user to log in to the Qualys GUI (graphical user interface). After you create the new Qualys user, log in to the Qualys GUI using the new credentials. The system prompts the user to reset their password. The Qualys connector will not function until you complete the password reset.
-
Click Asset Groups.
- From the Add asset groups drop-down, select All or only the asset groups the Qualys user needs access to.
-
Click Permissions and select all of the available permissions.
-
Click Options to modify the notification options as needed.
-
Click Save.
The new Qualys user with appropriate permissions to retrieve data displays on the Qualys Users page.
If you do not wish to create a new Qualys user, you can leverage an existing user with the appropriate permissions.
Note: If you do not have permissions to create a new Qualys user, contact your Qualys administrator. For additional information, see Qualys documentation.
Attribute mappings
Expand the sections below to view the mappings between the source and the Brinqa data model attributes:
Auto Scaling Group
| Source Field Name | SDM Attribute |
|---|---|
| ASSET_CATEGORY_CLOUD_RESOURCE | CATEGORIES |
normalizeAssetStatus(resource.status) | SOURCE_STATUS |
normalizeAssetStatus(resource.status) | STATUS |
resource.accountAlias | ACCOUNT_ALIAS |
resource.arn | ARN |
resource.arsScore | ARS_SCORE |
resource.autoScalingGroupARN | GROUP_ARN |
resource.autoScalingGroupName | GROUP_NAME |
resource.availabilityZones | AVAILABILITY_ZONES |
resource.cidrBlock | CIDR_BLOCK |
resource.cloudAccountId | CLOUD_ACCOUNT_ID |
resource.cloudType | CLOUD_TYPE |
resource.connectorUuid | CONNECTOR_UUID |
resource.connectorUuids | CONNECTOR_UUIDS |
resource.controlsFailed | CONTROLS_FAILED |
resource.created | SOURCE_CREATED_DATE |
resource.createdOn | CREATED_ON |
resource.createdTime | CREATED_TIME |
resource.criticalityScore | CRITICALITY_SCORE |
resource.customerId | CUSTOMER_ID |
resource.customers | CUSTOMERS |
resource.description | DESCRIPTION |
resource.displayName | DISPLAY_NAME |
resource.healthCheckType | HEALTH_CHECK_TYPE |
resource.instances | INSTANCES |
resource.ipPermissionEgressList (portRange/ruleAction/protocol/source/type) | IP_PERMISSION_EGRESS_LIST |
resource.ipPermissionList (portRange/ruleAction/protocol/source/type) | IP_PERMISSION_LIST |
resource.ipv6CidrBlockAssociationSet | IP_V6_CIDR_BLOCK_ASSOCIATION_SET |
resource.isDefault | IS_DEFAULT |
resource.lastUpdated | SOURCE_LAST_MODIFIED |
resource.launchConfigurationName | LAUNCH_CONFIGURATION_NAME |
resource.loadBalancerNames | LOAD_BALANCER_NAMES |
resource.name | NAME |
resource.qualysTags (tagId/tagName) | QUALYS_TAGS |
resource.region | REGION |
resource.remediationEnabled | REMEDIATION_ENABLED |
resource.resourceId | RESOURCE_ID |
resource.resourceType | RESOURCE_TYPE |
resource.scanId | SCAN_ID |
resource.scanUuid | SCAN_UUID |
resource.status | PROVIDER_STATUS |
resource.subnets | SUBNETS |
resource.tags (Key/Value) | TAGS |
resource.type | TYPE |
resource.uuid | UID |
resource.version | LATEST_VERSION |
resource.vpcId | VPC_ID |
Bucket
| Source Field Name | SDM Attribute |
|---|---|
| ASSET_CATEGORY_CLOUD_RESOURCE | CATEGORIES |
normalizeAssetStatus(resource.status) | SOURCE_STATUS |
normalizeAssetStatus(resource.status) | STATUS |
resource.accountAlias | ACCOUNT_ALIAS |
resource.arn | ARN |
resource.arsScore | ARS_SCORE |
resource.availabilityZones | AVAILABILITY_ZONES |
resource.bucketCreationDateStr | BUCKET_CREATION_DATE_STR |
resource.bucketName | BUCKET_NAME |
resource.bucketOwnerId | BUCKET_OWNER_ID |
resource.bucketPolicy | BUCKET_POLICY |
resource.cidrBlock | CIDR_BLOCK |
resource.cloudAccountId | CLOUD_ACCOUNT_ID |
resource.cloudType | CLOUD_TYPE |
resource.connectorUuid | CONNECTOR_UUID |
resource.connectorUuids | CONNECTOR_UUIDS |
resource.controlsFailed | CONTROLS_FAILED |
resource.created | SOURCE_CREATED_DATE |
resource.createdOn | CREATED_ON |
resource.criticalityScore | CRITICALITY_SCORE |
resource.customerId | CUSTOMER_ID |
resource.customers | CUSTOMERS |
resource.description | DESCRIPTION |
resource.displayName | DISPLAY_NAME |
resource.instances | INSTANCES |
resource.ipPermissionEgressList | IP_PERMISSION_EGRESS_LIST |
resource.ipPermissionList | IP_PERMISSION_LIST |
resource.ipv6CidrBlockAssociationSet | IP_V6_CIDR_BLOCK_ASSOCIATION_SET |
resource.isDefault | IS_DEFAULT |
resource.lastUpdated | SOURCE_LAST_MODIFIED |
resource.name | NAME |
resource.ownerName | OWNER_NAME |
resource.qualysTags (tagId/tagName) | QUALYS_TAGS |
resource.region | REGION |
resource.remediationEnabled | REMEDIATION_ENABLED |
resource.resourceId | RESOURCE_ID |
resource.resourceType | RESOURCE_TYPE |
resource.s3GrantList (id/emailAddress/groupUri/displayName/permission) | S3_GRANT_LIST |
resource.scanId | SCAN_ID |
resource.scanUuid | SCAN_UUID |
resource.status | PROVIDER_STATUS |
resource.subnets | SUBNETS |
resource.tags (Key/Value) | TAGS |
resource.type | TYPE |
resource.uuid | UID |
resource.version | LATEST_VERSION |
resource.vpcId | VPC_ID |
Cloud Function
| Source Field Name | SDM Attribute |
|---|---|
| ASSET_CATEGORY_CLOUD_RESOURCE | CATEGORIES |
normalizeAssetStatus(resource.status) | SOURCE_STATUS |
normalizeAssetStatus(resource.status) | STATUS |
resource.arsScore | ARS_SCORE |
resource.cloudType | CLOUD_TYPE |
resource.connectorUuid | CONNECTOR_UUID |
resource.connectorUuids | CONNECTOR_UUIDS |
resource.controlsFailed | CONTROLS_FAILED |
resource.created | SOURCE_CREATED_DATE |
resource.creationTimeStamp | CREATION_TIMESTAMP |
resource.criticalityScore | CRITICALITY_SCORE |
resource.customerId | CUSTOMER_ID |
resource.customers | CUSTOMERS |
resource.description | DESCRIPTION |
resource.ipCidrRange | IP_CIDR_RANGE |
resource.lastUpdated | SOURCE_LAST_MODIFIED |
resource.name | NAME |
resource.network | NETWORK |
resource.projectId | PROJECT_ID |
resource.projectNumber | PROJECT_NUMBER |
resource.qualysTags (tagId/tagName) | QUALYS_TAGS |
resource.region | REGION |
resource.remediationEnabled | REMEDIATION_ENABLED |
resource.resourceId | RESOURCE_ID |
resource.scanUuid | SCAN_UUID |
resource.status | PROVIDER_STATUS |
resource.subnetworks | SUBNETWORKS |
resource.type | TYPE |
resource.uuid | UID |
resource.version | LATEST_VERSION |
Ebs Volume
| Source Field Name | SDM Attribute |
|---|---|
| ASSET_CATEGORY_CLOUD_RESOURCE | CATEGORIES |
normalizeAssetStatus(resource.status) | SOURCE_STATUS |
normalizeAssetStatus(resource.status) | STATUS |
resource.accountAlias | ACCOUNT_ALIAS |
resource.arn | ARN |
resource.arsScore | ARS_SCORE |
resource.attachments (volumeId/instanceId/state/deleteOnTermination/device/attachTime) | ATTACHMENTS |
resource.availabilityZones | AVAILABILITY_ZONES |
resource.cidrBlock | CIDR_BLOCK |
resource.cloudAccountId | CLOUD_ACCOUNT_ID |
resource.cloudType | CLOUD_TYPE |
resource.connectorUuid | CONNECTOR_UUID |
resource.connectorUuids | CONNECTOR_UUIDS |
resource.controlsFailed | CONTROLS_FAILED |
resource.created | SOURCE_CREATED_DATE |
resource.createdOn | CREATED_ON |
resource.createTime | SOURCE_CREATED_DATE |
resource.criticalityScore | CRITICALITY_SCORE |
resource.customerId | CUSTOMER_ID |
resource.customers | CUSTOMERS |
resource.description | DESCRIPTION |
resource.displayName | DISPLAY_NAME |
resource.encrypted | ENCRYPTED |
resource.instances | INSTANCES |
resource.iops | IOPS |
resource.ipPermissionEgressList | IP_PERMISSION_EGRESS_LIST |
resource.ipPermissionList | IP_PERMISSION_LIST |
resource.ipv6CidrBlockAssociationSet | IP_V6_CIDR_BLOCK_ASSOCIATION_SET |
resource.isDefault | IS_DEFAULT |
resource.isSnapshotEnabled | IS_SNAPSHOT_ENABLED |
resource.kmsKeyId | KMS_KEY_ID |
resource.lastUpdated | SOURCE_LAST_MODIFIED |
resource.name | NAME |
resource.qualysTags (tagId/tagName) | QUALYS_TAGS |
resource.region | REGION |
resource.remediationEnabled | REMEDIATION_ENABLED |
resource.resourceId | RESOURCE_ID |
resource.resourceType | RESOURCE_TYPE |
resource.scanId | SCAN_ID |
resource.scanUuid | SCAN_UUID |
resource.size | SIZE |
resource.snapshotId | SNAPSHOT_ID |
resource.state | STATE |
resource.status | PROVIDER_STATUS |
resource.subnets | SUBNETS |
resource.tags (Key/Value) | TAGS |
resource.type | TYPE |
resource.uuid | UID |
resource.version | LATEST_VERSION |
resource.volumeId | VOLUME_ID |
resource.volumeType | VOLUME_TYPE |
resource.vpcId | VPC_ID |
Ec2 Instance
| Source Field Name | SDM Attribute |
|---|---|
normalizeAssetStatus(resource.status) | SOURCE_STATUS |
normalizeAssetStatus(resource.status) | STATUS |
resource.accountAlias | ACCOUNT_ALIAS |
resource.arn | ARN |
resource.arsScore | ARS_SCORE |
resource.availabilityZones | AVAILABILITY_ZONES |
resource.cidrBlock | CIDR_BLOCK |
resource.cloudAccountId | CLOUD_ACCOUNT_ID |
resource.cloudType | CLOUD_TYPE |
resource.connectorUuid | CONNECTOR_UUID |
resource.connectorUuids | CONNECTOR_UUIDS |
resource.controlsFailed | CONTROLS_FAILED |
resource.created | SOURCE_CREATED_DATE |
resource.createdOn | CREATED_ON |
resource.criticalityScore | CRITICALITY_SCORE |
resource.customerId | CUSTOMER_ID |
resource.customers | CUSTOMERS |
resource.description | DESCRIPTION |
resource.displayName | DISPLAY_NAME |
resource.elasticIpAddress | ELASTIC_IP_ADDRESS |
resource.events (code/description/notAfter/notBefore) | EVENTS |
resource.iamInstanceProfileRoleDetails.profileArn | IAM_INSTANCE_PROFILE_ARN |
resource.iamInstanceProfileRoleDetails.profileName | IAM_INSTANCE_PROFILE_NAME |
resource.iamInstanceProfileRoleDetails.roleArn | IAM_INSTANCE_ROLE_ARN |
resource.iamInstanceProfileRoleDetails.roleName | IAM_INSTANCE_ROLE_NAME |
resource.imageId | IMAGE |
resource.instanceId | INSTANCE_ID |
resource.instances | INSTANCES |
resource.instanceState | INSTANCE_STATE |
resource.instanceStatus | INSTANCE_STATUS |
resource.instanceType | INSTANCE_TYPE |
resource.ipAddress | IP_ADDRESSES |
resource.ipPermissionEgressList | IP_PERMISSION_EGRESS_LIST |
resource.ipPermissionList | IP_PERMISSION_LIST |
resource.ipv6CidrBlockAssociationSet | IP_V6_CIDR_BLOCK_ASSOCIATION_SET |
resource.isDefault | IS_DEFAULT |
resource.lastUpdated | SOURCE_LAST_MODIFIED |
resource.launchTime | LAUNCH_TIME |
resource.name | NAME |
resource.networkInterfaceAddresses (networkInterfaceId/subnetId/description/privateDnsName/publicIp/privateIpAddress/ipv6Ip/secondaryPrivateIp/groups) | NETWORK_INTERFACE_ADDRESSES |
resource.privateDnsName | PRIVATE_DNS_NAMES |
resource.privateIpAddress | PRIVATE_IP_ADDRESSES |
resource.publicDnsName | PUBLIC_DNS_NAMES |
resource.publicIpAddress | PUBLIC_IP_ADDRESSES |
resource.qualysTags (tagId/tagName) | QUALYS_TAGS |
resource.region | REGION |
resource.remediationEnabled | REMEDIATION_ENABLED |
resource.resourceId | RESOURCE_ID |
resource.resourceType | RESOURCE_TYPE |
resource.scanId | SCAN_ID |
resource.scanUuid | SCAN_UUID |
resource.secondaryPrivateIpAddress | SECONDARY_PRIVATE_IP_ADDRESS |
resource.securityGroups (groupId/groupName) | SECURITY_GROUPS |
resource.spotInstanceRequestId | SPOT_INSTANCE_REQUEST_ID |
resource.status | PROVIDER_STATUS |
resource.subnetId | SUBNET_ID |
resource.subnets | SUBNETS |
resource.tags (Key/Value) | TAGS |
resource.type | TYPE |
resource.uuid | UID |
resource.version | LATEST_VERSION |
resource.vpcId | VPC_ID |
resource.vulnerabilityStats.severity.five | VULNERABILITY_STAT_SEVERITY_FIVE |
resource.vulnerabilityStats.severity.four | VULNERABILITY_STAT_SEVERITY_FOUR |
resource.vulnerabilityStats.severity.three | VULNERABILITY_STAT_SEVERITY_THREE |
resource.vulnerabilityStats.severity.two | VULNERABILITY_STAT_SEVERITY_TWO |
resource.vulnerabilityStats.totalVulnerability | VULNERABILITY_STAT_TOTAL_VULNERABILITY |
resource.vulnerabilityStats.typeDetected.confirmed | VULNERABILITY_STAT_TYPE_DETECTED_CONFIRMED |
resource.vulnerabilityStats.typeDetected.information | VULNERABILITY_STAT_TYPE_DETECTED_INFORMATION |
resource.vulnerabilityStats.typeDetected.potential | VULNERABILITY_STAT_TYPE_DETECTED_POTENTIAL |
| {ASSET_CATEGORY_CLOUD_RESOURCE, ASSET_CATEGORY_HOST} | CATEGORIES |
Eks Cluster
| Source Field Name | SDM Attribute |
|---|---|
| ASSET_CATEGORY_CLOUD_RESOURCE | CATEGORIES |
normalizeAssetStatus(resource.status) | SOURCE_STATUS |
normalizeAssetStatus(resource.status) | STATUS |
resource.accountAlias | ACCOUNT_ALIAS |
resource.arn | ARN |
resource.arsScore | ARS_SCORE |
resource.associations.resourcesVpcConfig.clusterSecurityGroupId | RESOURCE_VPC_CONFIG_CLUSTER_SECURITY_GROUP_ID |
resource.associations.resourcesVpcConfig.securityGroupIds | RESOURCE_VPC_CONFIG_SECURITY_GROUP_IDS |
resource.associations.resourcesVpcConfig.subnetIds | RESOURCE_VPC_CONFIG_SUBNET_IDS |
resource.associations.resourcesVpcConfig.vpcId | RESOURCE_VPC_CONFIG_VPC_ID |
resource.availabilityZones | AVAILABILITY_ZONES |
resource.cidrBlock | CIDR_BLOCK |
resource.cloudAccountId | CLOUD_ACCOUNT_ID |
resource.cloudType | CLOUD_TYPE |
resource.connectorId | CONNECTOR_ID |
resource.connectorUuid | CONNECTOR_UUID |
resource.connectorUuids | CONNECTOR_UUIDS |
resource.controlsFailed | CONTROLS_FAILED |
resource.created | SOURCE_CREATED_DATE |
resource.createdOn | CREATED_ON |
resource.criticalityScore | CRITICALITY_SCORE |
resource.customerId | CUSTOMER_ID |
resource.customers | CUSTOMERS |
resource.description | DESCRIPTION |
resource.displayName | DISPLAY_NAME |
resource.endpoint | ENDPOINT |
resource.identity.oidc.issuer | IDENTITY_OIDC_ISSUER |
resource.instances | INSTANCES |
resource.ipPermissionEgressList | IP_PERMISSION_EGRESS_LIST |
resource.ipPermissionList | IP_PERMISSION_LIST |
resource.ipv6CidrBlockAssociationSet | IP_V6_CIDR_BLOCK_ASSOCIATION_SET |
resource.isDefault | IS_DEFAULT |
resource.lastUpdated | SOURCE_LAST_MODIFIED |
resource.name | NAME |
resource.platformVersion | PLATFORM_VERSION |
resource.qualysTags (tagId/tagName) | QUALYS_TAGS |
resource.region | REGION |
resource.remediationEnabled | REMEDIATION_ENABLED |
resource.resourceId | RESOURCE_ID |
resource.resourcesVpcConfig.endpointPrivateAccess | RESOURCE_VPC_CONFIG_ENDPOINT_PRIVATE_ACCESS |
resource.resourcesVpcConfig.endpointPublicAccess | RESOURCE_VPC_CONFIG_ENDPOINT_PUBLIC_ACCESS |
resource.resourceType | RESOURCE_TYPE |
resource.roleArn | ROLE_ARN |
resource.roleName | ROLE_NAME |
resource.scanId | SCAN_ID |
resource.scanUuid | SCAN_UUID |
resource.status | PROVIDER_STATUS |
resource.subnets | SUBNETS |
resource.tags | TAGS |
resource.type | TYPE |
resource.uuid | UID |
resource.version | LATEST_VERSION |
resource.vpcId | VPC_ID |
Eks Fargate Profile
| Source Field Name | SDM Attribute |
|---|---|
normalizeAssetStatus(resource.status) | SOURCE_STATUS |
normalizeAssetStatus(resource.status) | STATUS |
resource.accountAlias | ACCOUNT_ALIAS |
resource.arn | ARN |
resource.arsScore | ARS_SCORE |
resource.availabilityZones | AVAILABILITY_ZONES |
resource.cidrBlock | CIDR_BLOCK |
resource.cloudAccountId | CLOUD_ACCOUNT_ID |
resource.cloudType | CLOUD_TYPE |
resource.connectorUuid | CONNECTOR_UUID |
resource.connectorUuids | CONNECTOR_UUIDS |
resource.controlsFailed | CONTROLS_FAILED |
resource.created | SOURCE_CREATED_DATE |
resource.createdOn | CREATED_ON |
resource.criticalityScore | CRITICALITY_SCORE |
resource.customerId | CUSTOMER_ID |
resource.customers | CUSTOMERS |
resource.description | DESCRIPTION |
resource.displayName | DISPLAY_NAME |
resource.instances | INSTANCES |
resource.ipPermissionEgressList | IP_PERMISSION_EGRESS_LIST |
resource.ipPermissionList | IP_PERMISSION_LIST |
resource.ipv6CidrBlockAssociationSet | IP_V6_CIDR_BLOCK_ASSOCIATION_SET |
resource.isDefault | IS_DEFAULT |
resource.lastUpdated | SOURCE_LAST_MODIFIED |
resource.name | NAME |
resource.qualysTags (tagId/tagName) | QUALYS_TAGS |
resource.region | REGION |
resource.remediationEnabled | REMEDIATION_ENABLED |
resource.resourceId | RESOURCE_ID |
resource.resourceType | RESOURCE_TYPE |
resource.scanId | SCAN_ID |
resource.scanUuid | SCAN_UUID |
resource.status | PROVIDER_STATUS |
resource.subnets | SUBNETS |
resource.type | TYPE |
resource.uuid | UID |
resource.version | LATEST_VERSION |
resource.vpcId | VPC_ID |
| {ASSET_CATEGORY_CLOUD_RESOURCE, ASSET_CATEGORY_HOST} | CATEGORIES |
Eks Node Group
| Source Field Name | SDM Attribute |
|---|---|
| ASSET_CATEGORY_CLOUD_RESOURCE | CATEGORIES |
normalizeAssetStatus(resource.status) | SOURCE_STATUS |
normalizeAssetStatus(resource.status) | STATUS |
resource.accountAlias | ACCOUNT_ALIAS |
resource.amiType | AMI_TYPE |
resource.arn | ARN |
resource.arsScore | ARS_SCORE |
resource.associations.clusterArn | CLUSTER_ARN |
resource.associations.clusterName | CLUSTER_NAME |
resource.associations.remoteAccess.sourceSecurityGroups | SOURCE_SECURITY_GROUPS |
resource.associations.resources.autoScalingGroups[].name | AUTO_SCALING_GROUPS |
resource.associations.resources.remoteAccessSecurityGroup | REMOTE_ACCESS_SECURITY_GROUP |
resource.associations.subnets (also base) | SUBNETS |
resource.availabilityZones | AVAILABILITY_ZONES |
resource.capacityType | CAPACITY_TYPE |
resource.cidrBlock | CIDR_BLOCK |
resource.cloudAccountId | CLOUD_ACCOUNT_ID |
resource.cloudType | CLOUD_TYPE |
resource.connectorId | CONNECTOR_ID |
resource.connectorUuid | CONNECTOR_UUID |
resource.connectorUuids | CONNECTOR_UUIDS |
resource.controlsFailed | CONTROLS_FAILED |
resource.created | SOURCE_CREATED_DATE |
resource.createdOn | CREATED_ON |
resource.criticalityScore | CRITICALITY_SCORE |
resource.customerId | CUSTOMER_ID |
resource.customers | CUSTOMERS |
resource.description | DESCRIPTION |
resource.diskSize | DISK_SIZE |
resource.displayName | DISPLAY_NAME |
resource.displayName (overrides base resource.name) | NAME |
resource.instances | INSTANCES |
resource.instanceTypes | INSTANCE_TYPES |
resource.ipPermissionEgressList | IP_PERMISSION_EGRESS_LIST |
resource.ipPermissionList | IP_PERMISSION_LIST |
resource.ipv6CidrBlockAssociationSet | IP_V6_CIDR_BLOCK_ASSOCIATION_SET |
resource.isDefault | IS_DEFAULT |
resource.labels.owner | LABELS |
resource.lastUpdated | SOURCE_LAST_MODIFIED |
resource.launchTemplate.id | LAUNCH_TEMPLATE_ID |
resource.launchTemplate.name | LAUNCH_TEMPLATE_NAME |
resource.launchTemplate.version | LAUNCH_TEMPLATE_VERSION |
resource.nodeRole | NODE_ROLE |
resource.nodeRoleName | NODE_ROLE_NAME |
resource.qualysTags (tagId/tagName) | QUALYS_TAGS |
resource.region | REGION |
resource.releaseVersion | RELEASE_VERSION |
resource.remediationEnabled | REMEDIATION_ENABLED |
resource.resourceId | RESOURCE_ID |
resource.resourceType | RESOURCE_TYPE |
resource.scalingConfig.desiredSize | SCALING_CONFIG_DESIRED_SIZE |
resource.scalingConfig.maxSize | SCALING_CONFIG_MAX_SIZE |
resource.scalingConfig.minSize | SCALING_CONFIG_MIN_SIZE |
resource.scanId | SCAN_ID |
resource.scanUuid | SCAN_UUID |
resource.status | PROVIDER_STATUS |
resource.tags | TAGS |
resource.type | TYPE |
resource.uuid | UID |
resource.version | LATEST_VERSION |
resource.vpcId | VPC_ID |
Firewall Rules
| Source Field Name | SDM Attribute |
|---|---|
normalizeAssetStatus(resource.status) | SOURCE_STATUS |
normalizeAssetStatus(resource.status) | STATUS |
resource.allowed (ipprotocol/ports) | ALLOWED |
resource.arsScore | ARS_SCORE |
resource.cloudType | CLOUD_TYPE |
resource.connectorUuid | CONNECTOR_UUID |
resource.connectorUuids | CONNECTOR_UUIDS |
resource.controlsFailed | CONTROLS_FAILED |
resource.created | SOURCE_CREATED_DATE |
resource.creationTimeStamp | CREATION_TIMESTAMP |
resource.criticalityScore | CRITICALITY_SCORE |
resource.customerId | CUSTOMER_ID |
resource.customers | CUSTOMERS |
resource.description | DESCRIPTION |
resource.ipCidrRange | IP_CIDR_RANGE |
resource.lastUpdated | SOURCE_LAST_MODIFIED |
resource.name | NAME |
resource.network | NETWORK |
resource.projectId | PROJECT_ID |
resource.projectNumber | PROJECT_NUMBER |
resource.qualysTags (tagId/tagName) | QUALYS_TAGS |
resource.region | REGION |
resource.remediationEnabled | REMEDIATION_ENABLED |
resource.resourceId | RESOURCE_ID |
resource.scanUuid | SCAN_UUID |
resource.sourceRanges | SOURCE_RANGES |
resource.sourceTags | SOURCE_TAGS |
resource.status | PROVIDER_STATUS |
resource.subnetworks | SUBNETWORKS |
resource.tags (Key/Value) | TAGS |
resource.targetTags | TARGET_TAGS |
resource.type | TYPE |
resource.uuid | UID |
resource.version | LATEST_VERSION |
| {ASSET_CATEGORY_CLOUD_RESOURCE, ASSET_CATEGORY_NETWORK} | CATEGORIES |
Function App
| Source Field Name | SDM Attribute |
|---|---|
| ASSET_CATEGORY_CLOUD_RESOURCE | CATEGORIES |
normalizeAssetStatus(resource.status) | SOURCE_STATUS |
normalizeAssetStatus(resource.status) | STATUS |
resource.appServicePlan | APP_SERVICE_PLAN |
resource.arsScore | ARS_SCORE |
resource.availabilityState | AVAILABILITY_STATE |
resource.clientAffinityEnabled | CLIENT_AFFINITY_ENABLED |
resource.clientCertEnabled | CLIENT_CERT_ENABLED |
resource.cloudType | CLOUD_TYPE |
resource.connectorUuid | CONNECTOR_UUID |
resource.connectorUuids | CONNECTOR_UUIDS |
resource.controlsFailed | CONTROLS_FAILED |
resource.created | SOURCE_CREATED_DATE |
resource.criticalityScore | CRITICALITY_SCORE |
resource.customerId | CUSTOMER_ID |
resource.customers | CUSTOMERS |
resource.defaultHostName | DEFAULT_HOST_NAME |
resource.deploymentId | DEPLOYMENT_ID |
resource.description | DESCRIPTION |
resource.enabled | ENABLED |
resource.enabledHosts (name/state) | ENABLED_HOSTS |
resource.functions (functionName/bindings[name/json/type/direction]) | FUNCTIONS |
resource.httpsOnly | HTTPS_ONLY |
resource.key | KEY |
resource.language | LANGUAGES |
resource.lastUpdated | SOURCE_LAST_MODIFIED |
resource.name | NAME |
resource.provisioningState | PROVISIONING_STATE |
resource.qualysTags (tagId/tagName) | QUALYS_TAGS |
resource.redundancyMode | REDUNDANCY_MODE |
resource.region | REGION |
resource.remediationEnabled | REMEDIATION_ENABLED |
resource.repositorySiteName | REPOSITORY_SITE_NAME |
resource.resourceGroupName | RESOURCE_GROUP_NAME |
resource.resourceId | RESOURCE_ID |
resource.scanUuid | SCAN_UUID |
resource.status | PROVIDER_STATUS |
resource.subKinds | SUB_KINDS |
resource.subnets (id/name/routeTableId/networkSecurityGroupId) | SUBNETS |
resource.subscriptionId | SUBSCRIPTION_ID |
resource.subscriptionName | SUBSCRIPTION_NAME |
resource.tags (Key/Value) | TAGS |
resource.type | TYPE |
resource.usageState | USAGE_STATE |
resource.uuid | UID |
resource.version | LATEST_VERSION |
IAM User
| Source Field Name | SDM Attribute |
|---|---|
| ASSET_CATEGORY_CLOUD_RESOURCE | CATEGORIES |
normalizeAssetStatus(resource.status) | SOURCE_STATUS |
normalizeAssetStatus(resource.status) | STATUS |
resource.accountAlias | ACCOUNT_ALIAS |
resource.arsScore | ARS_SCORE |
resource.availabilityZones | AVAILABILITY_ZONES |
resource.cidrBlock | CIDR_BLOCK |
resource.cloudAccountId | CLOUD_ACCOUNT_ID |
resource.cloudType | CLOUD_TYPE |
resource.connectorUuid | CONNECTOR_UUID |
resource.connectorUuids | CONNECTOR_UUIDS |
resource.controlsFailed | CONTROLS_FAILED |
resource.created | SOURCE_CREATED_DATE |
resource.createdOn | CREATED_ON |
resource.criticalityScore | CRITICALITY_SCORE |
resource.customerId | CUSTOMER_ID |
resource.customers | CUSTOMERS |
resource.description | DESCRIPTION |
resource.displayName | DISPLAY_NAME |
resource.instances | INSTANCES |
resource.ipPermissionEgressList | IP_PERMISSION_EGRESS_LIST |
resource.ipPermissionList | IP_PERMISSION_LIST |
resource.ipv6CidrBlockAssociationSet | IP_V6_CIDR_BLOCK_ASSOCIATION_SET |
resource.isDefault | IS_DEFAULT |
resource.lastUpdated | SOURCE_LAST_MODIFIED |
resource.name | NAME |
resource.qualysTags (tagId/tagName) | QUALYS_TAGS |
resource.region | REGION |
resource.remediationEnabled | REMEDIATION_ENABLED |
resource.resourceId | RESOURCE_ID |
resource.resourceType | RESOURCE_TYPE |
resource.scanId | SCAN_ID |
resource.scanUuid | SCAN_UUID |
resource.status | PROVIDER_STATUS |
resource.subnets | SUBNETS |
resource.tags (Key/Value) | TAGS |
resource.type | TYPE |
resource.user | USER |
resource.userAttachedPolicies (policyName/policyArn) | USER_ATTACHED_POLICIES |
resource.userDto.accessKey1Active | ACCESS_KEY1_ACTIVE |
resource.userDto.accessKey1LastRotated | ACCESS_KEY1_LAST_ROTATED |
resource.userDto.accessKey1LastUsed | ACCESS_KEY1_LAST_USED |
resource.userDto.accessKey1LastUsedRegion | ACCESS_KEY1_LAST_USED_REGION |
resource.userDto.accessKey2Active | ACCESS_KEY2_ACTIVE |
resource.userDto.accessKey2LastRotated | ACCESS_KEY2_LAST_ROTATED |
resource.userDto.accessKey2LastUsed | ACCESS_KEY2_LAST_USED |
resource.userDto.accessKey2LastUsedRegion | ACCESS_KEY2_LAST_USED_REGION |
resource.userDto.accessKey2LastUsedService | ACCESS_KEY1_LAST_USED_SERVICE |
resource.userDto.accessKey2LastUsedService | ACCESS_KEY2_LAST_USED_SERVICE |
resource.userDto.arn (also base resource.arn) | ARN |
resource.userDto.cert1Active | CERT1_ACTIVE |
resource.userDto.cert2Active | CERT2_ACTIVE |
resource.userDto.cert2LastRotated | CERT2_LAST_ROTATED |
resource.userDto.mfaActive | MFA_ACTIVE |
resource.userDto.passwordEnabled | PASSWORD_ENABLED |
resource.userDto.passwordLastChanged | PASSWORD_LAST_CHANGED |
resource.userDto.path | PATH |
resource.userDto.userCreationTime | USER_CREATION_TIME |
resource.userDto.userId | USER_ID |
resource.userDto.username | USERNAME |
resource.userInlinePolicies[].policyName | INLINE_POLICY_NAMES |
resource.userPolicies | USER_POLICIES |
resource.userPolicies | USER_GROUPS |
resource.uuid | UID |
resource.version | LATEST_VERSION |
resource.vpcId | VPC_ID |
Internet Gateway
| Source Field Name | SDM Attribute |
|---|---|
| ASSET_CATEGORY_CLOUD_RESOURCE | CATEGORIES |
normalizeAssetStatus(resource.status) | SOURCE_STATUS |
normalizeAssetStatus(resource.status) | STATUS |
resource.accountAlias | ACCOUNT_ALIAS |
resource.arn | ARN |
resource.arsScore | ARS_SCORE |
resource.attachments (vpcId/state) | ATTACHMENTS |
resource.availabilityZones | AVAILABILITY_ZONES |
resource.cidrBlock | CIDR_BLOCK |
resource.cloudAccountId | CLOUD_ACCOUNT_ID |
resource.cloudType | CLOUD_TYPE |
resource.connectorUuid | CONNECTOR_UUID |
resource.connectorUuids | CONNECTOR_UUIDS |
resource.controlsFailed | CONTROLS_FAILED |
resource.created | SOURCE_CREATED_DATE |
resource.createdOn | CREATED_ON |
resource.criticalityScore | CRITICALITY_SCORE |
resource.customerId | CUSTOMER_ID |
resource.customers | CUSTOMERS |
resource.description | DESCRIPTION |
resource.displayName | DISPLAY_NAME |
resource.instances | INSTANCES |
resource.internetGatewayId | INTERNET_GATEWAY_ID |
resource.internetGatewayId (overrides base resource.name) | NAME |
resource.ipPermissionEgressList | IP_PERMISSION_EGRESS_LIST |
resource.ipPermissionList | IP_PERMISSION_LIST |
resource.ipv6CidrBlockAssociationSet | IP_V6_CIDR_BLOCK_ASSOCIATION_SET |
resource.isDefault | IS_DEFAULT |
resource.lastUpdated | SOURCE_LAST_MODIFIED |
resource.qualysTags (tagId/tagName) | QUALYS_TAGS |
resource.region | REGION |
resource.remediationEnabled | REMEDIATION_ENABLED |
resource.resourceId | RESOURCE_ID |
resource.resourceType | RESOURCE_TYPE |
resource.scanId | SCAN_ID |
resource.scanUuid | SCAN_UUID |
resource.status | PROVIDER_STATUS |
resource.subnets | SUBNETS |
resource.tags (Key/Value) | TAGS |
resource.type | TYPE |
resource.uuid | UID |
resource.version | LATEST_VERSION |
resource.vpcId | VPC_ID |
Lambda
| Source Field Name | SDM Attribute |
|---|---|
normalizeAssetStatus(resource.status) | SOURCE_STATUS |
normalizeAssetStatus(resource.status) | STATUS |
resource.accountAlias | ACCOUNT_ALIAS |
resource.arn | ARN |
resource.arsScore | ARS_SCORE |
resource.availabilityZones | AVAILABILITY_ZONES |
resource.cidrBlock | CIDR_BLOCK |
resource.cloudAccountId | CLOUD_ACCOUNT_ID |
resource.cloudType | CLOUD_TYPE |
resource.connectorUuid | CONNECTOR_UUID |
resource.connectorUuids | CONNECTOR_UUIDS |
resource.controlsFailed | CONTROLS_FAILED |
resource.created | SOURCE_CREATED_DATE |
resource.createdOn | CREATED_ON |
resource.criticalityScore | CRITICALITY_SCORE |
resource.customerId | CUSTOMER_ID |
resource.customers | CUSTOMERS |
resource.description | DESCRIPTION |
resource.displayName | DISPLAY_NAME |
resource.instances | INSTANCES |
resource.ipPermissionEgressList | IP_PERMISSION_EGRESS_LIST |
resource.ipPermissionList | IP_PERMISSION_LIST |
resource.ipv6CidrBlockAssociationSet | IP_V6_CIDR_BLOCK_ASSOCIATION_SET |
resource.isDefault | IS_DEFAULT |
resource.lastUpdated | SOURCE_LAST_MODIFIED |
resource.name | NAME |
resource.qualysTags (tagId/tagName) | QUALYS_TAGS |
resource.region | REGION |
resource.remediationEnabled | REMEDIATION_ENABLED |
resource.resourceId | RESOURCE_ID |
resource.resourceType | RESOURCE_TYPE |
resource.scanId | SCAN_ID |
resource.scanUuid | SCAN_UUID |
resource.status | PROVIDER_STATUS |
resource.subnets | SUBNETS |
resource.type | TYPE |
resource.uuid | UID |
resource.version | LATEST_VERSION |
resource.vpcId | VPC_ID |
| {ASSET_CATEGORY_CLOUD_RESOURCE, ASSET_CATEGORY_SERVERLESS} | CATEGORIES |
Load Balancer
| Source Field Name | SDM Attribute |
|---|---|
| ASSET_CATEGORY_CLOUD_RESOURCE | CATEGORIES |
normalizeAssetStatus(resource.status) | SOURCE_STATUS |
normalizeAssetStatus(resource.status) | STATUS |
resource.accountAlias | ACCOUNT_ALIAS |
resource.arn | ARN |
resource.arsScore | ARS_SCORE |
resource.availabilityZones | AVAILABILITY_ZONES |
resource.cidrBlock | CIDR_BLOCK |
resource.cloudAccountId | CLOUD_ACCOUNT_ID |
resource.cloudType | CLOUD_TYPE |
resource.connectorUuid | CONNECTOR_UUID |
resource.connectorUuids | CONNECTOR_UUIDS |
resource.controlsFailed | CONTROLS_FAILED |
resource.created | SOURCE_CREATED_DATE |
resource.createdOn | CREATED_ON |
resource.criticalityScore | CRITICALITY_SCORE |
resource.customerId | CUSTOMER_ID |
resource.customers | CUSTOMERS |
resource.description | DESCRIPTION |
resource.displayName | DISPLAY_NAME |
resource.instances | INSTANCES |
resource.ipAddressType | IP_ADDRESS_TYPE |
resource.ipPermissionEgressList | IP_PERMISSION_EGRESS_LIST |
resource.ipPermissionList | IP_PERMISSION_LIST |
resource.ipv6CidrBlockAssociationSet | IP_V6_CIDR_BLOCK_ASSOCIATION_SET |
resource.isDefault | IS_DEFAULT |
resource.lastUpdated | SOURCE_LAST_MODIFIED |
resource.listeners (instancePort/instanceProtocol/protocol/sslCertificateId/loadBalancerPort) | LISTENERS |
resource.loadBalancerArn | LOAD_BALANCER_ARN |
resource.loadBalancerName | LOAD_BALANCER_NAME |
resource.loadBalancerName (overrides base resource.name) | NAME |
resource.qualysTags (tagId/tagName) | QUALYS_TAGS |
resource.region | REGION |
resource.remediationEnabled | REMEDIATION_ENABLED |
resource.resourceId | RESOURCE_ID |
resource.resourceType | RESOURCE_TYPE |
resource.scanId | SCAN_ID |
resource.scanUuid | SCAN_UUID |
resource.scheme | SCHEME |
resource.securityGroups | SECURITY_GROUPS |
resource.status | PROVIDER_STATUS |
resource.subnetAvailabilityZonePair | SUBNET_AVAILABILITY_ZONE_PAIR |
resource.subnets | SUBNETS |
resource.tags (Key/Value) | TAGS |
resource.type | TYPE |
resource.uuid | UID |
resource.version | LATEST_VERSION |
resource.vpcId | VPC_ID |
note
Note: DNS_NAMES is declared in the schema but is not populated in buildConnectorObject.
Network
| Source Field Name | SDM Attribute |
|---|---|
normalizeAssetStatus(resource.status) | SOURCE_STATUS |
normalizeAssetStatus(resource.status) | STATUS |
resource.arsScore | ARS_SCORE |
resource.cloudType | CLOUD_TYPE |
resource.connectorUuid | CONNECTOR_UUID |
resource.connectorUuids | CONNECTOR_UUIDS |
resource.controlsFailed | CONTROLS_FAILED |
resource.created | SOURCE_CREATED_DATE |
resource.creationTimeStamp | CREATION_TIMESTAMP |
resource.criticalityScore | CRITICALITY_SCORE |
resource.customerId | CUSTOMER_ID |
resource.customers | CUSTOMERS |
resource.description | DESCRIPTION |
resource.ipCidrRange | IP_CIDR_RANGE |
resource.lastUpdated | SOURCE_LAST_MODIFIED |
resource.name | NAME |
resource.network | NETWORK |
resource.projectId | PROJECT_ID |
resource.projectNumber | PROJECT_NUMBER |
resource.qualysTags (tagId/tagName) | QUALYS_TAGS |
resource.region | REGION |
resource.remediationEnabled | REMEDIATION_ENABLED |
resource.resourceId | RESOURCE_ID |
resource.scanUuid | SCAN_UUID |
resource.status | PROVIDER_STATUS |
resource.subnetworks | SUBNETWORKS |
resource.type | TYPE |
resource.uuid | UID |
resource.version | LATEST_VERSION |
| {ASSET_CATEGORY_CLOUD_RESOURCE, ASSET_CATEGORY_NETWORK} | CATEGORIES |
Network Acl
| Source Field Name | SDM Attribute |
|---|---|
| ASSET_CATEGORY_CLOUD_RESOURCE | CATEGORIES |
normalizeAssetStatus(resource.status) | SOURCE_STATUS |
normalizeAssetStatus(resource.status) | STATUS |
resource.accountAlias | ACCOUNT_ALIAS |
resource.arn | ARN |
resource.arsScore | ARS_SCORE |
resource.associations (subnetId/networkAclAssociationId/networkAclId) | ASSOCIATIONS |
resource.availabilityZones | AVAILABILITY_ZONES |
resource.cidrBlock | CIDR_BLOCK |
resource.cloudAccountId | CLOUD_ACCOUNT_ID |
resource.cloudType | CLOUD_TYPE |
resource.connectorUuid | CONNECTOR_UUID |
resource.connectorUuids | CONNECTOR_UUIDS |
resource.controlsFailed | CONTROLS_FAILED |
resource.created | SOURCE_CREATED_DATE |
resource.createdOn | CREATED_ON |
resource.criticalityScore | CRITICALITY_SCORE |
resource.customerId | CUSTOMER_ID |
resource.customers | CUSTOMERS |
resource.description | DESCRIPTION |
resource.displayName | DISPLAY_NAME |
resource.instances | INSTANCES |
resource.ipPermissionEgressList | IP_PERMISSION_EGRESS_LIST |
resource.ipPermissionList | IP_PERMISSION_LIST |
resource.ipv6CidrBlockAssociationSet | IP_V6_CIDR_BLOCK_ASSOCIATION_SET |
resource.isDefault | IS_DEFAULT |
resource.lastUpdated | SOURCE_LAST_MODIFIED |
resource.networkAclId | NETWORK_ACL_ID |
resource.networkAclId (overrides base resource.name) | NAME |
resource.qualysTags (tagId/tagName) | QUALYS_TAGS |
resource.region | REGION |
resource.remediationEnabled | REMEDIATION_ENABLED |
resource.resourceId | RESOURCE_ID |
resource.resourceType | RESOURCE_TYPE |
resource.scanId | SCAN_ID |
resource.scanUuid | SCAN_UUID |
resource.status | PROVIDER_STATUS |
resource.subnets | SUBNETS |
resource.tags (Key/Value) | TAGS |
resource.type | TYPE |
resource.uuid | UID |
resource.version | LATEST_VERSION |
resource.vpcId | VPC_ID |
Network Security Group
| Source Field Name | SDM Attribute |
|---|---|
| ASSET_CATEGORY_CLOUD_RESOURCE | CATEGORIES |
normalizeAssetStatus(resource.status) | SOURCE_STATUS |
normalizeAssetStatus(resource.status) | STATUS |
resource.appServicePlan | APP_SERVICE_PLAN |
resource.arsScore | ARS_SCORE |
resource.availabilityState | AVAILABILITY_STATE |
resource.clientAffinityEnabled | CLIENT_AFFINITY_ENABLED |
resource.clientCertEnabled | CLIENT_CERT_ENABLED |
resource.cloudType | CLOUD_TYPE |
resource.connectorUuid | CONNECTOR_UUID |
resource.connectorUuids | CONNECTOR_UUIDS |
resource.controlsFailed | CONTROLS_FAILED |
resource.created | SOURCE_CREATED_DATE |
resource.criticalityScore | CRITICALITY_SCORE |
resource.customerId | CUSTOMER_ID |
resource.customers | CUSTOMERS |
resource.defaultHostName | DEFAULT_HOST_NAME |
resource.deploymentId | DEPLOYMENT_ID |
resource.description | DESCRIPTION |
resource.enabled | ENABLED |
resource.enabledHosts (name/state) | ENABLED_HOSTS |
resource.httpsOnly | HTTPS_ONLY |
resource.inboundSecurityRules (id/name/access/description/provisioningState/priority/destinationAddressPrefix/protocol/sourcePortRange/sourceAddressPrefix/destinationPortRange/etag/key) | INBOUND_SECURITY_RULES |
resource.key | KEY |
resource.lastUpdated | SOURCE_LAST_MODIFIED |
resource.name | NAME |
resource.networkInterfaces[].id | NETWORK_INTERFACES |
resource.outboundSecurityRules (same fields as inbound) | OUTBOUND_SECURITY_RULES |
resource.provisioningState | PROVISIONING_STATE |
resource.qualysTags (tagId/tagName) | QUALYS_TAGS |
resource.redundancyMode | REDUNDANCY_MODE |
resource.region | REGION |
resource.remediationEnabled | REMEDIATION_ENABLED |
resource.repositorySiteName | REPOSITORY_SITE_NAME |
resource.resourceGroupName | RESOURCE_GROUP_NAME |
resource.resourceId | RESOURCE_ID |
resource.scanUuid | SCAN_UUID |
resource.status | PROVIDER_STATUS |
resource.subKinds | SUB_KINDS |
resource.subnets (id/name/routeTableId/networkSecurityGroupId) | SUBNETS |
resource.subscriptionId | SUBSCRIPTION_ID |
resource.subscriptionName | SUBSCRIPTION_NAME |
resource.tags (Key/Value) | TAGS |
resource.type | TYPE |
resource.usageState | USAGE_STATE |
resource.uuid | UID |
resource.version | LATEST_VERSION |
Rds
| Source Field Name | SDM Attribute |
|---|---|
| ASSET_CATEGORY_CLOUD_RESOURCE | CATEGORIES |
normalizeAssetStatus(resource.status) | SOURCE_STATUS |
normalizeAssetStatus(resource.status) | STATUS |
resource.accountAlias | ACCOUNT_ALIAS |
resource.arn | ARN |
resource.arsScore | ARS_SCORE |
resource.availabilityZones | AVAILABILITY_ZONES |
resource.backupRetentionPeriod | BACKUP_RETENTION_PERIOD |
resource.caCertificateIdentifier | CA_CERTIFICATE_IDENTIFIER |
resource.cidrBlock | CIDR_BLOCK |
resource.cloudAccountId | CLOUD_ACCOUNT_ID |
resource.cloudType | CLOUD_TYPE |
resource.connectorUuid | CONNECTOR_UUID |
resource.connectorUuids | CONNECTOR_UUIDS |
resource.controlsFailed | CONTROLS_FAILED |
resource.created | SOURCE_CREATED_DATE |
resource.createdOn | CREATED_ON |
resource.criticalityScore | CRITICALITY_SCORE |
resource.customerId | CUSTOMER_ID |
resource.customers | CUSTOMERS |
resource.dbClusterIdentifier | DB_CLUSTER_IDENTIFIER |
resource.dbClusterIdentifier (overrides base resource.name) | NAME |
resource.dbInstanceIdentifier | DB_INSTANCE_IDENTIFIER |
resource.dbInstancePort | DB_INSTANCE_PORT |
resource.dbiResourceId | DBI_RESOURCE_ID |
resource.dbName | DB_NAME |
resource.dbSecurityGroupList | DB_SECURITY_GROUP_LIST |
resource.description | DESCRIPTION |
resource.displayName | DISPLAY_NAME |
resource.encrypted | ENCRYPTED |
resource.endpoint.address | ENDPOINT_ADDRESS |
resource.endpoint.hostedZoneId | ENDPOINT_HOSTED_ZONE_ID |
resource.endpoint.port | ENDPOINT_PORT |
resource.engine | ENGINE |
resource.engineVersion | ENGINE_VERSION |
resource.enhancedMonitoringEnabled | ENHANCED_MONITORING_ENABLED |
resource.iamDatabaseAuthenticationEnabled | IAM_DATABASE_AUTHENTICATION_ENABLED |
resource.instanceClass | INSTANCE_CLASS |
resource.instanceCreatedTime | INSTANCE_CREATED_TIME |
resource.instances | INSTANCES |
resource.ipPermissionEgressList | IP_PERMISSION_EGRESS_LIST |
resource.ipPermissionList | IP_PERMISSION_LIST |
resource.ipv6CidrBlockAssociationSet | IP_V6_CIDR_BLOCK_ASSOCIATION_SET |
resource.isDefault | IS_DEFAULT |
resource.kmsKeyId | KMS_KEY_ID |
resource.lastUpdated | SOURCE_LAST_MODIFIED |
resource.latestRestorableTime | LATEST_RESTORABLE_TIME |
resource.licenseModel | LICENSE_MODEL |
resource.masterUsername | MASTER_USERNAME |
resource.multiAZ | MULTI_AZ |
resource.preferredBackupWindow | PREFERRED_BACKUP_WINDOW |
resource.preferredMaintenanceWindow | PREFERRED_MAINTENANCE_WINDOW |
resource.publiclyAccessible | PUBLICLY_ACCESSIBLE |
resource.qualysTags (tagId/tagName) | QUALYS_TAGS |
resource.region | REGION |
resource.remediationEnabled | REMEDIATION_ENABLED |
resource.resourceId | RESOURCE_ID |
resource.resourceType | RESOURCE_TYPE |
resource.scanId | SCAN_ID |
resource.scanUuid | SCAN_UUID |
resource.securityGroupId | SECURITY_GROUP_ID |
resource.status | PROVIDER_STATUS |
resource.storageType | STORAGE_TYPE |
resource.subnetGroup.dbSubnetGroupArn | SUBNET_GROUP_DB_SUBNET_GROUP_ARN |
resource.subnetGroup.dbSubnetGroupName | SUBNET_GROUP_DB_SUBNET_GROUP_NAME |
resource.subnetGroup.dbSubnetGroupStatus | SUBNET_GROUP_DB_SUBNET_GROUP_STATUS |
resource.subnetGroup.dbSubnetVpcId | SUBNET_GROUP_DB_SUBNET_VPC_ID |
resource.subnetGroup.subnetList (identifier/status/availabilityZone) | SUBNET_GROUP_DB_SUBNET_LIST |
resource.subnetId | SUBNET_IDS |
resource.subnets | SUBNETS |
resource.type | TYPE |
resource.uuid | UID |
resource.version | LATEST_VERSION |
resource.vpcId | VPC_ID |
Resource Group
| Source Field Name | SDM Attribute |
|---|---|
| ASSET_CATEGORY_CLOUD_RESOURCE | CATEGORIES |
normalizeAssetStatus(resource.status) | SOURCE_STATUS |
normalizeAssetStatus(resource.status) | STATUS |
resource.appServicePlan | APP_SERVICE_PLAN |
resource.arsScore | ARS_SCORE |
resource.availabilityState | AVAILABILITY_STATE |
resource.clientAffinityEnabled | CLIENT_AFFINITY_ENABLED |
resource.clientCertEnabled | CLIENT_CERT_ENABLED |
resource.cloudType | CLOUD_TYPE |
resource.connectorUuid | CONNECTOR_UUID |
resource.connectorUuids | CONNECTOR_UUIDS |
resource.controlsFailed | CONTROLS_FAILED |
resource.created | SOURCE_CREATED_DATE |
resource.criticalityScore | CRITICALITY_SCORE |
resource.customerId | CUSTOMER_ID |
resource.customers | CUSTOMERS |
resource.defaultHostName | DEFAULT_HOST_NAME |
resource.deploymentId | DEPLOYMENT_ID |
resource.description | DESCRIPTION |
resource.enabled | ENABLED |
resource.enabledHosts (name/state) | ENABLED_HOSTS |
resource.httpsOnly | HTTPS_ONLY |
resource.key | KEY |
resource.lastUpdated | SOURCE_LAST_MODIFIED |
resource.name | NAME |
resource.provisioningState | PROVISIONING_STATE |
resource.qualysTags (tagId/tagName) | QUALYS_TAGS |
resource.redundancyMode | REDUNDANCY_MODE |
resource.region | REGION |
resource.remediationEnabled | REMEDIATION_ENABLED |
resource.repositorySiteName | REPOSITORY_SITE_NAME |
resource.resourceGroupName | RESOURCE_GROUP_NAME |
resource.resourceId | RESOURCE_ID |
resource.scanUuid | SCAN_UUID |
resource.status | PROVIDER_STATUS |
resource.subKinds | SUB_KINDS |
resource.subnets (id/name/routeTableId/networkSecurityGroupId) | SUBNETS |
resource.subscriptionId | SUBSCRIPTION_ID |
resource.subscriptionName | SUBSCRIPTION_NAME |
resource.type | TYPE |
resource.usageState | USAGE_STATE |
resource.uuid | UID |
resource.version | LATEST_VERSION |
note
Note: The sync deserializes records using the NetworkSecurityGroupResource type but the build method emits only the base Azure attributes.
Route Table
| Source Field Name | SDM Attribute |
|---|---|
normalizeAssetStatus(resource.status) | SOURCE_STATUS |
normalizeAssetStatus(resource.status) | STATUS |
resource.accountAlias | ACCOUNT_ALIAS |
resource.arn | ARN |
resource.arsScore | ARS_SCORE |
resource.associations (subnetId/routeTableId/routeTableAssociationId/main) | ASSOCIATIONS |
resource.availabilityZones | AVAILABILITY_ZONES |
resource.cidrBlock | CIDR_BLOCK |
resource.cloudAccountId | CLOUD_ACCOUNT_ID |
resource.cloudType | CLOUD_TYPE |
resource.connectorUuid | CONNECTOR_UUID |
resource.connectorUuids | CONNECTOR_UUIDS |
resource.controlsFailed | CONTROLS_FAILED |
resource.created | SOURCE_CREATED_DATE |
resource.createdOn | CREATED_ON |
resource.criticalityScore | CRITICALITY_SCORE |
resource.customerId | CUSTOMER_ID |
resource.customers | CUSTOMERS |
resource.description | DESCRIPTION |
resource.displayName | DISPLAY_NAME |
resource.instances | INSTANCES |
resource.ipPermissionEgressList | IP_PERMISSION_EGRESS_LIST |
resource.ipPermissionList | IP_PERMISSION_LIST |
resource.ipv6CidrBlockAssociationSet | IP_V6_CIDR_BLOCK_ASSOCIATION_SET |
resource.isDefault | IS_DEFAULT |
resource.lastUpdated | SOURCE_LAST_MODIFIED |
resource.qualysTags (tagId/tagName) | QUALYS_TAGS |
resource.region | REGION |
resource.remediationEnabled | REMEDIATION_ENABLED |
resource.resourceId | RESOURCE_ID |
resource.resourceType | RESOURCE_TYPE |
resource.routeDtos (destination/target/status) | ROUTE_DTOS |
resource.routes (destinationCidrBlock/networkInterfaceId/destinationPrefixListId/instanceId/destinationIpv6CidrBlock/origin/vpcPeeringConnectionId/natGatewayId/egressOnlyInternetGatewayId/state/instanceOwnerId/gatewayId) | ROUTES |
resource.routeTableId | ROUTE_TABLE_ID |
resource.routeTableId (overrides base resource.name) | NAME |
resource.scanId | SCAN_ID |
resource.scanUuid | SCAN_UUID |
resource.status | PROVIDER_STATUS |
resource.subnets | SUBNETS |
resource.tags (Key/Value) | TAGS |
resource.type | TYPE |
resource.uuid | UID |
resource.version | LATEST_VERSION |
resource.vpcId | VPC_ID |
| {ASSET_CATEGORY_CLOUD_RESOURCE, ASSET_CATEGORY_NETWORK} | CATEGORIES |
Sql Server
| Source Field Name | SDM Attribute |
|---|---|
normalizeAssetStatus(resource.status) | SOURCE_STATUS |
normalizeAssetStatus(resource.status) | STATUS |
resource.appServicePlan | APP_SERVICE_PLAN |
resource.arsScore | ARS_SCORE |
resource.availabilityState | AVAILABILITY_STATE |
resource.clientAffinityEnabled | CLIENT_AFFINITY_ENABLED |
resource.clientCertEnabled | CLIENT_CERT_ENABLED |
resource.cloudType | CLOUD_TYPE |
resource.connectorUuid | CONNECTOR_UUID |
resource.connectorUuids | CONNECTOR_UUIDS |
resource.controlsFailed | CONTROLS_FAILED |
resource.created | SOURCE_CREATED_DATE |
resource.criticalityScore | CRITICALITY_SCORE |
resource.customerId | CUSTOMER_ID |
resource.customers | CUSTOMERS |
resource.databases[].databaseId | DATABASES |
resource.defaultHostName | DEFAULT_HOST_NAME |
resource.deploymentId | DEPLOYMENT_ID |
resource.description | DESCRIPTION |
resource.enabled | ENABLED |
resource.enabledHosts (name/state) | ENABLED_HOSTS |
resource.fqdn | FQDN |
resource.fqdn | DNS_NAMES |
resource.httpsOnly | HTTPS_ONLY |
resource.key | KEY |
resource.lastUpdated | SOURCE_LAST_MODIFIED |
resource.name | NAME |
resource.provisioningState | PROVISIONING_STATE |
resource.qualysTags (tagId/tagName) | QUALYS_TAGS |
resource.redundancyMode | REDUNDANCY_MODE |
resource.region | REGION |
resource.remediationEnabled | REMEDIATION_ENABLED |
resource.repositorySiteName | REPOSITORY_SITE_NAME |
resource.resourceGroupName | RESOURCE_GROUP_NAME |
resource.resourceId | RESOURCE_ID |
resource.resourceId | HOSTNAMES |
resource.scanUuid | SCAN_UUID |
resource.status | PROVIDER_STATUS |
resource.subKinds | SUB_KINDS |
resource.subnets (id/name/routeTableId/networkSecurityGroupId) | SUBNETS |
resource.subscriptionId | SUBSCRIPTION_ID |
resource.subscriptionName | SUBSCRIPTION_NAME |
resource.tags (Key/Value) | TAGS |
resource.type | TYPE |
resource.usageState | USAGE_STATE |
resource.uuid | UID |
resource.version | LATEST_VERSION |
| {ASSET_CATEGORY_CLOUD_RESOURCE, ASSET_CATEGORY_HOST} | CATEGORIES |
Sql Server Database
| Source Field Name | SDM Attribute |
|---|---|
normalizeAssetStatus(resource.status) | SOURCE_STATUS |
normalizeAssetStatus(resource.status) | STATUS |
resource.appServicePlan | APP_SERVICE_PLAN |
resource.arsScore | ARS_SCORE |
resource.availabilityState | AVAILABILITY_STATE |
resource.clientAffinityEnabled | CLIENT_AFFINITY_ENABLED |
resource.clientCertEnabled | CLIENT_CERT_ENABLED |
resource.cloudType | CLOUD_TYPE |
resource.collation | COLLATION |
resource.connectorUuid | CONNECTOR_UUID |
resource.connectorUuids | CONNECTOR_UUIDS |
resource.controlsFailed | CONTROLS_FAILED |
resource.created | SOURCE_CREATED_DATE |
resource.criticalityScore | CRITICALITY_SCORE |
resource.customerId | CUSTOMER_ID |
resource.customers | CUSTOMERS |
resource.defaultHostName | DEFAULT_HOST_NAME |
resource.defaultSecondaryLocation | DEFAULT_SECONDARY_LOCATION |
resource.deploymentId | DEPLOYMENT_ID |
resource.description | DESCRIPTION |
resource.earliestRestoreDate | EARLIEST_RESTORE_DATE |
resource.edition | EDITION |
resource.enabled | ENABLED |
resource.enabledHosts (name/state) | ENABLED_HOSTS |
resource.httpsOnly | HTTPS_ONLY |
resource.id | ID |
resource.key | KEY |
resource.lastUpdated | SOURCE_LAST_MODIFIED |
resource.name | NAME |
resource.parentId | PARENT_ID |
resource.provisioningState | PROVISIONING_STATE |
resource.qualysTags (tagId/tagName) | QUALYS_TAGS |
resource.redundancyMode | REDUNDANCY_MODE |
resource.region | REGION |
resource.remediationEnabled | REMEDIATION_ENABLED |
resource.repositorySiteName | REPOSITORY_SITE_NAME |
resource.resourceGroupName | RESOURCE_GROUP_NAME |
resource.resourceId | RESOURCE_ID |
resource.scanUuid | SCAN_UUID |
resource.status | PROVIDER_STATUS |
resource.subKinds | SUB_KINDS |
resource.subnets (id/name/routeTableId/networkSecurityGroupId) | SUBNETS |
resource.subscriptionId | SUBSCRIPTION_ID |
resource.subscriptionName | SUBSCRIPTION_NAME |
resource.tags (Key/Value) | TAGS |
resource.type | TYPE |
resource.usageState | USAGE_STATE |
resource.uuid | UID |
resource.version | LATEST_VERSION |
| {ASSET_CATEGORY_CLOUD_RESOURCE, ASSET_CATEGORY_HOST} | CATEGORIES |
Subnet
| Source Field Name | SDM Attribute |
|---|---|
normalizeAssetStatus(resource.status) | SOURCE_STATUS |
normalizeAssetStatus(resource.status) | STATUS |
resource.accountAlias | ACCOUNT_ALIAS |
resource.arn | ARN |
resource.arsScore | ARS_SCORE |
resource.assignIpv6AddressOnCreation | ASSIGN_IPV6_ADDRESS_ON_CREATION |
resource.availabilityZones | AVAILABILITY_ZONES |
resource.availableIpAddressCount | AVAILABLE_IP_ADDRESS_COUNT |
resource.cidrBlock | CIDR_BLOCK |
resource.cloudAccountId | CLOUD_ACCOUNT_ID |
resource.cloudType | CLOUD_TYPE |
resource.connectorUuid | CONNECTOR_UUID |
resource.connectorUuids | CONNECTOR_UUIDS |
resource.controlsFailed | CONTROLS_FAILED |
resource.created | SOURCE_CREATED_DATE |
resource.createdOn | CREATED_ON |
resource.criticalityScore | CRITICALITY_SCORE |
resource.customerId | CUSTOMER_ID |
resource.customers | CUSTOMERS |
resource.defaultForAz | DEFAULT_FOR_AZ |
resource.description | DESCRIPTION |
resource.displayName | DISPLAY_NAME |
resource.instances | INSTANCES |
resource.ipPermissionEgressList | IP_PERMISSION_EGRESS_LIST |
resource.ipPermissionList | IP_PERMISSION_LIST |
resource.ipv6CidrBlockAssociationSet | IP_V6_CIDR_BLOCK_ASSOCIATION_SET |
resource.isDefault | IS_DEFAULT |
resource.lastUpdated | SOURCE_LAST_MODIFIED |
resource.mapPublicIpOnLaunch | MAP_PUBLIC_IP_ON_LAUNCH |
resource.qualysTags (tagId/tagName) | QUALYS_TAGS |
resource.region | REGION |
resource.remediationEnabled | REMEDIATION_ENABLED |
resource.resourceId | RESOURCE_ID |
resource.resourceType | RESOURCE_TYPE |
resource.scanId | SCAN_ID |
resource.scanUuid | SCAN_UUID |
resource.status | PROVIDER_STATUS |
resource.subnetId | SUBNET_ID |
resource.subnetId (overrides base resource.name) | NAME |
resource.subnets | SUBNETS |
resource.tags (Key/Value) | TAGS |
resource.type | TYPE |
resource.uuid | UID |
resource.version | LATEST_VERSION |
resource.vpcId | VPC_ID |
| {ASSET_CATEGORY_CLOUD_RESOURCE, ASSET_CATEGORY_NETWORK} | CATEGORIES |
Subnetwork
| Source Field Name | SDM Attribute |
|---|---|
normalizeAssetStatus(resource.status) | SOURCE_STATUS |
normalizeAssetStatus(resource.status) | STATUS |
resource.arsScore | ARS_SCORE |
resource.cloudType | CLOUD_TYPE |
resource.connectorUuid | CONNECTOR_UUID |
resource.connectorUuids | CONNECTOR_UUIDS |
resource.controlsFailed | CONTROLS_FAILED |
resource.created | SOURCE_CREATED_DATE |
resource.creationTimeStamp | CREATION_TIMESTAMP |
resource.criticalityScore | CRITICALITY_SCORE |
resource.customerId | CUSTOMER_ID |
resource.customers | CUSTOMERS |
resource.description | DESCRIPTION |
resource.ipCidrRange | IP_CIDR_RANGE |
resource.lastUpdated | SOURCE_LAST_MODIFIED |
resource.name | NAME |
resource.network | NETWORK |
resource.projectId | PROJECT_ID |
resource.projectNumber | PROJECT_NUMBER |
resource.qualysTags (tagId/tagName) | QUALYS_TAGS |
resource.region | REGION |
resource.remediationEnabled | REMEDIATION_ENABLED |
resource.resourceId | RESOURCE_ID |
resource.scanUuid | SCAN_UUID |
resource.status | PROVIDER_STATUS |
resource.subnetworks | SUBNETWORKS |
resource.type | TYPE |
resource.uuid | UID |
resource.version | LATEST_VERSION |
| {ASSET_CATEGORY_CLOUD_RESOURCE, ASSET_CATEGORY_NETWORK} | CATEGORIES |
Violation
| Source Field Name | SDM Attribute |
|---|---|
| cloudType + controlId + resourceId + accountId | UID |
controlId (cid) | TYPE |
evaluationResource.accountId | CLOUD_ACCOUNT_ID |
evaluationResource.connectorId | CONNECTOR_ID |
evaluationResource.evaluatedOn | LAST_SCANNED |
evaluationResource.evaluationDates.dateFixed | DATE_FIXED |
evaluationResource.evaluationDates.dateReopen | DATE_REOPEN |
evaluationResource.evaluationDates.firstEvaluated | FIRST_SEEN |
evaluationResource.evaluationDates.lastEvaluated | LAST_SEEN |
evaluationResource.evidences (settingName : actualValue) | RESULTS |
evaluationResource.region | REGION |
evaluationResource.resourceId | TARGETS |
evaluationResource.resourceId | RESOURCE_ID |
evaluationResource.resourceType | RESOURCE_TYPE |
getFindingStatusCategory(normalizeFindingStatus(result)) | STATUS_CATEGORY |
normalizeFindingStatus(result) (pass→passed / fail→failed) | STATUS |
Violation Definition
| Source Field Name | SDM Attribute |
|---|---|
controlResource.buildTimeRemediation | BUILD_TIME_REMEDIATION |
controlResource.cid | UID |
controlResource.controlName | NAME |
controlResource.controlType | CONTROL_TYPE |
controlResource.created | SOURCE_CREATED_DATE |
controlResource.criticality | SEVERITY_SCORE |
controlResource.evaluation.evaluationCriteria (label/operator/value) | EVALUATION_CRITERIA |
controlResource.evaluation.evaluationDescription | EVALUATION_DESCRIPTION |
controlResource.evaluation.failMessage | EVALUATION_FAIL_MESSAGE |
controlResource.evaluation.passMessage | EVALUATION_PASS_MESSAGE |
controlResource.executionType | EXECUTION_TYPE |
controlResource.isCustomizable | IS_CUSTOMIZABLE |
controlResource.manualRemediation | RECOMMENDATION |
controlResource.modified | SOURCE_LAST_MODIFIED |
controlResource.policyNames | POLICY_NAMES |
controlResource.provider | CLOUD_PROVIDER |
controlResource.rationale | RATIONALE |
controlResource.references | REFERENCES |
controlResource.remediationEnabled | REMEDIATION_ENABLED |
controlResource.resourceType | RESOURCE_TYPE |
controlResource.serviceType | SERVICE_TYPE |
controlResource.specification | SPECIFICATION |
controlResource.templateType | TEMPLATE_TYPE |
controlResource.workflowBased | WORKFLOW_BASED |
getFindingSeverityScore(normalizeFindingSeverity(criticality)) | SOURCE_SEVERITY |
normalizeFindingSeverity(controlResource.criticality) | SEVERITY |
Virtual Machine
| Source Field Name | SDM Attribute |
|---|---|
normalizeAssetStatus(resource.status) | SOURCE_STATUS |
normalizeAssetStatus(resource.status) | STATUS |
resource.appServicePlan | APP_SERVICE_PLAN |
resource.arsScore | ARS_SCORE |
resource.availabilityState | AVAILABILITY_STATE |
resource.clientAffinityEnabled | CLIENT_AFFINITY_ENABLED |
resource.clientCertEnabled | CLIENT_CERT_ENABLED |
resource.cloudType | CLOUD_TYPE |
resource.computerName | COMPUTER_NAME |
resource.connectorUuid | CONNECTOR_UUID |
resource.connectorUuids | CONNECTOR_UUIDS |
resource.controlsFailed | CONTROLS_FAILED |
resource.created | SOURCE_CREATED_DATE |
resource.criticalityScore | CRITICALITY_SCORE |
resource.customerId | CUSTOMER_ID |
resource.customers | CUSTOMERS |
resource.defaultHostName | DEFAULT_HOST_NAME |
resource.deploymentId | DEPLOYMENT_ID |
resource.description | DESCRIPTION |
resource.enabled | ENABLED |
resource.enabledHosts (name/state) | ENABLED_HOSTS |
resource.httpsOnly | HTTPS_ONLY |
resource.key | KEY |
resource.lastUpdated | SOURCE_LAST_MODIFIED |
resource.name | NAME |
resource.primaryPrivateIPAddress | PRIVATE_IP_ADDRESSES |
resource.primaryPublicIPAddress | PUBLIC_IP_ADDRESSES |
resource.provisioningState | PROVISIONING_STATE |
resource.qualysTags (tagId/tagName) | QUALYS_TAGS |
resource.redundancyMode | REDUNDANCY_MODE |
resource.region | REGION |
resource.remediationEnabled | REMEDIATION_ENABLED |
resource.repositorySiteName | REPOSITORY_SITE_NAME |
resource.resourceGroupName | RESOURCE_GROUP_NAME |
resource.resourceId | RESOURCE_ID |
resource.scanUuid | SCAN_UUID |
resource.status | PROVIDER_STATUS |
resource.statuses (code/level/displayStatus/message/time) | STATUSES |
resource.subKinds | SUB_KINDS |
resource.subnets (id/name/routeTableId/networkSecurityGroupId) | SUBNETS |
resource.subscriptionId | SUBSCRIPTION_ID |
resource.subscriptionName | SUBSCRIPTION_NAME |
resource.tags (Key/Value) | TAGS |
resource.type | TYPE |
resource.usageState | USAGE_STATE |
resource.uuid | UID |
resource.version | LATEST_VERSION |
resource.vulnerabilityStats.severity.five | VULNERABILITY_STAT_SEVERITY_FIVE |
resource.vulnerabilityStats.severity.four | VULNERABILITY_STAT_SEVERITY_FOUR |
resource.vulnerabilityStats.severity.three | VULNERABILITY_STAT_SEVERITY_THREE |
resource.vulnerabilityStats.severity.two | VULNERABILITY_STAT_SEVERITY_TWO |
resource.vulnerabilityStats.totalVulnerability | VULNERABILITY_STAT_TOTAL_VULNERABILITY |
resource.vulnerabilityStats.typeDetected.confirmed | VULNERABILITY_STAT_TYPE_DETECTED_CONFIRMED |
resource.vulnerabilityStats.typeDetected.information | VULNERABILITY_STAT_TYPE_DETECTED_INFORMATION |
resource.vulnerabilityStats.typeDetected.potential | VULNERABILITY_STAT_TYPE_DETECTED_POTENTIAL |
| {ASSET_CATEGORY_HOST, ASSET_CATEGORY_CLOUD_RESOURCE} | CATEGORIES |
Virtual Network
| Source Field Name | SDM Attribute |
|---|---|
normalizeAssetStatus(resource.status) | SOURCE_STATUS |
normalizeAssetStatus(resource.status) | STATUS |
resource.addressPrefixes | ADDRESS_PREFIXES |
resource.addressSpaces | ADDRESS_SPACES |
resource.appServicePlan | APP_SERVICE_PLAN |
resource.arsScore | ARS_SCORE |
resource.availabilityState | AVAILABILITY_STATE |
resource.clientAffinityEnabled | CLIENT_AFFINITY_ENABLED |
resource.clientCertEnabled | CLIENT_CERT_ENABLED |
resource.cloudType | CLOUD_TYPE |
resource.connectorUuid | CONNECTOR_UUID |
resource.connectorUuids | CONNECTOR_UUIDS |
resource.controlsFailed | CONTROLS_FAILED |
resource.created | SOURCE_CREATED_DATE |
resource.criticalityScore | CRITICALITY_SCORE |
resource.customerId | CUSTOMER_ID |
resource.customers | CUSTOMERS |
resource.defaultHostName | DEFAULT_HOST_NAME |
resource.deploymentId | DEPLOYMENT_ID |
resource.description | DESCRIPTION |
resource.dnsServerIPs | DNS_SERVER_IPS |
resource.dnsServers | DNS_SERVERS |
resource.enabled | ENABLED |
resource.enabledHosts (name/state) | ENABLED_HOSTS |
resource.httpsOnly | HTTPS_ONLY |
resource.key | KEY |
resource.lastUpdated | SOURCE_LAST_MODIFIED |
resource.name | NAME |
resource.provisioningState | PROVISIONING_STATE |
resource.qualysTags (tagId/tagName) | QUALYS_TAGS |
resource.redundancyMode | REDUNDANCY_MODE |
resource.region | REGION |
resource.remediationEnabled | REMEDIATION_ENABLED |
resource.repositorySiteName | REPOSITORY_SITE_NAME |
resource.resourceGroupName | RESOURCE_GROUP_NAME |
resource.resourceId | RESOURCE_ID |
resource.scanUuid | SCAN_UUID |
resource.status | PROVIDER_STATUS |
resource.subKinds | SUB_KINDS |
resource.subnets (id/name/routeTableId/networkSecurityGroupId) | SUBNETS |
resource.subscriptionId | SUBSCRIPTION_ID |
resource.subscriptionName | SUBSCRIPTION_NAME |
resource.tags (Key/Value) | TAGS |
resource.type | TYPE |
resource.usageState | USAGE_STATE |
resource.uuid | UID |
resource.version | LATEST_VERSION |
| {ASSET_CATEGORY_CLOUD_RESOURCE, ASSET_CATEGORY_NETWORK} | CATEGORIES |
Vm Instance
| Source Field Name | SDM Attribute |
|---|---|
| ASSET_CATEGORY_CLOUD_RESOURCE | CATEGORIES |
normalizeAssetStatus(resource.status) | SOURCE_STATUS |
normalizeAssetStatus(resource.status) | STATUS |
resource.arsScore | ARS_SCORE |
resource.cloudType | CLOUD_TYPE |
resource.connectorUuid | CONNECTOR_UUID |
resource.connectorUuids | CONNECTOR_UUIDS |
resource.controlsFailed | CONTROLS_FAILED |
resource.created | SOURCE_CREATED_DATE |
resource.creationTimeStamp | CREATION_TIMESTAMP |
resource.criticalityScore | CRITICALITY_SCORE |
resource.customerId | CUSTOMER_ID |
resource.customers | CUSTOMERS |
resource.description | DESCRIPTION |
resource.ipCidrRange | IP_CIDR_RANGE |
resource.lastUpdated | SOURCE_LAST_MODIFIED |
resource.name | NAME |
resource.network | NETWORK |
resource.projectId | PROJECT_ID |
resource.projectNumber | PROJECT_NUMBER |
resource.qualysTags (tagId/tagName) | QUALYS_TAGS |
resource.region | REGION |
resource.remediationEnabled | REMEDIATION_ENABLED |
resource.resourceId | RESOURCE_ID |
resource.scanUuid | SCAN_UUID |
resource.status | PROVIDER_STATUS |
resource.subnetworks | SUBNETWORKS |
resource.type | TYPE |
resource.uuid | UID |
resource.version | LATEST_VERSION |
Vpc
| Source Field Name | SDM Attribute |
|---|---|
normalizeAssetStatus(resource.status) | SOURCE_STATUS |
normalizeAssetStatus(resource.status) | STATUS |
resource.accountAlias | ACCOUNT_ALIAS |
resource.arn | ARN |
resource.arsScore | ARS_SCORE |
resource.availabilityZones | AVAILABILITY_ZONES |
resource.cidrBlock | CIDR_BLOCK |
resource.cloudAccountId | CLOUD_ACCOUNT_ID |
resource.cloudType | CLOUD_TYPE |
resource.connectorUuid | CONNECTOR_UUID |
resource.connectorUuids | CONNECTOR_UUIDS |
resource.controlsFailed | CONTROLS_FAILED |
resource.created | SOURCE_CREATED_DATE |
resource.createdOn | CREATED_ON |
resource.criticalityScore | CRITICALITY_SCORE |
resource.customerId | CUSTOMER_ID |
resource.customers | CUSTOMERS |
resource.description | DESCRIPTION |
resource.displayName | DISPLAY_NAME |
resource.instances | INSTANCES |
resource.instanceTenancy | INSTANCE_TENANCY |
resource.ipPermissionEgressList | IP_PERMISSION_EGRESS_LIST |
resource.ipPermissionList | IP_PERMISSION_LIST |
resource.ipv6CidrBlockAssociationSet | IP_V6_CIDR_BLOCK_ASSOCIATION_SET |
resource.isDefault | IS_DEFAULT |
resource.lastUpdated | SOURCE_LAST_MODIFIED |
resource.qualysTags (tagId/tagName) | QUALYS_TAGS |
resource.region | REGION |
resource.remediationEnabled | REMEDIATION_ENABLED |
resource.resourceId | RESOURCE_ID |
resource.resourceType | RESOURCE_TYPE |
resource.scanId | SCAN_ID |
resource.scanUuid | SCAN_UUID |
resource.status | PROVIDER_STATUS |
resource.subnets | SUBNETS |
resource.tags (Key/Value) | TAGS |
resource.type | TYPE |
resource.uuid | UID |
resource.version | LATEST_VERSION |
resource.vpcId | VPC_ID |
resource.vpcId (overrides base resource.name) | NAME |
| {ASSET_CATEGORY_CLOUD_RESOURCE, ASSET_CATEGORY_NETWORK} | CATEGORIES |
Vpc Security Group
| Source Field Name | SDM Attribute |
|---|---|
| ASSET_CATEGORY_CLOUD_RESOURCE | CATEGORIES |
normalizeAssetStatus(resource.status) | SOURCE_STATUS |
normalizeAssetStatus(resource.status) | STATUS |
resource.accountAlias | ACCOUNT_ALIAS |
resource.arn | ARN |
resource.arsScore | ARS_SCORE |
resource.availabilityZones | AVAILABILITY_ZONES |
resource.cidrBlock | CIDR_BLOCK |
resource.cloudAccountId | CLOUD_ACCOUNT_ID |
resource.cloudType | CLOUD_TYPE |
resource.connectorUuid | CONNECTOR_UUID |
resource.connectorUuids | CONNECTOR_UUIDS |
resource.controlsFailed | CONTROLS_FAILED |
resource.created | SOURCE_CREATED_DATE |
resource.createdOn | CREATED_ON |
resource.criticalityScore | CRITICALITY_SCORE |
resource.customerId | CUSTOMER_ID |
resource.customers | CUSTOMERS |
resource.description | DESCRIPTION |
resource.displayName | DISPLAY_NAME |
resource.groupId | GROUP_ID |
resource.groupName | GROUP_NAME |
resource.instances | INSTANCES |
resource.ipPermissionEgressList | IP_PERMISSION_EGRESS_LIST |
resource.ipPermissionList | IP_PERMISSION_LIST |
resource.ipv6CidrBlockAssociationSet | IP_V6_CIDR_BLOCK_ASSOCIATION_SET |
resource.isDefault | IS_DEFAULT |
resource.lastUpdated | SOURCE_LAST_MODIFIED |
resource.name | NAME |
resource.qualysTags (tagId/tagName) | QUALYS_TAGS |
resource.region | REGION |
resource.remediationEnabled | REMEDIATION_ENABLED |
resource.resourceId | RESOURCE_ID |
resource.resourceType | RESOURCE_TYPE |
resource.scanId | SCAN_ID |
resource.scanUuid | SCAN_UUID |
resource.status | PROVIDER_STATUS |
resource.subnets | SUBNETS |
resource.tags (Key/Value) | TAGS |
resource.type | TYPE |
resource.uuid | UID |
resource.version | LATEST_VERSION |
resource.vpcId | VPC_ID |
resource.vulnerable | VULNERABLE |
Web App
| Source Field Name | SDM Attribute |
|---|---|
| ASSET_CATEGORY_CLOUD_RESOURCE | CATEGORIES |
normalizeAssetStatus(resource.status) | SOURCE_STATUS |
normalizeAssetStatus(resource.status) | STATUS |
resource.appServicePlan | APP_SERVICE_PLAN |
resource.arsScore | ARS_SCORE |
resource.availabilityState | AVAILABILITY_STATE |
resource.clientAffinityEnabled | CLIENT_AFFINITY_ENABLED |
resource.clientCertEnabled | CLIENT_CERT_ENABLED |
resource.cloudType | CLOUD_TYPE |
resource.connectorUuid | CONNECTOR_UUID |
resource.connectorUuids | CONNECTOR_UUIDS |
resource.controlsFailed | CONTROLS_FAILED |
resource.created | SOURCE_CREATED_DATE |
resource.criticalityScore | CRITICALITY_SCORE |
resource.customerId | CUSTOMER_ID |
resource.customers | CUSTOMERS |
resource.defaultHostName | DEFAULT_HOST_NAME |
resource.deploymentId | DEPLOYMENT_ID |
resource.description | DESCRIPTION |
resource.enabled | ENABLED |
resource.enabledHosts (name/state) | ENABLED_HOSTS |
resource.httpsOnly | HTTPS_ONLY |
resource.key | KEY |
resource.lastUpdated | SOURCE_LAST_MODIFIED |
resource.name | NAME |
resource.provisioningState | PROVISIONING_STATE |
resource.qualysTags (tagId/tagName) | QUALYS_TAGS |
resource.redundancyMode | REDUNDANCY_MODE |
resource.region | REGION |
resource.remediationEnabled | REMEDIATION_ENABLED |
resource.repositorySiteName | REPOSITORY_SITE_NAME |
resource.resourceGroupName | RESOURCE_GROUP_NAME |
resource.resourceId | RESOURCE_ID |
resource.scanUuid | SCAN_UUID |
resource.status | PROVIDER_STATUS |
resource.subKinds | SUB_KINDS |
resource.subnets (id/name/routeTableId/networkSecurityGroupId) | SUBNETS |
resource.subscriptionId | SUBSCRIPTION_ID |
resource.subscriptionName | SUBSCRIPTION_NAME |
resource.type | TYPE |
resource.usageState | USAGE_STATE |
resource.uuid | UID |
resource.version | LATEST_VERSION |
note
Note: The sync deserializes records using the VirtualNetworkResource type but the build method emits only the base Azure attributes.
Operations & API
Expand each connector object to see its operation options, delta-sync behavior, and the API it uses. See connector operation options for how to apply operation options (keys and values are case-sensitive).
Auto Scaling Group
Operation options
This object does not support any operation options.
Delta sync
The connector README does not document sync behavior for this object.
API
- Type: REST endpoint (Qualys CloudView v2 API, JSON) · Endpoint:
GET {baseUrl}/cloudview-api/rest/v2/resource/AUTO_SCALING_GROUP/AWS
Bucket
Operation options
This object does not support any operation options.
Delta sync
The connector README does not document sync behavior for this object.
API
- Type: REST endpoint (Qualys CloudView v2 API, JSON) · Endpoint:
GET {baseUrl}/cloudview-api/rest/v2/resource/BUCKET/AWS
Cloud Function
Operation options
This object does not support any operation options.
Delta sync
The connector README does not document sync behavior for this object.
API
- Type: REST endpoint (Qualys CloudView v2 API, JSON) · Endpoint:
GET {baseUrl}/cloudview-api/rest/v2/resource/CLOUD_FUNCTION/GCP
Ebs Volume
Operation options
This object does not support any operation options.
Delta sync
The connector README does not document sync behavior for this object.
API
- Type: REST endpoint (Qualys CloudView v2 API, JSON) · Endpoint:
GET {baseUrl}/cloudview-api/rest/v2/resource/EBS/AWS
Ec2 Instance
Operation options
This object does not support any operation options.
Delta sync
The connector README does not document sync behavior for this object.
API
- Type: REST endpoint (Qualys CloudView v2 API, JSON) · Endpoint:
GET {baseUrl}/cloudview-api/rest/v2/resource/EC2_INSTANCE/AWS
Eks Cluster
Operation options
This object does not support any operation options.
Delta sync
The connector README does not document sync behavior for this object.
API
- Type: REST endpoint (Qualys CloudView v2 API, JSON) · Endpoint:
GET {baseUrl}/cloudview-api/rest/v2/resource/EKS_CLUSTER/AWS
Eks Fargate Profile
Operation options
This object does not support any operation options.
Delta sync
The connector README does not document sync behavior for this object.
API
- Type: REST endpoint (Qualys CloudView v2 API, JSON) · Endpoint:
GET {baseUrl}/cloudview-api/rest/v2/resource/EKS_FARGATE_PROFILE/AWS
Eks Node Group
Operation options
This object does not support any operation options.
Delta sync
The connector README does not document sync behavior for this object.
API
- Type: REST endpoint (Qualys CloudView v2 API, JSON) · Endpoint:
GET {baseUrl}/cloudview-api/rest/v2/resource/EKS_NODEGROUP/AWS
Firewall Rules
Operation options
This object does not support any operation options.
Delta sync
The connector README does not document sync behavior for this object.
API
- Type: REST endpoint (Qualys CloudView v2 API, JSON) · Endpoint:
GET {baseUrl}/cloudview-api/rest/v2/resource/FIREWALL_RULES/GCP
Function App
Operation options
This object does not support any operation options.
Delta sync
The connector README does not document sync behavior for this object.
API
- Type: REST endpoint (Qualys CloudView v2 API, JSON) · Endpoint:
GET {baseUrl}/cloudview-api/rest/v2/resource/FUNCTION_APP/Azure
IAM User
Operation options
This object does not support any operation options.
Delta sync
The connector README does not document sync behavior for this object.
API
- Type: REST endpoint (Qualys CloudView v2 API, JSON) · Endpoint:
GET {baseUrl}/cloudview-api/rest/v2/resource/IAM_USER/AWS
Internet Gateway
Operation options
This object does not support any operation options.
Delta sync
The connector README does not document sync behavior for this object.
API
- Type: REST endpoint (Qualys CloudView v2 API, JSON) · Endpoint:
GET {baseUrl}/cloudview-api/rest/v2/resource/INTERNET_GATEWAY/AWS
Lambda
Operation options
This object does not support any operation options.
Delta sync
The connector README does not document sync behavior for this object.
API
- Type: REST endpoint (Qualys CloudView v2 API, JSON) · Endpoint:
GET {baseUrl}/cloudview-api/rest/v2/resource/LAMBDA/AWS
Load Balancer
Operation options
This object does not support any operation options.
Delta sync
The connector README does not document sync behavior for this object.
API
- Type: REST endpoint (Qualys CloudView v2 API, JSON) · Endpoint:
GET {baseUrl}/cloudview-api/rest/v2/resource/LOAD_BALANCER/AWS
Network
Operation options
This object does not support any operation options.
Delta sync
The connector README does not document sync behavior for this object.
API
- Type: REST endpoint (Qualys CloudView v2 API, JSON) · Endpoint:
GET {baseUrl}/cloudview-api/rest/v2/resource/NETWORK/GCP
Network Acl
Operation options
This object does not support any operation options.
Delta sync
The connector README does not document sync behavior for this object.
API
- Type: REST endpoint (Qualys CloudView v2 API, JSON) · Endpoint:
GET {baseUrl}/cloudview-api/rest/v2/resource/NETWORK_ACL/AWS
Network Security Group
Operation options
This object does not support any operation options.
Delta sync
The connector README does not document sync behavior for this object.
API
- Type: REST endpoint (Qualys CloudView v2 API, JSON) · Endpoint:
GET {baseUrl}/cloudview-api/rest/v2/resource/NETWORK_SECURITY_GROUP/Azure
Rds
Operation options
This object does not support any operation options.
Delta sync
The connector README does not document sync behavior for this object.
API
- Type: REST endpoint (Qualys CloudView v2 API, JSON) · Endpoint:
GET {baseUrl}/cloudview-api/rest/v2/resource/RDS/AWS
Resource Group
Operation options
This object does not support any operation options.
Delta sync
The connector README does not document sync behavior for this object.
API
- Type: REST endpoint (Qualys CloudView v2 API, JSON) · Endpoint:
GET {baseUrl}/cloudview-api/rest/v2/resource/RESOURCE_GROUP/Azure
Route Table
Operation options
This object does not support any operation options.
Delta sync
The connector README does not document sync behavior for this object.
API
- Type: REST endpoint (Qualys CloudView v2 API, JSON) · Endpoint:
GET {baseUrl}/cloudview-api/rest/v2/resource/ROUTE_TABLE/AWS
Sql Server
Operation options
This object does not support any operation options.
Delta sync
The connector README does not document sync behavior for this object.
API
- Type: REST endpoint (Qualys CloudView v2 API, JSON) · Endpoint:
GET {baseUrl}/cloudview-api/rest/v2/resource/SQL_SERVER/Azure
Sql Server Database
Operation options
This object does not support any operation options.
Delta sync
The connector README does not document sync behavior for this object.
API
- Type: REST endpoint (Qualys CloudView v2 API, JSON) · Endpoint:
GET {baseUrl}/cloudview-api/rest/v2/resource/SQL_SERVER_DATABASE/Azure
Subnet
Operation options
This object does not support any operation options.
Delta sync
The connector README does not document sync behavior for this object.
API
- Type: REST endpoint (Qualys CloudView v2 API, JSON) · Endpoint:
GET {baseUrl}/cloudview-api/rest/v2/resource/SUBNET/AWS
Subnetwork
Operation options
This object does not support any operation options.
Delta sync
The connector README does not document sync behavior for this object.
API
- Type: REST endpoint (Qualys CloudView v2 API, JSON) · Endpoint:
GET {baseUrl}/cloudview-api/rest/v2/resource/SUBNETWORK/GCP
Violation
Operation options
This object does not support any operation options.
Delta sync
The connector README does not document sync behavior for this object.
API
- Type: REST endpoint (Qualys CloudView v2 API, JSON)
Violation Definition
Operation options
This object does not support any operation options.
Delta sync
The connector README does not document sync behavior for this object.
API
- Type: REST endpoint (Qualys CloudView v2 API, JSON) · Endpoint:
GET {baseUrl}/cloudview-api/rest/v2/controls/metadata/list
Virtual Machine
Operation options
This object does not support any operation options.
Delta sync
The connector README does not document sync behavior for this object.
API
- Type: REST endpoint (Qualys CloudView v2 API, JSON) · Endpoint:
GET {baseUrl}/cloudview-api/rest/v2/resource/VIRTUAL_MACHINE/Azure
Virtual Network
Operation options
This object does not support any operation options.
Delta sync
The connector README does not document sync behavior for this object.
API
- Type: REST endpoint (Qualys CloudView v2 API, JSON) · Endpoint:
GET {baseUrl}/cloudview-api/rest/v2/resource/VIRTUAL_NETWORK/Azure
Vm Instance
Operation options
This object does not support any operation options.
Delta sync
The connector README does not document sync behavior for this object.
API
- Type: REST endpoint (Qualys CloudView v2 API, JSON) · Endpoint:
GET {baseUrl}/cloudview-api/rest/v2/resource/VM_INSTANCE/GCP
Vpc
Operation options
This object does not support any operation options.
Delta sync
The connector README does not document sync behavior for this object.
API
- Type: REST endpoint (Qualys CloudView v2 API, JSON) · Endpoint:
GET {baseUrl}/cloudview-api/rest/v2/resource/VPC/AWS
Vpc Security Group
Operation options
This object does not support any operation options.
Delta sync
The connector README does not document sync behavior for this object.
API
- Type: REST endpoint (Qualys CloudView v2 API, JSON) · Endpoint:
GET {baseUrl}/cloudview-api/rest/v2/resource/VPC_SECURITY_GROUP/AWS
Web App
Operation options
This object does not support any operation options.
Delta sync
The connector README does not document sync behavior for this object.
API
- Type: REST endpoint (Qualys CloudView v2 API, JSON) · Endpoint:
GET {baseUrl}/cloudview-api/rest/v2/resource/WEB_APP/Azure
Changelog
The Qualys Total Cloud connector has undergone the following changes:
| Version | Description | Migration Steps |
|---|---|---|
| 5.3.41 | No changes in this release. | N/A |
| 5.3.40 | No changes in this release. | N/A |
| 5.3.39 | Bug Fixes - Corrected the IAM User "User policies" attribute to be stored as a multi-valued text list (was incorrectly declared as a timestamp), matching the list of policy names returned by the API. | • IAM User: the "User policies" attribute changed type. Re-sync the Qualys_TotalCloud connector to repopulate these records. |
| 5.3.38 | Bug Fixes - Corrected the data type of several attributes so they match the values returned by the Qualys API: EBS Volume "Volume type" and EKS Node Group "Node role name" are now stored as text (were timestamps); and the IAM User access-key/password timestamps ("Access key1/2 last used", "Access key1/2 last rotated", "Password last changed") are now stored as timestamps (were text or numbers), while "Cert2 last rotated" is now stored as text (was a number). | • EBS Volume, EKS Node Group, and IAM User: the attributes listed above changed data type. Re-sync the Qualys_TotalCloud connector to repopulate these records. |
| 5.3.37 | No changes in this release. | N/A |
| 5.3.36 | Improvements Coding Standards Modernization - Bumped http-connectors-parent from 2.1.7 to 2.1.12 and connectors-model from 1.5.10 to 1.6.19 to align with the current connector framework baseline. - Replaced all new AttributeInfoBuilder(...) usages with AttributeInfos.newAttribute(...) across all model classes. This ensures custom attributes are registered with the correct consolidation priority, so they participate properly in attribute consolidation and value precedence. - Removed local addAttribute helper methods in favor of AttributeUtils.addAttribute from connectors-model, which prevents null values from silently reaching the attribute builder and adds type validation. - Migrated storage initialization from the deprecated LocalFactory / LocalConfig to StorageManager from connectors-model. - Removed the connector-local InstantDeserializer / InstantUtils in favor of OptionalInstantDeserializer from connectors-model, which supports a broader set of input formats. - Applied Spotless code formatting to the full codebase. | N/A |
| 5.3.35 | No changes in this release. | N/A |
| 5.3.34 | No changes in this release. | N/A |
| 5.3.33 | No changes in this release. | N/A |
| 5.3.32 | Improvements - Data collection now uses the Qualys TotalCloud v2 API with marker-based pagination. Pages are retrieved sequentially using the continuation marker returned by each response, which improves the reliability and completeness of cloud-resource sync against large environments. | N/A |
| 5.3.31 | No changes in this release. | N/A |
| 5.3.30 | No changes in this release. | N/A |
| 5.3.29 | No changes in this release. | N/A |
| 5.3.28 | No changes in this release. | N/A |
| 5.3.27 | No changes in this release. | N/A |
| 5.3.26 | No changes in this release. | N/A |
| 5.3.25 | No changes in this release. | N/A |
| 5.3.24 | No changes in this release. | N/A |
| 5.3.23 | No changes in this release. | N/A |
| 5.3.22 | No changes in this release. | N/A |
| 5.3.21 | No changes in this release. | N/A |
| 5.3.20 | Improvements - Improved host correlation for cloud resources. EC2 Instance now contributes its instance ID, public IP addresses, and public DNS names as additional identifiers, and SQL Server now contributes its DNS names and hostnames. This helps these cloud resources match more accurately to their corresponding host assets. | • Ec2 Instance and Sql Server: the set of identifying attributes changed. Re-sync the Qualys_TotalCloud connector so these records are re-correlated with the updated identifiers. |
| 5.3.19 | Overview The Qualys Total Cloud connector integrates with Qualys TotalCloud to synchronize cloud resource inventory (compute, storage, networking, database, identity, and Kubernetes resources across AWS, Azure, and GCP) along with cloud security posture violations and their definitions. Category: Cloud Security Models | N/A |