Wiz
Cloud Security- Overview
- Setup
- Data & mappings
- Operations & API
- Changelog
The Wiz Connector integrates with the Wiz cloud security platform to synchronize cloud inventory assets, security issues, configuration findings, and vulnerability data. It uses Wiz's GraphQL API and V2 Cloud Inventory Reports to retrieve resources across AWS, Azure, GCP, OCI, Alibaba Cloud, and VMware vSphere environments.
The connector synchronizes the following categories of data:
- Cloud Inventory Assets — Virtual Machines, Containers, Container Images, Databases, Serverless Functions, Network Segments, and 20+ additional cloud resource types
- Security Issues — Wiz Issues and Issue Definitions (available in both V1 GraphQL and V2 Report-based variants)
- Configuration Findings — Cloud configuration assessments and associated Configuration Finding Definitions (via V2 Reports API)
- Vulnerabilities — Available as a single unified model (all severities) or split by severity (Critical, High, Medium, Low, None), with associated Vulnerability Definitions
- Secret Findings — Leaked credentials/keys detected by Wiz, with deduplicated Secret Finding Definitions (one per Wiz detection rule)
Data retrieved from Wiz
| Connector Object | Required | Maps to Data Model |
|---|---|---|
| Virtual Machine | Yes | Host |
| Container | Yes | Container |
| Container Image | Yes | Container Image |
| Database Server | Yes | Database Instance |
| Serverless | Yes | Serverless |
| Virtual Machine Image | Yes | Host Image |
| Virtual Network | Yes | Network |
| Application Endpoint | Yes | Application Endpoint |
| Bucket | Yes | Bucket |
| Compute Instance Group | Yes | Compute Instance Group |
| Access Role | Yes | Access Role |
| Access Role Binding | Yes | Access Role Binding |
| API Gateway | Yes | API Gateway |
| Backup Service | Yes | Backup Service |
| CI/CD Service | Yes | CI/CD Service |
| Cloud Log Configuration | Yes | Cloud Log Configuration |
| Container Registry | Yes | Container Registry |
| Container Service | Yes | Container Service |
| DaemonSet | Yes | DaemonSet |
| Data Workload | Yes | Data Workload |
| Deployment | Yes | Deployment |
| Encryption Key | Yes | Encryption Key |
| File System Service | Yes | File System Service |
| Firewall | Yes | Firewall |
| Gateway | Yes | Gateway |
| Kubernetes Cluster | Yes | Kubernetes Cluster |
| Load Balancer | Yes | Load Balancer |
| Messaging Service | Yes | Messaging Service |
| Pod | Yes | Pod |
| Raw Access Policy | Yes | Raw Access Policy |
| Repository Branch | Yes | Code Repository |
| Resource Group | Yes | Resource Group |
| Route Table | Yes | Route Table |
| Secret Container | Yes | Secret Container |
| Snapshot | Yes | Snapshot |
| Storage Account | Yes | Storage Account |
| Subnet | Yes | Subnet |
| Subscription | Yes | Subscription |
| Volume | Yes | Volume |
| Web Service | Yes | Web Service |
| Issue (V1) | Yes | Violation |
| Issue Definition (V1) | Yes | Violation Definition |
| Issue V2 | Yes | Violation |
| Issue Definition V2 | Yes | Violation Definition |
| Configuration Finding | Yes | Violation |
| Configuration Finding Definition | Yes | Violation Definition |
| Vulnerability | Yes | Vulnerability |
| Vulnerability (by Severity) | Yes | Vulnerability |
| Vulnerability Definition | Yes | Vulnerability Definition |
| Secret Finding | Yes | (unassigned) |
| Secret Finding Definition | Yes | (unassigned) |
Model relationships
note
For detailed steps on how to view the data retrieved from Wiz in the Brinqa Platform, see How to view your data.
warning
Not Supported by Wiz V2 Inventory Report
The Access Role Binding (ACCESS_ROLE_BINDING) and Application Endpoint
(ENDPOINT) models are no longer returned by the CLOUD_RESOURCE_V2 report that
this connector uses (BaseInventoryModel). As part of Wiz's Cloud Resource
Inventory V2 migration, the "Native Types" were consolidated to include only
cloud-native resources, and both ACCESS_ROLE_BINDING and ENDPOINT are on the
list of types excluded from V2 reports. See Wiz's
V1 vs V2 resource-count discrepancies.
As a result, these two models return no data on connector versions that use the V2 report (3.x since v3.4.0, 2.x since v2.1.22). They are retained for backward compatibility only; existing data will not be refreshed.
Connection settings
When setting up a data integration, select Wiz from the Connector dropdown and provide the following:
| Setting | Required | Default | Description |
|---|---|---|---|
| API URL | Yes | https://api.<dataCenter>.app.wiz.io | Wiz API URL |
| Token URL | Yes | https://auth.app.wiz.io/oauth/token | Wiz API authentication token URL. Enter 'https://auth.wiz.io/oauth/token' when using legacy Auth0 as the IdP. |
| OAuth audience | Yes | wiz-api | Defaults to 'wiz-api' when using Amazon Cognito as the IdP, otherwise use 'beyond-api'. |
| Client ID | Yes | — | Wiz service account client id |
| Client secret | Yes | — | Wiz service account client secret |
| Page size | No | 100 | Maximum number of records to get per API request |
| Maximum retries | No | 5 | The maximum number of retry attempts before giving up a request |
| Request timeout (secs) | No | 600 | The maximum seconds allotted before a request will time out. Enter zero (0) to disable timeouts (not recommended). |
| Report timeout (hours) | No | 4 | The maximum number of hours to wait for a report to be generated before giving up |
Authentication
The connector authenticates using OAuth 2.0 Client Credentials flow.
Endpoint
| Method | URL |
|---|---|
POST | https://auth.app.wiz.io/oauth/token (default) |
Request Headers
| Header | Value |
|---|---|
Content-Type | application/x-www-form-urlencoded |
Request Body
grant_type=client_credentials&client_id=<clientId>&client_secret=<clientSecret>&audience=<audience>
| Parameter | Description |
|---|---|
grant_type | Always client_credentials |
client_id | Wiz Service Account Client ID |
client_secret | Wiz Service Account Client Secret |
audience | API audience — wiz-api (default) or beyond-api for OAuth |
Sample Response
{
"access_token": "eyJhbGciOiJSUzI1...",
"token_type": "Bearer",
"expires_in": 86400
}
Usage
Once authenticated, all subsequent GraphQL API requests include the bearer token:
Authorization: Bearer <access_token>
Sync Behavior
The connector performs a mix of full and incremental (delta) syncs depending on the data category:
- Cloud Inventory Assets are synced in full on every run. Each sync creates or reuses a Wiz V2 Cloud Inventory Report and downloads the complete CSV dataset — there is no server-side date filtering on inventory. Assets that stop appearing in the report are aged out through an inactivity lifecycle keyed on their
LAST_SEENtimestamp. - Security Issues, Configuration Findings, Vulnerabilities, and Secret Findings support incremental (delta) syncs. When a sync token (
since) from a prior run is available, the connector requests only records changed after that timestamp using the Reports APIDateFilter/ GraphQL time-range filters (the specific field varies by model — e.g.statusChangedAt,updatedAt, orlastUpdatedAt). On the first run, or whenever no sync token is present, a full (beginning-of-time) sync is performed.
Per-model incremental details, where applicable, are documented under each model's Sync Duration Parameter section below.
How to obtain Wiz credentials
Obtain the client ID and client secret from Wiz
For the Wiz connector to use the Wiz API, you must provide the client ID and client secret from an active Wiz service account.
To obtain these credentials, please follow the steps in the official Wiz documentation for Brinqa integration. This guide is maintained by Wiz and outlines the process for creating the required service account and assigning appropriate permissions.
Note: If you do not have the permissions to create a service account or assign permissions, contact your Wiz administrator.
The Wiz connector was developed in collaboration with Wiz and adheres to their recommended solutions. It has been certified by Wiz to ensure optimal functionality and security.
- Due to limitations with GraphQL in exporting large datasets, the connector generates reports in CSV format.
- The Wiz connector generates one report per asset type for Vulnerabilities, with each report prefixed by
BRINQA-VULNERABILITIES-REPORT_. - It also generates one report per inventory type for Inventory, with each report prefixed by
BRINQA-INVENTORY-REPORT_. This lets you easily identify and monitor said reports. - These reports are automatically deleted from Wiz based on your specified data cleanup frequency.
note
Note: Some environments use https://auth.wiz.io/oauth/token for OAuth-based authentication.
Attribute mappings
Expand the sections below to view the mappings between the source and the Brinqa data model attributes:
Virtual Machine
| Source Field Name | SDM Attribute |
|---|---|
(generated) | CATEGORIES |
cloudAccount.cloudProvider | CLOUD_PROVIDER |
cloudAccount.externalId | SUBSCRIPTION_ID |
cloudAccount.name | SUBSCRIPTION_NAME |
cloudPlatform | CLOUD_PLATFORM |
cloudProviderURL | CLOUD_PROVIDER_URL |
createdAt / graphEntity.properties.creationDate | SOURCE_CREATED_DATE |
externalId | EXTERNAL_ID |
graphEntity.properties.accessibleFrom.otherSubscriptions | ACCESSIBLE_FROM_OTHER_SUBSCRIPTIONS |
graphEntity.properties.accessibleFrom.otherVnets | ACCESSIBLE_FROM_OTHER_VNETS |
graphEntity.properties.accessibleFrom.VPN | ACCESSIBLE_FROM_VPN |
graphEntity.properties.applicationEndpoint.validatedOpenPorts | VALIDATED_OPEN_PORTS |
graphEntity.properties.creationDate | FIRST_SEEN |
graphEntity.properties.image.common.providerUniqueId | IMAGE |
graphEntity.properties.isContainerHost | IS_CONTAINER_HOST |
graphEntity.properties.isEphemeral | IS_EPHEMERAL |
graphEntity.properties.name / native properties | DESCRIPTION |
graphEntity.properties.operatingSystem / typeFields.operatingSystem | OPERATING_SYSTEM |
graphEntity.providerUniqueId | PROVIDER_ID |
graphEntity.providerUniqueId (Azure, preferred) / graphEntity.properties.externalId (fallback) | INSTANCE_ID |
graphEntity.providerUniqueId / externalId | UID |
hasAccessToSensitiveData | HAS_ACCESS_TO_SENSITIVE_DATA |
hasAdminPrivileges | HAS_ADMIN_PRIVILEGES |
hasHighPrivileges | HAS_HIGH_PRIVILEGES |
hasSensitiveData | HAS_SENSITIVE_DATA |
isAccessibleFromInternet | IS_ACCESSIBLE_FROM_INTERNET |
isOpenToAllInternet | OPEN_TO_ALL_INTERNET |
lastSeen | LAST_SEEN |
name / graphEntity.properties.name | NAME |
nativeType | NATIVE_TYPE |
projects[].id | PROJECT_IDS |
projects[].name | PROJECT_NAMES |
projects[].name | PROJECTS |
providerData (cloud-specific) | MACHINE_TYPE |
providerData (combined) | DNS_NAMES |
providerData.Architecture | ARCHITECTURE |
providerData.lastStopTimestamp | LAST_STOPPED |
providerData.LaunchTime | LAST_STARTED |
providerData.Monitoring.State | MONITORING |
providerData.NetworkInterfaces[].MacAddress | MAC_ADDRESSES |
providerData.PrivateDnsName | PRIVATE_DNS_NAMES |
providerData.PublicDnsName | PUBLIC_DNS_NAMES |
providerData.PublicDnsName / providerData.properties.computerName / name (fallback) | HOSTNAMES |
providerData.StateReason | STATE_REASON |
providerData.SubnetId / providerData.networkInterfaces[].subnetwork | SUBNET_ID |
providerData.VpcId / providerData.networkInterfaces[].network | NETWORK_ID |
region / graphEntity.properties.region | REGION |
regionLocation | REGION_LOCATION |
resourceGroup.externalId | RESOURCE_GROUP_EXTERNAL_ID |
resourceGroup.id | RESOURCE_GROUP_ID |
status / graphEntity.properties.status | STATUS |
status / graphEntity.properties.status | PROVIDER_STATUS |
status / graphEntity.properties.status | SOURCE_STATUS |
| sync time | LAST_CAPTURED |
tags / graphEntity.properties.tags | TAGS |
technology.name | TECHNOLOGY_NAME |
technology.stackLayer | TECHNOLOGY_STACK_LAYER |
type | RESOURCE_TYPE |
typeFields.instanceType | INSTANCE_TYPE |
typeFields.ipAddresses | IP_ADDRESSES |
typeFields.ipAddresses (filtered) | PRIVATE_IP_ADDRESSES |
typeFields.ipAddresses (filtered) | PUBLIC_IP_ADDRESSES |
updatedAt | SOURCE_LAST_MODIFIED |
Container
| Source Field Name | SDM Attribute |
|---|---|
(generated) | CATEGORIES |
cloudAccount.cloudProvider | CLOUD_PROVIDER |
cloudAccount.externalId | SUBSCRIPTION_ID |
cloudAccount.name | SUBSCRIPTION_NAME |
cloudPlatform | CLOUD_PLATFORM |
cloudProviderURL | CLOUD_PROVIDER_URL |
createdAt / graphEntity.properties.creationDate | SOURCE_CREATED_DATE |
externalId | EXTERNAL_ID |
externalId (parsed) | POD_NAME |
externalId (parsed) | POD_EXTERNAL_ID |
firstSeen | FIRST_SEEN |
graphEntity.properties.accessibleFrom.otherSubscriptions | ACCESSIBLE_FROM_OTHER_SUBSCRIPTIONS |
graphEntity.properties.accessibleFrom.otherVnets | ACCESSIBLE_FROM_OTHER_VNETS |
graphEntity.properties.accessibleFrom.VPN | ACCESSIBLE_FROM_VPN |
graphEntity.properties.applicationEndpoint.validatedOpenPorts | VALIDATED_OPEN_PORTS |
graphEntity.properties.imageExternalId | IMAGE |
graphEntity.properties.kubernetes.baseExtraData.clusterExternalId | CLUSTER_EXTERNAL_ID |
graphEntity.properties.kubernetes.baseExtraData.clusterName | CLUSTER_NAME |
graphEntity.properties.kubernetes.baseExtraData.flavour | KUBERNETES_FLAVOUR |
graphEntity.properties.kubernetes.namespaceExternalId | KUBERNETES_NAMESPACE_EXTERNAL_ID |
graphEntity.properties.name / native properties | DESCRIPTION |
graphEntity.properties.Runtime | RUNTIME |
graphEntity.properties.virtualMachineExternalId | HOST |
graphEntity.providerUniqueId | PROVIDER_ID |
graphEntity.providerUniqueId / externalId | UID |
hasAccessToSensitiveData | HAS_ACCESS_TO_SENSITIVE_DATA |
hasAdminPrivileges | HAS_ADMIN_PRIVILEGES |
hasHighPrivileges | HAS_HIGH_PRIVILEGES |
hasSensitiveData | HAS_SENSITIVE_DATA |
isAccessibleFromInternet | IS_ACCESSIBLE_FROM_INTERNET |
isOpenToAllInternet | OPEN_TO_ALL_INTERNET |
lastSeen | LAST_SEEN |
name / graphEntity.properties.name | NAME |
nativeType | NATIVE_TYPE |
projects[].id | PROJECT_IDS |
projects[].name | PROJECT_NAMES |
projects[].name | PROJECTS |
region / graphEntity.properties.region | REGION |
regionLocation | REGION_LOCATION |
resourceGroup.externalId | RESOURCE_GROUP_EXTERNAL_ID |
resourceGroup.id | RESOURCE_GROUP_ID |
status / graphEntity.properties.status | STATUS |
status / graphEntity.properties.status | PROVIDER_STATUS |
status / graphEntity.properties.status | SOURCE_STATUS |
| sync time | LAST_CAPTURED |
tags / graphEntity.properties.tags | TAGS |
technology.name | TECHNOLOGY_NAME |
technology.stackLayer | TECHNOLOGY_STACK_LAYER |
type | RESOURCE_TYPE |
typeFields.instanceType | INSTANCE_TYPE |
updatedAt | SOURCE_LAST_MODIFIED |
Container Image
| Source Field Name | SDM Attribute |
|---|---|
(generated) | CATEGORIES |
cloudAccount.cloudProvider | CLOUD_PROVIDER |
cloudAccount.externalId | SUBSCRIPTION_ID |
cloudAccount.name | SUBSCRIPTION_NAME |
cloudPlatform | CLOUD_PLATFORM |
cloudProviderURL | CLOUD_PROVIDER_URL |
createdAt / graphEntity.properties.creationDate | SOURCE_CREATED_DATE |
externalId | EXTERNAL_ID |
firstSeen | FIRST_SEEN |
graphEntity.properties.accessibleFrom.otherSubscriptions | ACCESSIBLE_FROM_OTHER_SUBSCRIPTIONS |
graphEntity.properties.accessibleFrom.otherVnets | ACCESSIBLE_FROM_OTHER_VNETS |
graphEntity.properties.accessibleFrom.VPN | ACCESSIBLE_FROM_VPN |
graphEntity.properties.applicationEndpoint.validatedOpenPorts | VALIDATED_OPEN_PORTS |
graphEntity.properties.imageTag / graphEntity.properties.registry | IMAGE |
graphEntity.properties.kubernetes.baseExtraData.clusterExternalId | CLUSTER_EXTERNAL_ID |
graphEntity.properties.kubernetes.baseExtraData.clusterName | CLUSTER_NAME |
graphEntity.properties.name / native properties | DESCRIPTION |
graphEntity.properties.repoExternalId | REPO_EXTERNAL_ID |
graphEntity.providerUniqueId | PROVIDER_ID |
graphEntity.providerUniqueId / externalId | UID |
hasAccessToSensitiveData | HAS_ACCESS_TO_SENSITIVE_DATA |
hasAdminPrivileges | HAS_ADMIN_PRIVILEGES |
hasHighPrivileges | HAS_HIGH_PRIVILEGES |
hasSensitiveData | HAS_SENSITIVE_DATA |
isAccessibleFromInternet | IS_ACCESSIBLE_FROM_INTERNET |
isOpenToAllInternet | OPEN_TO_ALL_INTERNET |
lastSeen | LAST_SEEN |
name / graphEntity.properties.name | NAME |
nativeType | NATIVE_TYPE |
projects[].id | PROJECT_IDS |
projects[].name | PROJECT_NAMES |
projects[].name | PROJECTS |
region / graphEntity.properties.region | REGION |
regionLocation | REGION_LOCATION |
resourceGroup.externalId | RESOURCE_GROUP_EXTERNAL_ID |
resourceGroup.id | RESOURCE_GROUP_ID |
status / graphEntity.properties.status | STATUS |
status / graphEntity.properties.status | PROVIDER_STATUS |
status / graphEntity.properties.status | SOURCE_STATUS |
| sync time | LAST_CAPTURED |
tags / graphEntity.properties.tags | TAGS |
technology.name | TECHNOLOGY_NAME |
technology.stackLayer | TECHNOLOGY_STACK_LAYER |
type | RESOURCE_TYPE |
typeFields.instanceType | INSTANCE_TYPE |
updatedAt | SOURCE_LAST_MODIFIED |
Database Server
| Source Field Name | SDM Attribute |
|---|---|
(generated) | CATEGORIES |
cloudAccount.cloudProvider | CLOUD_PROVIDER |
cloudAccount.externalId | SUBSCRIPTION_ID |
cloudAccount.name | SUBSCRIPTION_NAME |
cloudPlatform | CLOUD_PLATFORM |
cloudProviderURL | CLOUD_PROVIDER_URL |
createdAt / graphEntity.properties.creationDate | SOURCE_CREATED_DATE |
externalId | EXTERNAL_ID |
firstSeen | FIRST_SEEN |
graphEntity.properties.accessibleFrom.otherSubscriptions | ACCESSIBLE_FROM_OTHER_SUBSCRIPTIONS |
graphEntity.properties.accessibleFrom.otherVnets | ACCESSIBLE_FROM_OTHER_VNETS |
graphEntity.properties.accessibleFrom.VPN | ACCESSIBLE_FROM_VPN |
graphEntity.properties.applicationEndpoint.validatedOpenPorts | VALIDATED_OPEN_PORTS |
graphEntity.properties.atRestEncryption | ENCRYPTED |
graphEntity.properties.engine / providerData.Engine | ENGINE |
graphEntity.properties.engineVersion / providerData.EngineVersion | ENGINE_VERSION |
graphEntity.properties.hasBackups | HAS_BACKUPS |
graphEntity.properties.isManaged | MANAGED |
graphEntity.properties.kind | KIND |
graphEntity.properties.name / native properties | DESCRIPTION |
graphEntity.properties.port / providerData.Endpoint.Port | PORT |
graphEntity.properties.requiresAuth | REQUIRES_AUTH |
graphEntity.properties.requiresSSL | REQUIRES_SSL |
graphEntity.properties.runsOn.vertexObjectExternalId | RUNS_ON |
graphEntity.providerUniqueId | PROVIDER_ID |
graphEntity.providerUniqueId / externalId | UID |
hasAccessToSensitiveData | HAS_ACCESS_TO_SENSITIVE_DATA |
hasAdminPrivileges | HAS_ADMIN_PRIVILEGES |
hasHighPrivileges | HAS_HIGH_PRIVILEGES |
hasSensitiveData | HAS_SENSITIVE_DATA |
isAccessibleFromInternet | IS_ACCESSIBLE_FROM_INTERNET |
isOpenToAllInternet | OPEN_TO_ALL_INTERNET |
lastSeen | LAST_SEEN |
name / graphEntity.properties.name | NAME |
nativeType | NATIVE_TYPE |
projects[].id | PROJECT_IDS |
projects[].name | PROJECT_NAMES |
projects[].name | PROJECTS |
providerData.DBInstanceIdentifier | INSTANCE_ID |
providerData.Endpoint.Address | IP_ADDRESSES |
region / graphEntity.properties.region | REGION |
regionLocation | REGION_LOCATION |
resourceGroup.externalId | RESOURCE_GROUP_EXTERNAL_ID |
resourceGroup.id | RESOURCE_GROUP_ID |
status / graphEntity.properties.status | STATUS |
status / graphEntity.properties.status | PROVIDER_STATUS |
status / graphEntity.properties.status | SOURCE_STATUS |
| sync time | LAST_CAPTURED |
tags / graphEntity.properties.tags | TAGS |
technology.name | TECHNOLOGY_NAME |
technology.stackLayer | TECHNOLOGY_STACK_LAYER |
type | RESOURCE_TYPE |
typeFields.instanceType | INSTANCE_TYPE |
updatedAt | SOURCE_LAST_MODIFIED |
Serverless
| Source Field Name | SDM Attribute |
|---|---|
(generated) | CATEGORIES |
cloudAccount.cloudProvider | CLOUD_PROVIDER |
cloudAccount.externalId | SUBSCRIPTION_ID |
cloudAccount.name | SUBSCRIPTION_NAME |
cloudPlatform | CLOUD_PLATFORM |
cloudProviderURL | CLOUD_PROVIDER_URL |
createdAt / graphEntity.properties.creationDate | SOURCE_CREATED_DATE |
externalId | EXTERNAL_ID |
firstSeen | FIRST_SEEN |
graphEntity.properties.accessibleFrom.otherSubscriptions | ACCESSIBLE_FROM_OTHER_SUBSCRIPTIONS |
graphEntity.properties.accessibleFrom.otherVnets | ACCESSIBLE_FROM_OTHER_VNETS |
graphEntity.properties.accessibleFrom.VPN | ACCESSIBLE_FROM_VPN |
graphEntity.properties.applicationEndpoint.validatedOpenPorts | VALIDATED_OPEN_PORTS |
graphEntity.properties.name / native properties | DESCRIPTION |
graphEntity.providerUniqueId | PROVIDER_ID |
graphEntity.providerUniqueId / externalId | UID |
hasAccessToSensitiveData | HAS_ACCESS_TO_SENSITIVE_DATA |
hasAdminPrivileges | HAS_ADMIN_PRIVILEGES |
hasHighPrivileges | HAS_HIGH_PRIVILEGES |
hasSensitiveData | HAS_SENSITIVE_DATA |
isAccessibleFromInternet | IS_ACCESSIBLE_FROM_INTERNET |
isOpenToAllInternet | OPEN_TO_ALL_INTERNET |
lastSeen | LAST_SEEN |
name / graphEntity.properties.name | NAME |
nativeType | NATIVE_TYPE |
projects[].id | PROJECT_IDS |
projects[].name | PROJECT_NAMES |
projects[].name | PROJECTS |
providerData.CodeSha256 | CODE_SHA_256 |
providerData.CodeSize | CODE_SIZE |
providerData.Environment | ENVIRONMENT |
providerData.EphemeralStorage.Size | STORAGE_SIZE |
providerData.Handler | HANDLER |
providerData.kind | KIND |
providerData.MemorySize | MEMORY_SIZE |
providerData.PackageType | PACKAGE_TYPE |
providerData.requiresAuth | REQUIRES_AUTH |
providerData.RevisionId | REVISION_ID |
providerData.Role | ROLE |
providerData.Runtime | RUNTIME |
providerData.Timeout | TIMEOUT |
region / graphEntity.properties.region | REGION |
regionLocation | REGION_LOCATION |
resourceGroup.externalId | RESOURCE_GROUP_EXTERNAL_ID |
resourceGroup.id | RESOURCE_GROUP_ID |
status / graphEntity.properties.status | STATUS |
status / graphEntity.properties.status | PROVIDER_STATUS |
status / graphEntity.properties.status | SOURCE_STATUS |
| sync time | LAST_CAPTURED |
tags / graphEntity.properties.tags | TAGS |
technology.name | TECHNOLOGY_NAME |
technology.stackLayer | TECHNOLOGY_STACK_LAYER |
type | RESOURCE_TYPE |
typeFields.instanceType | INSTANCE_TYPE |
updatedAt | SOURCE_LAST_MODIFIED |
Virtual Machine Image
| Source Field Name | SDM Attribute |
|---|---|
(generated) | CATEGORIES |
cloudAccount.cloudProvider | CLOUD_PROVIDER |
cloudAccount.externalId | SUBSCRIPTION_ID |
cloudAccount.name | SUBSCRIPTION_NAME |
cloudPlatform | CLOUD_PLATFORM |
cloudProviderURL | CLOUD_PROVIDER_URL |
createdAt / graphEntity.properties.creationDate | SOURCE_CREATED_DATE |
externalId | EXTERNAL_ID |
firstSeen | FIRST_SEEN |
graphEntity.properties.accessibleFrom.otherSubscriptions | ACCESSIBLE_FROM_OTHER_SUBSCRIPTIONS |
graphEntity.properties.accessibleFrom.otherVnets | ACCESSIBLE_FROM_OTHER_VNETS |
graphEntity.properties.accessibleFrom.VPN | ACCESSIBLE_FROM_VPN |
graphEntity.properties.applicationEndpoint.validatedOpenPorts | VALIDATED_OPEN_PORTS |
graphEntity.properties.name / native properties | DESCRIPTION |
graphEntity.properties.operatingSystem | OPERATING_SYSTEM |
graphEntity.providerUniqueId | PROVIDER_ID |
graphEntity.providerUniqueId / externalId | UID |
hasAccessToSensitiveData | HAS_ACCESS_TO_SENSITIVE_DATA |
hasAdminPrivileges | HAS_ADMIN_PRIVILEGES |
hasHighPrivileges | HAS_HIGH_PRIVILEGES |
hasSensitiveData | HAS_SENSITIVE_DATA |
isAccessibleFromInternet | IS_ACCESSIBLE_FROM_INTERNET |
isOpenToAllInternet | OPEN_TO_ALL_INTERNET |
lastSeen | LAST_SEEN |
name / graphEntity.properties.name | NAME |
nativeType | NATIVE_TYPE |
projects[].id | PROJECT_IDS |
projects[].name | PROJECT_NAMES |
projects[].name | PROJECTS |
providerData.family | FAMILY |
providerData.ImageLocation | IMAGE_LOCATION |
providerData.ImageOwnerAlias | IMAGE_OWNER |
providerData.isPublic | IS_PUBLIC |
providerData.PlatformDetails | IMAGE_OS |
region / graphEntity.properties.region | REGION |
regionLocation | REGION_LOCATION |
resourceGroup.externalId | RESOURCE_GROUP_EXTERNAL_ID |
resourceGroup.id | RESOURCE_GROUP_ID |
status / graphEntity.properties.status | STATUS |
status / graphEntity.properties.status | PROVIDER_STATUS |
status / graphEntity.properties.status | SOURCE_STATUS |
| sync time | LAST_CAPTURED |
tags / graphEntity.properties.tags | TAGS |
technology.name | TECHNOLOGY_NAME |
technology.stackLayer | TECHNOLOGY_STACK_LAYER |
type | RESOURCE_TYPE |
typeFields.instanceType | INSTANCE_TYPE |
updatedAt | SOURCE_LAST_MODIFIED |
Virtual Network
| Source Field Name | SDM Attribute |
|---|---|
(generated) | CATEGORIES |
cloudAccount.cloudProvider | CLOUD_PROVIDER |
cloudAccount.externalId | SUBSCRIPTION_ID |
cloudAccount.name | SUBSCRIPTION_NAME |
cloudPlatform | CLOUD_PLATFORM |
cloudProviderURL | CLOUD_PROVIDER_URL |
createdAt / graphEntity.properties.creationDate | SOURCE_CREATED_DATE |
externalId | EXTERNAL_ID |
firstSeen | FIRST_SEEN |
graphEntity.properties.accessibleFrom.otherSubscriptions | ACCESSIBLE_FROM_OTHER_SUBSCRIPTIONS |
graphEntity.properties.accessibleFrom.otherVnets | ACCESSIBLE_FROM_OTHER_VNETS |
graphEntity.properties.accessibleFrom.VPN | ACCESSIBLE_FROM_VPN |
graphEntity.properties.applicationEndpoint.validatedOpenPorts | VALIDATED_OPEN_PORTS |
graphEntity.properties.name / native properties | DESCRIPTION |
graphEntity.providerUniqueId | PROVIDER_ID |
graphEntity.providerUniqueId / externalId | UID |
hasAccessToSensitiveData | HAS_ACCESS_TO_SENSITIVE_DATA |
hasAdminPrivileges | HAS_ADMIN_PRIVILEGES |
hasHighPrivileges | HAS_HIGH_PRIVILEGES |
hasSensitiveData | HAS_SENSITIVE_DATA |
isAccessibleFromInternet | IS_ACCESSIBLE_FROM_INTERNET |
isOpenToAllInternet | OPEN_TO_ALL_INTERNET |
lastSeen | LAST_SEEN |
name / graphEntity.properties.name | NAME |
nativeType | NATIVE_TYPE |
projects[].id | PROJECT_IDS |
projects[].name | PROJECT_NAMES |
projects[].name | PROJECTS |
providerData.addressRangeEdges | ADDRESS_RANGE_EDGES |
providerData.addressRanges / providerData.CidrBlock | IPV4_RANGES |
providerData.flowLogsEnabled | FLOW_LOGS_ENABLED |
providerData.hasDeployedInstances | HAS_DEPLOYED_INSTANCES |
providerData.isDefault / providerData.IsDefault | IS_DEFAULT |
providerData.properties.enableDdosProtection | DDOS_PROTECTION_ENABLED |
region / graphEntity.properties.region | REGION |
regionLocation | REGION_LOCATION |
resourceGroup.externalId | RESOURCE_GROUP_EXTERNAL_ID |
resourceGroup.id | RESOURCE_GROUP_ID |
status / graphEntity.properties.status | STATUS |
status / graphEntity.properties.status | PROVIDER_STATUS |
status / graphEntity.properties.status | SOURCE_STATUS |
| sync time | LAST_CAPTURED |
tags / graphEntity.properties.tags | TAGS |
technology.name | TECHNOLOGY_NAME |
technology.stackLayer | TECHNOLOGY_STACK_LAYER |
type | RESOURCE_TYPE |
typeFields.instanceType | INSTANCE_TYPE |
updatedAt | SOURCE_LAST_MODIFIED |
Application Endpoint
| Source Field Name | SDM Attribute |
|---|---|
(generated) | CATEGORIES |
cloudAccount.cloudProvider | CLOUD_PROVIDER |
cloudAccount.externalId | SUBSCRIPTION_ID |
cloudAccount.name | SUBSCRIPTION_NAME |
cloudPlatform | CLOUD_PLATFORM |
cloudProviderURL | CLOUD_PROVIDER_URL |
createdAt / graphEntity.properties.creationDate | SOURCE_CREATED_DATE |
externalId | EXTERNAL_ID |
firstSeen | FIRST_SEEN |
graphEntity.properties.accessibleFrom.otherSubscriptions | ACCESSIBLE_FROM_OTHER_SUBSCRIPTIONS |
graphEntity.properties.accessibleFrom.otherVnets | ACCESSIBLE_FROM_OTHER_VNETS |
graphEntity.properties.accessibleFrom.VPN | ACCESSIBLE_FROM_VPN |
graphEntity.properties.applicationEndpoint.additionalIds | ADDITIONAL_IDS |
graphEntity.properties.applicationEndpoint.validatedOpenPorts | VALIDATED_OPEN_PORTS |
graphEntity.properties.exposedProxies[].externalId | EXPOSED_PROXIES_EXTERNAL_IDS |
graphEntity.properties.exposedProxies[].nativeType | EXPOSED_PROXIES_NATIVE_TYPES |
graphEntity.properties.exposedProxies[].objectType | EXPOSED_PROXIES_OBJECT_TYPES |
graphEntity.properties.exposedResources[].externalId | EXPOSED_RESOURCES_EXTERNAL_IDS |
graphEntity.properties.exposedResources[].nativeType | EXPOSED_RESOURCES_NATIVE_TYPES |
graphEntity.properties.exposedResources[].objectType | EXPOSED_RESOURCES_OBJECT_TYPES |
graphEntity.properties.name / native properties | DESCRIPTION |
graphEntity.properties.tlsInfo.base64Certificate | BASE_64_CERTIFICATE |
graphEntity.properties.tlsInfo.cipherSuite | CERTIFICATE_CIPHER_SUITE |
graphEntity.properties.tlsInfo.handshakeComplete | HANDSHAKE_COMPLETE |
graphEntity.properties.tlsInfo.negotiatedProtocol | NEGOTIATED_PROTOCOL |
graphEntity.properties.tlsInfo.serverName | SERVER_NAME |
graphEntity.properties.tlsInfo.tlsVersion | TLS_VERSION |
graphEntity.providerUniqueId | PROVIDER_ID |
graphEntity.providerUniqueId / externalId | UID |
hasAccessToSensitiveData | HAS_ACCESS_TO_SENSITIVE_DATA |
hasAdminPrivileges | HAS_ADMIN_PRIVILEGES |
hasHighPrivileges | HAS_HIGH_PRIVILEGES |
hasSensitiveData | HAS_SENSITIVE_DATA |
isAccessibleFromInternet | IS_ACCESSIBLE_FROM_INTERNET |
isOpenToAllInternet | OPEN_TO_ALL_INTERNET |
lastSeen | LAST_SEEN |
name / graphEntity.properties.name | NAME |
nativeType | NATIVE_TYPE |
projects[].id | PROJECT_IDS |
projects[].name | PROJECT_NAMES |
projects[].name | PROJECTS |
region / graphEntity.properties.region | REGION |
regionLocation | REGION_LOCATION |
resourceGroup.externalId | RESOURCE_GROUP_EXTERNAL_ID |
resourceGroup.id | RESOURCE_GROUP_ID |
status / graphEntity.properties.status | STATUS |
status / graphEntity.properties.status | PROVIDER_STATUS |
status / graphEntity.properties.status | SOURCE_STATUS |
| sync time | LAST_CAPTURED |
tags / graphEntity.properties.tags | TAGS |
technology.name | TECHNOLOGY_NAME |
technology.stackLayer | TECHNOLOGY_STACK_LAYER |
type | RESOURCE_TYPE |
typeFields.instanceType | INSTANCE_TYPE |
updatedAt | SOURCE_LAST_MODIFIED |
Bucket
| Source Field Name | SDM Attribute |
|---|---|
(generated) | CATEGORIES |
cloudAccount.cloudProvider | CLOUD_PROVIDER |
cloudAccount.externalId | SUBSCRIPTION_ID |
cloudAccount.name | SUBSCRIPTION_NAME |
cloudPlatform | CLOUD_PLATFORM |
cloudProviderURL | CLOUD_PROVIDER_URL |
createdAt / graphEntity.properties.creationDate | SOURCE_CREATED_DATE |
externalId | EXTERNAL_ID |
firstSeen | FIRST_SEEN |
graphEntity.properties.accessibleFrom.otherSubscriptions | ACCESSIBLE_FROM_OTHER_SUBSCRIPTIONS |
graphEntity.properties.accessibleFrom.otherVnets | ACCESSIBLE_FROM_OTHER_VNETS |
graphEntity.properties.accessibleFrom.VPN | ACCESSIBLE_FROM_VPN |
graphEntity.properties.applicationEndpoint.validatedOpenPorts | VALIDATED_OPEN_PORTS |
graphEntity.properties.name / native properties | DESCRIPTION |
graphEntity.providerUniqueId | PROVIDER_ID |
graphEntity.providerUniqueId / externalId | UID |
hasAccessToSensitiveData | HAS_ACCESS_TO_SENSITIVE_DATA |
hasAdminPrivileges | HAS_ADMIN_PRIVILEGES |
hasHighPrivileges | HAS_HIGH_PRIVILEGES |
hasSensitiveData | HAS_SENSITIVE_DATA |
isAccessibleFromInternet | IS_ACCESSIBLE_FROM_INTERNET |
isOpenToAllInternet | OPEN_TO_ALL_INTERNET |
lastSeen | LAST_SEEN |
name / graphEntity.properties.name | NAME |
nativeType | NATIVE_TYPE |
projects[].id | PROJECT_IDS |
projects[].name | PROJECT_NAMES |
projects[].name | PROJECTS |
providerData.encrypted | ENCRYPTED |
providerData.encryptionInTransit | ENCRYPTION_IN_TRANSIT |
providerData.isPublic | IS_PUBLIC |
providerData.loggingEnabled | LOGGING_ENABLED |
providerData.publicExposure | PUBLIC_EXPOSURE |
providerData.regionType | REGION_TYPE |
providerData.retentionPeriod | RETENTION_PERIOD |
providerData.versioningEnabled | VERSIONING_ENABLED |
providerData.webHostingEnabled | WEB_HOSTING_ENABLED |
region / graphEntity.properties.region | REGION |
regionLocation | REGION_LOCATION |
resourceGroup.externalId | RESOURCE_GROUP_EXTERNAL_ID |
resourceGroup.id | RESOURCE_GROUP_ID |
status / graphEntity.properties.status | STATUS |
status / graphEntity.properties.status | PROVIDER_STATUS |
status / graphEntity.properties.status | SOURCE_STATUS |
| sync time | LAST_CAPTURED |
tags / graphEntity.properties.tags | TAGS |
technology.name | TECHNOLOGY_NAME |
technology.stackLayer | TECHNOLOGY_STACK_LAYER |
type | RESOURCE_TYPE |
typeFields.instanceType | INSTANCE_TYPE |
updatedAt | SOURCE_LAST_MODIFIED |
Compute Instance Group
| Source Field Name | SDM Attribute |
|---|---|
(generated) | CATEGORIES |
cloudAccount.cloudProvider | CLOUD_PROVIDER |
cloudAccount.externalId | SUBSCRIPTION_ID |
cloudAccount.name | SUBSCRIPTION_NAME |
cloudPlatform | CLOUD_PLATFORM |
cloudProviderURL | CLOUD_PROVIDER_URL |
createdAt / graphEntity.properties.creationDate | SOURCE_CREATED_DATE |
externalId | EXTERNAL_ID |
firstSeen | FIRST_SEEN |
graphEntity.properties.accessibleFrom.otherSubscriptions | ACCESSIBLE_FROM_OTHER_SUBSCRIPTIONS |
graphEntity.properties.accessibleFrom.otherVnets | ACCESSIBLE_FROM_OTHER_VNETS |
graphEntity.properties.accessibleFrom.VPN | ACCESSIBLE_FROM_VPN |
graphEntity.properties.applicationEndpoint.validatedOpenPorts | VALIDATED_OPEN_PORTS |
graphEntity.properties.name / native properties | DESCRIPTION |
graphEntity.providerUniqueId | PROVIDER_ID |
graphEntity.providerUniqueId / externalId | UID |
hasAccessToSensitiveData | HAS_ACCESS_TO_SENSITIVE_DATA |
hasAdminPrivileges | HAS_ADMIN_PRIVILEGES |
hasHighPrivileges | HAS_HIGH_PRIVILEGES |
hasSensitiveData | HAS_SENSITIVE_DATA |
isAccessibleFromInternet | IS_ACCESSIBLE_FROM_INTERNET |
isOpenToAllInternet | OPEN_TO_ALL_INTERNET |
lastSeen | LAST_SEEN |
name / graphEntity.properties.name | NAME |
nativeType | NATIVE_TYPE |
projects[].id | PROJECT_IDS |
projects[].name | PROJECT_NAMES |
projects[].name | PROJECTS |
providerData.AvailabilityZones | AVAILABILITY_ZONES |
providerData.DesiredCapacity | DESIRED_CAPACITY |
providerData.Instances[].InstanceId | INSTANCES |
providerData.MaxSize | MAX_SIZE |
providerData.MinSize | MIN_SIZE |
region / graphEntity.properties.region | REGION |
regionLocation | REGION_LOCATION |
resourceGroup.externalId | RESOURCE_GROUP_EXTERNAL_ID |
resourceGroup.id | RESOURCE_GROUP_ID |
status / graphEntity.properties.status | STATUS |
status / graphEntity.properties.status | PROVIDER_STATUS |
status / graphEntity.properties.status | SOURCE_STATUS |
| sync time | LAST_CAPTURED |
tags / graphEntity.properties.tags | TAGS |
technology.name | TECHNOLOGY_NAME |
technology.stackLayer | TECHNOLOGY_STACK_LAYER |
type | RESOURCE_TYPE |
typeFields.instanceType | INSTANCE_TYPE |
updatedAt | SOURCE_LAST_MODIFIED |
Access Role
| Source Field Name | SDM Attribute |
|---|---|
(generated) | CATEGORIES |
cloudAccount.cloudProvider | CLOUD_PROVIDER |
cloudAccount.externalId | SUBSCRIPTION_ID |
cloudAccount.name | SUBSCRIPTION_NAME |
cloudPlatform | CLOUD_PLATFORM |
cloudProviderURL | CLOUD_PROVIDER_URL |
createdAt / graphEntity.properties.creationDate | SOURCE_CREATED_DATE |
externalId | EXTERNAL_ID |
firstSeen | FIRST_SEEN |
graphEntity.properties.accessibleFrom.otherSubscriptions | ACCESSIBLE_FROM_OTHER_SUBSCRIPTIONS |
graphEntity.properties.accessibleFrom.otherVnets | ACCESSIBLE_FROM_OTHER_VNETS |
graphEntity.properties.accessibleFrom.VPN | ACCESSIBLE_FROM_VPN |
graphEntity.properties.applicationEndpoint.validatedOpenPorts | VALIDATED_OPEN_PORTS |
graphEntity.properties.name / native properties | DESCRIPTION |
graphEntity.providerUniqueId | PROVIDER_ID |
graphEntity.providerUniqueId / externalId | UID |
hasAccessToSensitiveData | HAS_ACCESS_TO_SENSITIVE_DATA |
hasAdminPrivileges | HAS_ADMIN_PRIVILEGES |
hasHighPrivileges | HAS_HIGH_PRIVILEGES |
hasSensitiveData | HAS_SENSITIVE_DATA |
isAccessibleFromInternet | IS_ACCESSIBLE_FROM_INTERNET |
isOpenToAllInternet | OPEN_TO_ALL_INTERNET |
lastSeen | LAST_SEEN |
name / graphEntity.properties.name | NAME |
nativeType | NATIVE_TYPE |
projects[].id | PROJECT_IDS |
projects[].name | PROJECT_NAMES |
projects[].name | PROJECTS |
region / graphEntity.properties.region | REGION |
regionLocation | REGION_LOCATION |
resourceGroup.externalId | RESOURCE_GROUP_EXTERNAL_ID |
resourceGroup.id | RESOURCE_GROUP_ID |
status / graphEntity.properties.status | STATUS |
status / graphEntity.properties.status | PROVIDER_STATUS |
status / graphEntity.properties.status | SOURCE_STATUS |
| sync time | LAST_CAPTURED |
tags / graphEntity.properties.tags | TAGS |
technology.name | TECHNOLOGY_NAME |
technology.stackLayer | TECHNOLOGY_STACK_LAYER |
type | RESOURCE_TYPE |
typeFields.instanceType | INSTANCE_TYPE |
updatedAt | SOURCE_LAST_MODIFIED |
Access Role Binding
| Source Field Name | SDM Attribute |
|---|---|
(generated) | CATEGORIES |
cloudAccount.cloudProvider | CLOUD_PROVIDER |
cloudAccount.externalId | SUBSCRIPTION_ID |
cloudAccount.name | SUBSCRIPTION_NAME |
cloudPlatform | CLOUD_PLATFORM |
cloudProviderURL | CLOUD_PROVIDER_URL |
createdAt / graphEntity.properties.creationDate | SOURCE_CREATED_DATE |
externalId | EXTERNAL_ID |
firstSeen | FIRST_SEEN |
graphEntity.properties.accessibleFrom.otherSubscriptions | ACCESSIBLE_FROM_OTHER_SUBSCRIPTIONS |
graphEntity.properties.accessibleFrom.otherVnets | ACCESSIBLE_FROM_OTHER_VNETS |
graphEntity.properties.accessibleFrom.VPN | ACCESSIBLE_FROM_VPN |
graphEntity.properties.applicationEndpoint.validatedOpenPorts | VALIDATED_OPEN_PORTS |
graphEntity.properties.name / native properties | DESCRIPTION |
graphEntity.providerUniqueId | PROVIDER_ID |
graphEntity.providerUniqueId / externalId | UID |
hasAccessToSensitiveData | HAS_ACCESS_TO_SENSITIVE_DATA |
hasAdminPrivileges | HAS_ADMIN_PRIVILEGES |
hasHighPrivileges | HAS_HIGH_PRIVILEGES |
hasSensitiveData | HAS_SENSITIVE_DATA |
isAccessibleFromInternet | IS_ACCESSIBLE_FROM_INTERNET |
isOpenToAllInternet | OPEN_TO_ALL_INTERNET |
lastSeen | LAST_SEEN |
name / graphEntity.properties.name | NAME |
nativeType | NATIVE_TYPE |
projects[].id | PROJECT_IDS |
projects[].name | PROJECT_NAMES |
projects[].name | PROJECTS |
region / graphEntity.properties.region | REGION |
regionLocation | REGION_LOCATION |
resourceGroup.externalId | RESOURCE_GROUP_EXTERNAL_ID |
resourceGroup.id | RESOURCE_GROUP_ID |
status / graphEntity.properties.status | STATUS |
status / graphEntity.properties.status | PROVIDER_STATUS |
status / graphEntity.properties.status | SOURCE_STATUS |
| sync time | LAST_CAPTURED |
tags / graphEntity.properties.tags | TAGS |
technology.name | TECHNOLOGY_NAME |
technology.stackLayer | TECHNOLOGY_STACK_LAYER |
type | RESOURCE_TYPE |
typeFields.instanceType | INSTANCE_TYPE |
updatedAt | SOURCE_LAST_MODIFIED |
note
Note: Access Role Binding — Wiz documentation contains conflicting information for this entity type. It is listed as a valid Cloud Resource entity type on the Entity Types and Native Types page, but is also listed as "not supported in V2" on the Cloud Resource Inventory page under "Understanding resource count discrepancies (V1 vs. V2)". The sync completes without API errors; however, results may vary depending on the customer's environment.
API Gateway
| Source Field Name | SDM Attribute |
|---|---|
(generated) | CATEGORIES |
cloudAccount.cloudProvider | CLOUD_PROVIDER |
cloudAccount.externalId | SUBSCRIPTION_ID |
cloudAccount.name | SUBSCRIPTION_NAME |
cloudPlatform | CLOUD_PLATFORM |
cloudProviderURL | CLOUD_PROVIDER_URL |
createdAt / graphEntity.properties.creationDate | SOURCE_CREATED_DATE |
externalId | EXTERNAL_ID |
firstSeen | FIRST_SEEN |
graphEntity.properties.accessibleFrom.otherSubscriptions | ACCESSIBLE_FROM_OTHER_SUBSCRIPTIONS |
graphEntity.properties.accessibleFrom.otherVnets | ACCESSIBLE_FROM_OTHER_VNETS |
graphEntity.properties.accessibleFrom.VPN | ACCESSIBLE_FROM_VPN |
graphEntity.properties.applicationEndpoint.additionalIds | ADDITIONAL_IDS |
graphEntity.properties.applicationEndpoint.validatedOpenPorts | VALIDATED_OPEN_PORTS |
graphEntity.properties.name / native properties | DESCRIPTION |
graphEntity.providerUniqueId | PROVIDER_ID |
graphEntity.providerUniqueId / externalId | UID |
hasAccessToSensitiveData | HAS_ACCESS_TO_SENSITIVE_DATA |
hasAdminPrivileges | HAS_ADMIN_PRIVILEGES |
hasHighPrivileges | HAS_HIGH_PRIVILEGES |
hasSensitiveData | HAS_SENSITIVE_DATA |
isAccessibleFromInternet | IS_ACCESSIBLE_FROM_INTERNET |
isOpenToAllInternet | OPEN_TO_ALL_INTERNET |
lastSeen | LAST_SEEN |
name / graphEntity.properties.name | NAME |
nativeType | NATIVE_TYPE |
projects[].id | PROJECT_IDS |
projects[].name | PROJECT_NAMES |
projects[].name | PROJECTS |
region / graphEntity.properties.region | REGION |
regionLocation | REGION_LOCATION |
resourceGroup.externalId | RESOURCE_GROUP_EXTERNAL_ID |
resourceGroup.id | RESOURCE_GROUP_ID |
status / graphEntity.properties.status | STATUS |
status / graphEntity.properties.status | PROVIDER_STATUS |
status / graphEntity.properties.status | SOURCE_STATUS |
| sync time | LAST_CAPTURED |
tags / graphEntity.properties.tags | TAGS |
technology.name | TECHNOLOGY_NAME |
technology.stackLayer | TECHNOLOGY_STACK_LAYER |
type | RESOURCE_TYPE |
typeFields.instanceType | INSTANCE_TYPE |
updatedAt | SOURCE_LAST_MODIFIED |
Backup Service
| Source Field Name | SDM Attribute |
|---|---|
(generated) | CATEGORIES |
cloudAccount.cloudProvider | CLOUD_PROVIDER |
cloudAccount.externalId | SUBSCRIPTION_ID |
cloudAccount.name | SUBSCRIPTION_NAME |
cloudPlatform | CLOUD_PLATFORM |
cloudProviderURL | CLOUD_PROVIDER_URL |
createdAt / graphEntity.properties.creationDate | SOURCE_CREATED_DATE |
externalId | EXTERNAL_ID |
firstSeen | FIRST_SEEN |
graphEntity.properties.accessibleFrom.otherSubscriptions | ACCESSIBLE_FROM_OTHER_SUBSCRIPTIONS |
graphEntity.properties.accessibleFrom.otherVnets | ACCESSIBLE_FROM_OTHER_VNETS |
graphEntity.properties.accessibleFrom.VPN | ACCESSIBLE_FROM_VPN |
graphEntity.properties.applicationEndpoint.validatedOpenPorts | VALIDATED_OPEN_PORTS |
graphEntity.properties.name / native properties | DESCRIPTION |
graphEntity.providerUniqueId | PROVIDER_ID |
graphEntity.providerUniqueId / externalId | UID |
hasAccessToSensitiveData | HAS_ACCESS_TO_SENSITIVE_DATA |
hasAdminPrivileges | HAS_ADMIN_PRIVILEGES |
hasHighPrivileges | HAS_HIGH_PRIVILEGES |
hasSensitiveData | HAS_SENSITIVE_DATA |
isAccessibleFromInternet | IS_ACCESSIBLE_FROM_INTERNET |
isOpenToAllInternet | OPEN_TO_ALL_INTERNET |
lastSeen | LAST_SEEN |
name / graphEntity.properties.name | NAME |
nativeType | NATIVE_TYPE |
projects[].id | PROJECT_IDS |
projects[].name | PROJECT_NAMES |
projects[].name | PROJECTS |
region / graphEntity.properties.region | REGION |
regionLocation | REGION_LOCATION |
resourceGroup.externalId | RESOURCE_GROUP_EXTERNAL_ID |
resourceGroup.id | RESOURCE_GROUP_ID |
status / graphEntity.properties.status | STATUS |
status / graphEntity.properties.status | PROVIDER_STATUS |
status / graphEntity.properties.status | SOURCE_STATUS |
| sync time | LAST_CAPTURED |
tags / graphEntity.properties.tags | TAGS |
technology.name | TECHNOLOGY_NAME |
technology.stackLayer | TECHNOLOGY_STACK_LAYER |
type | RESOURCE_TYPE |
typeFields.instanceType | INSTANCE_TYPE |
updatedAt | SOURCE_LAST_MODIFIED |
CI/CD Service
| Source Field Name | SDM Attribute |
|---|---|
(generated) | CATEGORIES |
cloudAccount.cloudProvider | CLOUD_PROVIDER |
cloudAccount.externalId | SUBSCRIPTION_ID |
cloudAccount.name | SUBSCRIPTION_NAME |
cloudPlatform | CLOUD_PLATFORM |
cloudProviderURL | CLOUD_PROVIDER_URL |
createdAt / graphEntity.properties.creationDate | SOURCE_CREATED_DATE |
externalId | EXTERNAL_ID |
firstSeen | FIRST_SEEN |
graphEntity.properties.accessibleFrom.otherSubscriptions | ACCESSIBLE_FROM_OTHER_SUBSCRIPTIONS |
graphEntity.properties.accessibleFrom.otherVnets | ACCESSIBLE_FROM_OTHER_VNETS |
graphEntity.properties.accessibleFrom.VPN | ACCESSIBLE_FROM_VPN |
graphEntity.properties.applicationEndpoint.validatedOpenPorts | VALIDATED_OPEN_PORTS |
graphEntity.properties.name / native properties | DESCRIPTION |
graphEntity.providerUniqueId | PROVIDER_ID |
graphEntity.providerUniqueId / externalId | UID |
hasAccessToSensitiveData | HAS_ACCESS_TO_SENSITIVE_DATA |
hasAdminPrivileges | HAS_ADMIN_PRIVILEGES |
hasHighPrivileges | HAS_HIGH_PRIVILEGES |
hasSensitiveData | HAS_SENSITIVE_DATA |
isAccessibleFromInternet | IS_ACCESSIBLE_FROM_INTERNET |
isOpenToAllInternet | OPEN_TO_ALL_INTERNET |
lastSeen | LAST_SEEN |
name / graphEntity.properties.name | NAME |
nativeType | NATIVE_TYPE |
projects[].id | PROJECT_IDS |
projects[].name | PROJECT_NAMES |
projects[].name | PROJECTS |
region / graphEntity.properties.region | REGION |
regionLocation | REGION_LOCATION |
resourceGroup.externalId | RESOURCE_GROUP_EXTERNAL_ID |
resourceGroup.id | RESOURCE_GROUP_ID |
status / graphEntity.properties.status | STATUS |
status / graphEntity.properties.status | PROVIDER_STATUS |
status / graphEntity.properties.status | SOURCE_STATUS |
| sync time | LAST_CAPTURED |
tags / graphEntity.properties.tags | TAGS |
technology.name | TECHNOLOGY_NAME |
technology.stackLayer | TECHNOLOGY_STACK_LAYER |
type | RESOURCE_TYPE |
typeFields.instanceType | INSTANCE_TYPE |
updatedAt | SOURCE_LAST_MODIFIED |
Cloud Log Configuration
| Source Field Name | SDM Attribute |
|---|---|
(generated) | CATEGORIES |
cloudAccount.cloudProvider | CLOUD_PROVIDER |
cloudAccount.externalId | SUBSCRIPTION_ID |
cloudAccount.name | SUBSCRIPTION_NAME |
cloudPlatform | CLOUD_PLATFORM |
cloudProviderURL | CLOUD_PROVIDER_URL |
createdAt / graphEntity.properties.creationDate | SOURCE_CREATED_DATE |
externalId | EXTERNAL_ID |
firstSeen | FIRST_SEEN |
graphEntity.properties.accessibleFrom.otherSubscriptions | ACCESSIBLE_FROM_OTHER_SUBSCRIPTIONS |
graphEntity.properties.accessibleFrom.otherVnets | ACCESSIBLE_FROM_OTHER_VNETS |
graphEntity.properties.accessibleFrom.VPN | ACCESSIBLE_FROM_VPN |
graphEntity.properties.applicationEndpoint.validatedOpenPorts | VALIDATED_OPEN_PORTS |
graphEntity.properties.name / native properties | DESCRIPTION |
graphEntity.providerUniqueId | PROVIDER_ID |
graphEntity.providerUniqueId / externalId | UID |
hasAccessToSensitiveData | HAS_ACCESS_TO_SENSITIVE_DATA |
hasAdminPrivileges | HAS_ADMIN_PRIVILEGES |
hasHighPrivileges | HAS_HIGH_PRIVILEGES |
hasSensitiveData | HAS_SENSITIVE_DATA |
isAccessibleFromInternet | IS_ACCESSIBLE_FROM_INTERNET |
isOpenToAllInternet | OPEN_TO_ALL_INTERNET |
lastSeen | LAST_SEEN |
name / graphEntity.properties.name | NAME |
nativeType | NATIVE_TYPE |
projects[].id | PROJECT_IDS |
projects[].name | PROJECT_NAMES |
projects[].name | PROJECTS |
region / graphEntity.properties.region | REGION |
regionLocation | REGION_LOCATION |
resourceGroup.externalId | RESOURCE_GROUP_EXTERNAL_ID |
resourceGroup.id | RESOURCE_GROUP_ID |
status / graphEntity.properties.status | STATUS |
status / graphEntity.properties.status | PROVIDER_STATUS |
status / graphEntity.properties.status | SOURCE_STATUS |
| sync time | LAST_CAPTURED |
tags / graphEntity.properties.tags | TAGS |
technology.name | TECHNOLOGY_NAME |
technology.stackLayer | TECHNOLOGY_STACK_LAYER |
type | RESOURCE_TYPE |
typeFields.instanceType | INSTANCE_TYPE |
updatedAt | SOURCE_LAST_MODIFIED |
Container Registry
| Source Field Name | SDM Attribute |
|---|---|
(generated) | CATEGORIES |
cloudAccount.cloudProvider | CLOUD_PROVIDER |
cloudAccount.externalId | SUBSCRIPTION_ID |
cloudAccount.name | SUBSCRIPTION_NAME |
cloudPlatform | CLOUD_PLATFORM |
cloudProviderURL | CLOUD_PROVIDER_URL |
createdAt / graphEntity.properties.creationDate | SOURCE_CREATED_DATE |
externalId | EXTERNAL_ID |
firstSeen | FIRST_SEEN |
graphEntity.properties.accessibleFrom.otherSubscriptions | ACCESSIBLE_FROM_OTHER_SUBSCRIPTIONS |
graphEntity.properties.accessibleFrom.otherVnets | ACCESSIBLE_FROM_OTHER_VNETS |
graphEntity.properties.accessibleFrom.VPN | ACCESSIBLE_FROM_VPN |
graphEntity.properties.applicationEndpoint.validatedOpenPorts | VALIDATED_OPEN_PORTS |
graphEntity.properties.name / native properties | DESCRIPTION |
graphEntity.providerUniqueId | PROVIDER_ID |
graphEntity.providerUniqueId / externalId | UID |
hasAccessToSensitiveData | HAS_ACCESS_TO_SENSITIVE_DATA |
hasAdminPrivileges | HAS_ADMIN_PRIVILEGES |
hasHighPrivileges | HAS_HIGH_PRIVILEGES |
hasSensitiveData | HAS_SENSITIVE_DATA |
isAccessibleFromInternet | IS_ACCESSIBLE_FROM_INTERNET |
isOpenToAllInternet | OPEN_TO_ALL_INTERNET |
lastSeen | LAST_SEEN |
name / graphEntity.properties.name | NAME |
nativeType | NATIVE_TYPE |
projects[].id | PROJECT_IDS |
projects[].name | PROJECT_NAMES |
projects[].name | PROJECTS |
region / graphEntity.properties.region | REGION |
regionLocation | REGION_LOCATION |
resourceGroup.externalId | RESOURCE_GROUP_EXTERNAL_ID |
resourceGroup.id | RESOURCE_GROUP_ID |
status / graphEntity.properties.status | STATUS |
status / graphEntity.properties.status | PROVIDER_STATUS |
status / graphEntity.properties.status | SOURCE_STATUS |
| sync time | LAST_CAPTURED |
tags / graphEntity.properties.tags | TAGS |
technology.name | TECHNOLOGY_NAME |
technology.stackLayer | TECHNOLOGY_STACK_LAYER |
type | RESOURCE_TYPE |
typeFields.instanceType | INSTANCE_TYPE |
updatedAt | SOURCE_LAST_MODIFIED |
Container Service
| Source Field Name | SDM Attribute |
|---|---|
(generated) | CATEGORIES |
cloudAccount.cloudProvider | CLOUD_PROVIDER |
cloudAccount.externalId | SUBSCRIPTION_ID |
cloudAccount.name | SUBSCRIPTION_NAME |
cloudPlatform | CLOUD_PLATFORM |
cloudProviderURL | CLOUD_PROVIDER_URL |
createdAt / graphEntity.properties.creationDate | SOURCE_CREATED_DATE |
externalId | EXTERNAL_ID |
firstSeen | FIRST_SEEN |
graphEntity.properties.accessibleFrom.otherSubscriptions | ACCESSIBLE_FROM_OTHER_SUBSCRIPTIONS |
graphEntity.properties.accessibleFrom.otherVnets | ACCESSIBLE_FROM_OTHER_VNETS |
graphEntity.properties.accessibleFrom.VPN | ACCESSIBLE_FROM_VPN |
graphEntity.properties.applicationEndpoint.validatedOpenPorts | VALIDATED_OPEN_PORTS |
graphEntity.properties.name / native properties | DESCRIPTION |
graphEntity.providerUniqueId | PROVIDER_ID |
graphEntity.providerUniqueId / externalId | UID |
hasAccessToSensitiveData | HAS_ACCESS_TO_SENSITIVE_DATA |
hasAdminPrivileges | HAS_ADMIN_PRIVILEGES |
hasHighPrivileges | HAS_HIGH_PRIVILEGES |
hasSensitiveData | HAS_SENSITIVE_DATA |
isAccessibleFromInternet | IS_ACCESSIBLE_FROM_INTERNET |
isOpenToAllInternet | OPEN_TO_ALL_INTERNET |
lastSeen | LAST_SEEN |
name / graphEntity.properties.name | NAME |
nativeType | NATIVE_TYPE |
projects[].id | PROJECT_IDS |
projects[].name | PROJECT_NAMES |
projects[].name | PROJECTS |
region / graphEntity.properties.region | REGION |
regionLocation | REGION_LOCATION |
resourceGroup.externalId | RESOURCE_GROUP_EXTERNAL_ID |
resourceGroup.id | RESOURCE_GROUP_ID |
status / graphEntity.properties.status | STATUS |
status / graphEntity.properties.status | PROVIDER_STATUS |
status / graphEntity.properties.status | SOURCE_STATUS |
| sync time | LAST_CAPTURED |
tags / graphEntity.properties.tags | TAGS |
technology.name | TECHNOLOGY_NAME |
technology.stackLayer | TECHNOLOGY_STACK_LAYER |
type | RESOURCE_TYPE |
typeFields.instanceType | INSTANCE_TYPE |
updatedAt | SOURCE_LAST_MODIFIED |
DaemonSet
| Source Field Name | SDM Attribute |
|---|---|
(generated) | CATEGORIES |
cloudAccount.cloudProvider | CLOUD_PROVIDER |
cloudAccount.externalId | SUBSCRIPTION_ID |
cloudAccount.name | SUBSCRIPTION_NAME |
cloudPlatform | CLOUD_PLATFORM |
cloudProviderURL | CLOUD_PROVIDER_URL |
createdAt / graphEntity.properties.creationDate | SOURCE_CREATED_DATE |
externalId | EXTERNAL_ID |
firstSeen | FIRST_SEEN |
graphEntity.properties.accessibleFrom.otherSubscriptions | ACCESSIBLE_FROM_OTHER_SUBSCRIPTIONS |
graphEntity.properties.accessibleFrom.otherVnets | ACCESSIBLE_FROM_OTHER_VNETS |
graphEntity.properties.accessibleFrom.VPN | ACCESSIBLE_FROM_VPN |
graphEntity.properties.applicationEndpoint.validatedOpenPorts | VALIDATED_OPEN_PORTS |
graphEntity.properties.name / native properties | DESCRIPTION |
graphEntity.providerUniqueId | PROVIDER_ID |
graphEntity.providerUniqueId / externalId | UID |
hasAccessToSensitiveData | HAS_ACCESS_TO_SENSITIVE_DATA |
hasAdminPrivileges | HAS_ADMIN_PRIVILEGES |
hasHighPrivileges | HAS_HIGH_PRIVILEGES |
hasSensitiveData | HAS_SENSITIVE_DATA |
isAccessibleFromInternet | IS_ACCESSIBLE_FROM_INTERNET |
isOpenToAllInternet | OPEN_TO_ALL_INTERNET |
lastSeen | LAST_SEEN |
name / graphEntity.properties.name | NAME |
nativeType | NATIVE_TYPE |
projects[].id | PROJECT_IDS |
projects[].name | PROJECT_NAMES |
projects[].name | PROJECTS |
region / graphEntity.properties.region | REGION |
regionLocation | REGION_LOCATION |
resourceGroup.externalId | RESOURCE_GROUP_EXTERNAL_ID |
resourceGroup.id | RESOURCE_GROUP_ID |
status / graphEntity.properties.status | STATUS |
status / graphEntity.properties.status | PROVIDER_STATUS |
status / graphEntity.properties.status | SOURCE_STATUS |
| sync time | LAST_CAPTURED |
tags / graphEntity.properties.tags | TAGS |
technology.name | TECHNOLOGY_NAME |
technology.stackLayer | TECHNOLOGY_STACK_LAYER |
type | RESOURCE_TYPE |
typeFields.instanceType | INSTANCE_TYPE |
updatedAt | SOURCE_LAST_MODIFIED |
Data Workload
| Source Field Name | SDM Attribute |
|---|---|
(generated) | CATEGORIES |
cloudAccount.cloudProvider | CLOUD_PROVIDER |
cloudAccount.externalId | SUBSCRIPTION_ID |
cloudAccount.name | SUBSCRIPTION_NAME |
cloudPlatform | CLOUD_PLATFORM |
cloudProviderURL | CLOUD_PROVIDER_URL |
createdAt / graphEntity.properties.creationDate | SOURCE_CREATED_DATE |
externalId | EXTERNAL_ID |
firstSeen | FIRST_SEEN |
graphEntity.properties.accessibleFrom.otherSubscriptions | ACCESSIBLE_FROM_OTHER_SUBSCRIPTIONS |
graphEntity.properties.accessibleFrom.otherVnets | ACCESSIBLE_FROM_OTHER_VNETS |
graphEntity.properties.accessibleFrom.VPN | ACCESSIBLE_FROM_VPN |
graphEntity.properties.applicationEndpoint.validatedOpenPorts | VALIDATED_OPEN_PORTS |
graphEntity.properties.name / native properties | DESCRIPTION |
graphEntity.providerUniqueId | PROVIDER_ID |
graphEntity.providerUniqueId / externalId | UID |
hasAccessToSensitiveData | HAS_ACCESS_TO_SENSITIVE_DATA |
hasAdminPrivileges | HAS_ADMIN_PRIVILEGES |
hasHighPrivileges | HAS_HIGH_PRIVILEGES |
hasSensitiveData | HAS_SENSITIVE_DATA |
isAccessibleFromInternet | IS_ACCESSIBLE_FROM_INTERNET |
isOpenToAllInternet | OPEN_TO_ALL_INTERNET |
lastSeen | LAST_SEEN |
name / graphEntity.properties.name | NAME |
nativeType | NATIVE_TYPE |
projects[].id | PROJECT_IDS |
projects[].name | PROJECT_NAMES |
projects[].name | PROJECTS |
region / graphEntity.properties.region | REGION |
regionLocation | REGION_LOCATION |
resourceGroup.externalId | RESOURCE_GROUP_EXTERNAL_ID |
resourceGroup.id | RESOURCE_GROUP_ID |
status / graphEntity.properties.status | STATUS |
status / graphEntity.properties.status | PROVIDER_STATUS |
status / graphEntity.properties.status | SOURCE_STATUS |
| sync time | LAST_CAPTURED |
tags / graphEntity.properties.tags | TAGS |
technology.name | TECHNOLOGY_NAME |
technology.stackLayer | TECHNOLOGY_STACK_LAYER |
type | RESOURCE_TYPE |
typeFields.instanceType | INSTANCE_TYPE |
updatedAt | SOURCE_LAST_MODIFIED |
Deployment
| Source Field Name | SDM Attribute |
|---|---|
(generated) | CATEGORIES |
cloudAccount.cloudProvider | CLOUD_PROVIDER |
cloudAccount.externalId | SUBSCRIPTION_ID |
cloudAccount.name | SUBSCRIPTION_NAME |
cloudPlatform | CLOUD_PLATFORM |
cloudProviderURL | CLOUD_PROVIDER_URL |
createdAt / graphEntity.properties.creationDate | SOURCE_CREATED_DATE |
externalId | EXTERNAL_ID |
firstSeen | FIRST_SEEN |
graphEntity.properties.accessibleFrom.otherSubscriptions | ACCESSIBLE_FROM_OTHER_SUBSCRIPTIONS |
graphEntity.properties.accessibleFrom.otherVnets | ACCESSIBLE_FROM_OTHER_VNETS |
graphEntity.properties.accessibleFrom.VPN | ACCESSIBLE_FROM_VPN |
graphEntity.properties.applicationEndpoint.validatedOpenPorts | VALIDATED_OPEN_PORTS |
graphEntity.properties.name / native properties | DESCRIPTION |
graphEntity.providerUniqueId | PROVIDER_ID |
graphEntity.providerUniqueId / externalId | UID |
hasAccessToSensitiveData | HAS_ACCESS_TO_SENSITIVE_DATA |
hasAdminPrivileges | HAS_ADMIN_PRIVILEGES |
hasHighPrivileges | HAS_HIGH_PRIVILEGES |
hasSensitiveData | HAS_SENSITIVE_DATA |
isAccessibleFromInternet | IS_ACCESSIBLE_FROM_INTERNET |
isOpenToAllInternet | OPEN_TO_ALL_INTERNET |
lastSeen | LAST_SEEN |
name / graphEntity.properties.name | NAME |
nativeType | NATIVE_TYPE |
projects[].id | PROJECT_IDS |
projects[].name | PROJECT_NAMES |
projects[].name | PROJECTS |
region / graphEntity.properties.region | REGION |
regionLocation | REGION_LOCATION |
resourceGroup.externalId | RESOURCE_GROUP_EXTERNAL_ID |
resourceGroup.id | RESOURCE_GROUP_ID |
status / graphEntity.properties.status | STATUS |
status / graphEntity.properties.status | PROVIDER_STATUS |
status / graphEntity.properties.status | SOURCE_STATUS |
| sync time | LAST_CAPTURED |
tags / graphEntity.properties.tags | TAGS |
technology.name | TECHNOLOGY_NAME |
technology.stackLayer | TECHNOLOGY_STACK_LAYER |
type | RESOURCE_TYPE |
typeFields.instanceType | INSTANCE_TYPE |
updatedAt | SOURCE_LAST_MODIFIED |
Encryption Key
| Source Field Name | SDM Attribute |
|---|---|
(generated) | CATEGORIES |
cloudAccount.cloudProvider | CLOUD_PROVIDER |
cloudAccount.externalId | SUBSCRIPTION_ID |
cloudAccount.name | SUBSCRIPTION_NAME |
cloudPlatform | CLOUD_PLATFORM |
cloudProviderURL | CLOUD_PROVIDER_URL |
createdAt / graphEntity.properties.creationDate | SOURCE_CREATED_DATE |
externalId | EXTERNAL_ID |
firstSeen | FIRST_SEEN |
graphEntity.properties.accessibleFrom.otherSubscriptions | ACCESSIBLE_FROM_OTHER_SUBSCRIPTIONS |
graphEntity.properties.accessibleFrom.otherVnets | ACCESSIBLE_FROM_OTHER_VNETS |
graphEntity.properties.accessibleFrom.VPN | ACCESSIBLE_FROM_VPN |
graphEntity.properties.applicationEndpoint.validatedOpenPorts | VALIDATED_OPEN_PORTS |
graphEntity.properties.name / native properties | DESCRIPTION |
graphEntity.providerUniqueId | PROVIDER_ID |
graphEntity.providerUniqueId / externalId | UID |
hasAccessToSensitiveData | HAS_ACCESS_TO_SENSITIVE_DATA |
hasAdminPrivileges | HAS_ADMIN_PRIVILEGES |
hasHighPrivileges | HAS_HIGH_PRIVILEGES |
hasSensitiveData | HAS_SENSITIVE_DATA |
isAccessibleFromInternet | IS_ACCESSIBLE_FROM_INTERNET |
isOpenToAllInternet | OPEN_TO_ALL_INTERNET |
lastSeen | LAST_SEEN |
name / graphEntity.properties.name | NAME |
nativeType | NATIVE_TYPE |
projects[].id | PROJECT_IDS |
projects[].name | PROJECT_NAMES |
projects[].name | PROJECTS |
region / graphEntity.properties.region | REGION |
regionLocation | REGION_LOCATION |
resourceGroup.externalId | RESOURCE_GROUP_EXTERNAL_ID |
resourceGroup.id | RESOURCE_GROUP_ID |
status / graphEntity.properties.status | STATUS |
status / graphEntity.properties.status | PROVIDER_STATUS |
status / graphEntity.properties.status | SOURCE_STATUS |
| sync time | LAST_CAPTURED |
tags / graphEntity.properties.tags | TAGS |
technology.name | TECHNOLOGY_NAME |
technology.stackLayer | TECHNOLOGY_STACK_LAYER |
type | RESOURCE_TYPE |
typeFields.instanceType | INSTANCE_TYPE |
updatedAt | SOURCE_LAST_MODIFIED |
File System Service
| Source Field Name | SDM Attribute |
|---|---|
(generated) | CATEGORIES |
cloudAccount.cloudProvider | CLOUD_PROVIDER |
cloudAccount.externalId | SUBSCRIPTION_ID |
cloudAccount.name | SUBSCRIPTION_NAME |
cloudPlatform | CLOUD_PLATFORM |
cloudProviderURL | CLOUD_PROVIDER_URL |
createdAt / graphEntity.properties.creationDate | SOURCE_CREATED_DATE |
externalId | EXTERNAL_ID |
firstSeen | FIRST_SEEN |
graphEntity.properties.accessibleFrom.otherSubscriptions | ACCESSIBLE_FROM_OTHER_SUBSCRIPTIONS |
graphEntity.properties.accessibleFrom.otherVnets | ACCESSIBLE_FROM_OTHER_VNETS |
graphEntity.properties.accessibleFrom.VPN | ACCESSIBLE_FROM_VPN |
graphEntity.properties.applicationEndpoint.validatedOpenPorts | VALIDATED_OPEN_PORTS |
graphEntity.properties.name / native properties | DESCRIPTION |
graphEntity.providerUniqueId | PROVIDER_ID |
graphEntity.providerUniqueId / externalId | UID |
hasAccessToSensitiveData | HAS_ACCESS_TO_SENSITIVE_DATA |
hasAdminPrivileges | HAS_ADMIN_PRIVILEGES |
hasHighPrivileges | HAS_HIGH_PRIVILEGES |
hasSensitiveData | HAS_SENSITIVE_DATA |
isAccessibleFromInternet | IS_ACCESSIBLE_FROM_INTERNET |
isOpenToAllInternet | OPEN_TO_ALL_INTERNET |
lastSeen | LAST_SEEN |
name / graphEntity.properties.name | NAME |
nativeType | NATIVE_TYPE |
projects[].id | PROJECT_IDS |
projects[].name | PROJECT_NAMES |
projects[].name | PROJECTS |
region / graphEntity.properties.region | REGION |
regionLocation | REGION_LOCATION |
resourceGroup.externalId | RESOURCE_GROUP_EXTERNAL_ID |
resourceGroup.id | RESOURCE_GROUP_ID |
status / graphEntity.properties.status | STATUS |
status / graphEntity.properties.status | PROVIDER_STATUS |
status / graphEntity.properties.status | SOURCE_STATUS |
| sync time | LAST_CAPTURED |
tags / graphEntity.properties.tags | TAGS |
technology.name | TECHNOLOGY_NAME |
technology.stackLayer | TECHNOLOGY_STACK_LAYER |
type | RESOURCE_TYPE |
typeFields.instanceType | INSTANCE_TYPE |
updatedAt | SOURCE_LAST_MODIFIED |
Firewall
| Source Field Name | SDM Attribute |
|---|---|
(generated) | CATEGORIES |
cloudAccount.cloudProvider | CLOUD_PROVIDER |
cloudAccount.externalId | SUBSCRIPTION_ID |
cloudAccount.name | SUBSCRIPTION_NAME |
cloudPlatform | CLOUD_PLATFORM |
cloudProviderURL | CLOUD_PROVIDER_URL |
createdAt / graphEntity.properties.creationDate | SOURCE_CREATED_DATE |
externalId | EXTERNAL_ID |
firstSeen | FIRST_SEEN |
graphEntity.properties.accessibleFrom.otherSubscriptions | ACCESSIBLE_FROM_OTHER_SUBSCRIPTIONS |
graphEntity.properties.accessibleFrom.otherVnets | ACCESSIBLE_FROM_OTHER_VNETS |
graphEntity.properties.accessibleFrom.VPN | ACCESSIBLE_FROM_VPN |
graphEntity.properties.applicationEndpoint.validatedOpenPorts | VALIDATED_OPEN_PORTS |
graphEntity.properties.name / native properties | DESCRIPTION |
graphEntity.providerUniqueId | PROVIDER_ID |
graphEntity.providerUniqueId / externalId | UID |
hasAccessToSensitiveData | HAS_ACCESS_TO_SENSITIVE_DATA |
hasAdminPrivileges | HAS_ADMIN_PRIVILEGES |
hasHighPrivileges | HAS_HIGH_PRIVILEGES |
hasSensitiveData | HAS_SENSITIVE_DATA |
isAccessibleFromInternet | IS_ACCESSIBLE_FROM_INTERNET |
isOpenToAllInternet | OPEN_TO_ALL_INTERNET |
lastSeen | LAST_SEEN |
name / graphEntity.properties.name | NAME |
nativeType | NATIVE_TYPE |
projects[].id | PROJECT_IDS |
projects[].name | PROJECT_NAMES |
projects[].name | PROJECTS |
region / graphEntity.properties.region | REGION |
regionLocation | REGION_LOCATION |
resourceGroup.externalId | RESOURCE_GROUP_EXTERNAL_ID |
resourceGroup.id | RESOURCE_GROUP_ID |
status / graphEntity.properties.status | STATUS |
status / graphEntity.properties.status | PROVIDER_STATUS |
status / graphEntity.properties.status | SOURCE_STATUS |
| sync time | LAST_CAPTURED |
tags / graphEntity.properties.tags | TAGS |
technology.name | TECHNOLOGY_NAME |
technology.stackLayer | TECHNOLOGY_STACK_LAYER |
type | RESOURCE_TYPE |
typeFields.instanceType | INSTANCE_TYPE |
updatedAt | SOURCE_LAST_MODIFIED |
Gateway
| Source Field Name | SDM Attribute |
|---|---|
(generated) | CATEGORIES |
cloudAccount.cloudProvider | CLOUD_PROVIDER |
cloudAccount.externalId | SUBSCRIPTION_ID |
cloudAccount.name | SUBSCRIPTION_NAME |
cloudPlatform | CLOUD_PLATFORM |
cloudProviderURL | CLOUD_PROVIDER_URL |
createdAt / graphEntity.properties.creationDate | SOURCE_CREATED_DATE |
externalId | EXTERNAL_ID |
firstSeen | FIRST_SEEN |
graphEntity.properties.accessibleFrom.otherSubscriptions | ACCESSIBLE_FROM_OTHER_SUBSCRIPTIONS |
graphEntity.properties.accessibleFrom.otherVnets | ACCESSIBLE_FROM_OTHER_VNETS |
graphEntity.properties.accessibleFrom.VPN | ACCESSIBLE_FROM_VPN |
graphEntity.properties.applicationEndpoint.validatedOpenPorts | VALIDATED_OPEN_PORTS |
graphEntity.properties.name / native properties | DESCRIPTION |
graphEntity.providerUniqueId | PROVIDER_ID |
graphEntity.providerUniqueId / externalId | UID |
hasAccessToSensitiveData | HAS_ACCESS_TO_SENSITIVE_DATA |
hasAdminPrivileges | HAS_ADMIN_PRIVILEGES |
hasHighPrivileges | HAS_HIGH_PRIVILEGES |
hasSensitiveData | HAS_SENSITIVE_DATA |
isAccessibleFromInternet | IS_ACCESSIBLE_FROM_INTERNET |
isOpenToAllInternet | OPEN_TO_ALL_INTERNET |
lastSeen | LAST_SEEN |
name / graphEntity.properties.name | NAME |
nativeType | NATIVE_TYPE |
projects[].id | PROJECT_IDS |
projects[].name | PROJECT_NAMES |
projects[].name | PROJECTS |
region / graphEntity.properties.region | REGION |
regionLocation | REGION_LOCATION |
resourceGroup.externalId | RESOURCE_GROUP_EXTERNAL_ID |
resourceGroup.id | RESOURCE_GROUP_ID |
status / graphEntity.properties.status | STATUS |
status / graphEntity.properties.status | PROVIDER_STATUS |
status / graphEntity.properties.status | SOURCE_STATUS |
| sync time | LAST_CAPTURED |
tags / graphEntity.properties.tags | TAGS |
technology.name | TECHNOLOGY_NAME |
technology.stackLayer | TECHNOLOGY_STACK_LAYER |
type | RESOURCE_TYPE |
typeFields.instanceType | INSTANCE_TYPE |
updatedAt | SOURCE_LAST_MODIFIED |
Kubernetes Cluster
| Source Field Name | SDM Attribute |
|---|---|
(generated) | CATEGORIES |
cloudAccount.cloudProvider | CLOUD_PROVIDER |
cloudAccount.externalId | SUBSCRIPTION_ID |
cloudAccount.name | SUBSCRIPTION_NAME |
cloudPlatform | CLOUD_PLATFORM |
cloudProviderURL | CLOUD_PROVIDER_URL |
createdAt / graphEntity.properties.creationDate | SOURCE_CREATED_DATE |
externalId | EXTERNAL_ID |
firstSeen | FIRST_SEEN |
graphEntity.properties.accessibleFrom.otherSubscriptions | ACCESSIBLE_FROM_OTHER_SUBSCRIPTIONS |
graphEntity.properties.accessibleFrom.otherVnets | ACCESSIBLE_FROM_OTHER_VNETS |
graphEntity.properties.accessibleFrom.VPN | ACCESSIBLE_FROM_VPN |
graphEntity.properties.applicationEndpoint.validatedOpenPorts | VALIDATED_OPEN_PORTS |
graphEntity.properties.name / native properties | DESCRIPTION |
graphEntity.providerUniqueId | PROVIDER_ID |
graphEntity.providerUniqueId / externalId | UID |
hasAccessToSensitiveData | HAS_ACCESS_TO_SENSITIVE_DATA |
hasAdminPrivileges | HAS_ADMIN_PRIVILEGES |
hasHighPrivileges | HAS_HIGH_PRIVILEGES |
hasSensitiveData | HAS_SENSITIVE_DATA |
isAccessibleFromInternet | IS_ACCESSIBLE_FROM_INTERNET |
isOpenToAllInternet | OPEN_TO_ALL_INTERNET |
lastSeen | LAST_SEEN |
name / graphEntity.properties.name | NAME |
nativeType | NATIVE_TYPE |
projects[].id | PROJECT_IDS |
projects[].name | PROJECT_NAMES |
projects[].name | PROJECTS |
region / graphEntity.properties.region | REGION |
regionLocation | REGION_LOCATION |
resourceGroup.externalId | RESOURCE_GROUP_EXTERNAL_ID |
resourceGroup.id | RESOURCE_GROUP_ID |
status / graphEntity.properties.status | STATUS |
status / graphEntity.properties.status | PROVIDER_STATUS |
status / graphEntity.properties.status | SOURCE_STATUS |
| sync time | LAST_CAPTURED |
tags / graphEntity.properties.tags | TAGS |
technology.name | TECHNOLOGY_NAME |
technology.stackLayer | TECHNOLOGY_STACK_LAYER |
type | RESOURCE_TYPE |
typeFields.instanceType | INSTANCE_TYPE |
updatedAt | SOURCE_LAST_MODIFIED |
Load Balancer
| Source Field Name | SDM Attribute |
|---|---|
(generated) | CATEGORIES |
cloudAccount.cloudProvider | CLOUD_PROVIDER |
cloudAccount.externalId | SUBSCRIPTION_ID |
cloudAccount.name | SUBSCRIPTION_NAME |
cloudPlatform | CLOUD_PLATFORM |
cloudProviderURL | CLOUD_PROVIDER_URL |
createdAt / graphEntity.properties.creationDate | SOURCE_CREATED_DATE |
externalId | EXTERNAL_ID |
firstSeen | FIRST_SEEN |
graphEntity.properties.accessibleFrom.otherSubscriptions | ACCESSIBLE_FROM_OTHER_SUBSCRIPTIONS |
graphEntity.properties.accessibleFrom.otherVnets | ACCESSIBLE_FROM_OTHER_VNETS |
graphEntity.properties.accessibleFrom.VPN | ACCESSIBLE_FROM_VPN |
graphEntity.properties.applicationEndpoint.validatedOpenPorts | VALIDATED_OPEN_PORTS |
graphEntity.properties.name / native properties | DESCRIPTION |
graphEntity.providerUniqueId | PROVIDER_ID |
graphEntity.providerUniqueId / externalId | UID |
hasAccessToSensitiveData | HAS_ACCESS_TO_SENSITIVE_DATA |
hasAdminPrivileges | HAS_ADMIN_PRIVILEGES |
hasHighPrivileges | HAS_HIGH_PRIVILEGES |
hasSensitiveData | HAS_SENSITIVE_DATA |
isAccessibleFromInternet | IS_ACCESSIBLE_FROM_INTERNET |
isOpenToAllInternet | OPEN_TO_ALL_INTERNET |
lastSeen | LAST_SEEN |
name / graphEntity.properties.name | NAME |
nativeType | NATIVE_TYPE |
projects[].id | PROJECT_IDS |
projects[].name | PROJECT_NAMES |
projects[].name | PROJECTS |
providerData.DNSName (AWS), providerData.properties.backendAddressPools[].properties.backendAddresses[].fqdn (Azure) | DNS_NAMES |
providerData.IPAddress (GCP), providerData.properties.frontendIPConfigurations[].properties.privateIPAddress (Azure) | IP_ADDRESSES |
region / graphEntity.properties.region | REGION |
regionLocation | REGION_LOCATION |
resourceGroup.externalId | RESOURCE_GROUP_EXTERNAL_ID |
resourceGroup.id | RESOURCE_GROUP_ID |
| Same as IP_ADDRESSES, filtered to IPv4 | IPV4_RANGES |
| Same as IP_ADDRESSES, filtered to IPv6 | IPV6_RANGES |
status / graphEntity.properties.status | STATUS |
status / graphEntity.properties.status | PROVIDER_STATUS |
status / graphEntity.properties.status | SOURCE_STATUS |
| sync time | LAST_CAPTURED |
tags / graphEntity.properties.tags | TAGS |
technology.name | TECHNOLOGY_NAME |
technology.stackLayer | TECHNOLOGY_STACK_LAYER |
type | RESOURCE_TYPE |
typeFields.instanceType | INSTANCE_TYPE |
updatedAt | SOURCE_LAST_MODIFIED |
Messaging Service
| Source Field Name | SDM Attribute |
|---|---|
(generated) | CATEGORIES |
cloudAccount.cloudProvider | CLOUD_PROVIDER |
cloudAccount.externalId | SUBSCRIPTION_ID |
cloudAccount.name | SUBSCRIPTION_NAME |
cloudPlatform | CLOUD_PLATFORM |
cloudProviderURL | CLOUD_PROVIDER_URL |
createdAt / graphEntity.properties.creationDate | SOURCE_CREATED_DATE |
externalId | EXTERNAL_ID |
firstSeen | FIRST_SEEN |
graphEntity.properties.accessibleFrom.otherSubscriptions | ACCESSIBLE_FROM_OTHER_SUBSCRIPTIONS |
graphEntity.properties.accessibleFrom.otherVnets | ACCESSIBLE_FROM_OTHER_VNETS |
graphEntity.properties.accessibleFrom.VPN | ACCESSIBLE_FROM_VPN |
graphEntity.properties.applicationEndpoint.validatedOpenPorts | VALIDATED_OPEN_PORTS |
graphEntity.properties.name / native properties | DESCRIPTION |
graphEntity.providerUniqueId | PROVIDER_ID |
graphEntity.providerUniqueId / externalId | UID |
hasAccessToSensitiveData | HAS_ACCESS_TO_SENSITIVE_DATA |
hasAdminPrivileges | HAS_ADMIN_PRIVILEGES |
hasHighPrivileges | HAS_HIGH_PRIVILEGES |
hasSensitiveData | HAS_SENSITIVE_DATA |
isAccessibleFromInternet | IS_ACCESSIBLE_FROM_INTERNET |
isOpenToAllInternet | OPEN_TO_ALL_INTERNET |
lastSeen | LAST_SEEN |
name / graphEntity.properties.name | NAME |
nativeType | NATIVE_TYPE |
projects[].id | PROJECT_IDS |
projects[].name | PROJECT_NAMES |
projects[].name | PROJECTS |
region / graphEntity.properties.region | REGION |
regionLocation | REGION_LOCATION |
resourceGroup.externalId | RESOURCE_GROUP_EXTERNAL_ID |
resourceGroup.id | RESOURCE_GROUP_ID |
status / graphEntity.properties.status | STATUS |
status / graphEntity.properties.status | PROVIDER_STATUS |
status / graphEntity.properties.status | SOURCE_STATUS |
| sync time | LAST_CAPTURED |
tags / graphEntity.properties.tags | TAGS |
technology.name | TECHNOLOGY_NAME |
technology.stackLayer | TECHNOLOGY_STACK_LAYER |
type | RESOURCE_TYPE |
typeFields.instanceType | INSTANCE_TYPE |
updatedAt | SOURCE_LAST_MODIFIED |
Pod
| Source Field Name | SDM Attribute |
|---|---|
(generated) | CATEGORIES |
cloudAccount.cloudProvider | CLOUD_PROVIDER |
cloudAccount.externalId | SUBSCRIPTION_ID |
cloudAccount.name | SUBSCRIPTION_NAME |
cloudPlatform | CLOUD_PLATFORM |
cloudProviderURL | CLOUD_PROVIDER_URL |
createdAt / graphEntity.properties.creationDate | SOURCE_CREATED_DATE |
externalId | EXTERNAL_ID |
firstSeen | FIRST_SEEN |
graphEntity.properties.accessibleFrom.otherSubscriptions | ACCESSIBLE_FROM_OTHER_SUBSCRIPTIONS |
graphEntity.properties.accessibleFrom.otherVnets | ACCESSIBLE_FROM_OTHER_VNETS |
graphEntity.properties.accessibleFrom.VPN | ACCESSIBLE_FROM_VPN |
graphEntity.properties.applicationEndpoint.validatedOpenPorts | VALIDATED_OPEN_PORTS |
graphEntity.properties.name / native properties | DESCRIPTION |
graphEntity.providerUniqueId | PROVIDER_ID |
graphEntity.providerUniqueId / externalId | UID |
hasAccessToSensitiveData | HAS_ACCESS_TO_SENSITIVE_DATA |
hasAdminPrivileges | HAS_ADMIN_PRIVILEGES |
hasHighPrivileges | HAS_HIGH_PRIVILEGES |
hasSensitiveData | HAS_SENSITIVE_DATA |
isAccessibleFromInternet | IS_ACCESSIBLE_FROM_INTERNET |
isOpenToAllInternet | OPEN_TO_ALL_INTERNET |
lastSeen | LAST_SEEN |
name / graphEntity.properties.name | NAME |
nativeType | NATIVE_TYPE |
projects[].id | PROJECT_IDS |
projects[].name | PROJECT_NAMES |
projects[].name | PROJECTS |
region / graphEntity.properties.region | REGION |
regionLocation | REGION_LOCATION |
resourceGroup.externalId | RESOURCE_GROUP_EXTERNAL_ID |
resourceGroup.id | RESOURCE_GROUP_ID |
status / graphEntity.properties.status | STATUS |
status / graphEntity.properties.status | PROVIDER_STATUS |
status / graphEntity.properties.status | SOURCE_STATUS |
| sync time | LAST_CAPTURED |
tags / graphEntity.properties.tags | TAGS |
technology.name | TECHNOLOGY_NAME |
technology.stackLayer | TECHNOLOGY_STACK_LAYER |
type | RESOURCE_TYPE |
typeFields.instanceType | INSTANCE_TYPE |
updatedAt | SOURCE_LAST_MODIFIED |
Raw Access Policy
| Source Field Name | SDM Attribute |
|---|---|
(generated) | CATEGORIES |
cloudAccount.cloudProvider | CLOUD_PROVIDER |
cloudAccount.externalId | SUBSCRIPTION_ID |
cloudAccount.name | SUBSCRIPTION_NAME |
cloudPlatform | CLOUD_PLATFORM |
cloudProviderURL | CLOUD_PROVIDER_URL |
createdAt / graphEntity.properties.creationDate | SOURCE_CREATED_DATE |
externalId | EXTERNAL_ID |
firstSeen | FIRST_SEEN |
graphEntity.properties.accessibleFrom.otherSubscriptions | ACCESSIBLE_FROM_OTHER_SUBSCRIPTIONS |
graphEntity.properties.accessibleFrom.otherVnets | ACCESSIBLE_FROM_OTHER_VNETS |
graphEntity.properties.accessibleFrom.VPN | ACCESSIBLE_FROM_VPN |
graphEntity.properties.applicationEndpoint.validatedOpenPorts | VALIDATED_OPEN_PORTS |
graphEntity.properties.name / native properties | DESCRIPTION |
graphEntity.providerUniqueId | PROVIDER_ID |
graphEntity.providerUniqueId / externalId | UID |
hasAccessToSensitiveData | HAS_ACCESS_TO_SENSITIVE_DATA |
hasAdminPrivileges | HAS_ADMIN_PRIVILEGES |
hasHighPrivileges | HAS_HIGH_PRIVILEGES |
hasSensitiveData | HAS_SENSITIVE_DATA |
isAccessibleFromInternet | IS_ACCESSIBLE_FROM_INTERNET |
isOpenToAllInternet | OPEN_TO_ALL_INTERNET |
lastSeen | LAST_SEEN |
name / graphEntity.properties.name | NAME |
nativeType | NATIVE_TYPE |
projects[].id | PROJECT_IDS |
projects[].name | PROJECT_NAMES |
projects[].name | PROJECTS |
region / graphEntity.properties.region | REGION |
regionLocation | REGION_LOCATION |
resourceGroup.externalId | RESOURCE_GROUP_EXTERNAL_ID |
resourceGroup.id | RESOURCE_GROUP_ID |
status / graphEntity.properties.status | STATUS |
status / graphEntity.properties.status | PROVIDER_STATUS |
status / graphEntity.properties.status | SOURCE_STATUS |
| sync time | LAST_CAPTURED |
tags / graphEntity.properties.tags | TAGS |
technology.name | TECHNOLOGY_NAME |
technology.stackLayer | TECHNOLOGY_STACK_LAYER |
type | RESOURCE_TYPE |
typeFields.instanceType | INSTANCE_TYPE |
updatedAt | SOURCE_LAST_MODIFIED |
Repository Branch
| Source Field Name | SDM Attribute |
|---|---|
(generated) | CATEGORIES |
cloudAccount.cloudProvider | CLOUD_PROVIDER |
cloudAccount.externalId | SUBSCRIPTION_ID |
cloudAccount.name | SUBSCRIPTION_NAME |
cloudPlatform | CLOUD_PLATFORM |
cloudProviderURL | CLOUD_PROVIDER_URL |
createdAt / graphEntity.properties.creationDate | SOURCE_CREATED_DATE |
externalId | EXTERNAL_ID |
firstSeen | FIRST_SEEN |
graphEntity.properties.accessibleFrom.otherSubscriptions | ACCESSIBLE_FROM_OTHER_SUBSCRIPTIONS |
graphEntity.properties.accessibleFrom.otherVnets | ACCESSIBLE_FROM_OTHER_VNETS |
graphEntity.properties.accessibleFrom.VPN | ACCESSIBLE_FROM_VPN |
graphEntity.properties.applicationEndpoint.validatedOpenPorts | VALIDATED_OPEN_PORTS |
graphEntity.properties.name / native properties | DESCRIPTION |
graphEntity.providerUniqueId | PROVIDER_ID |
graphEntity.providerUniqueId / externalId | UID |
hasAccessToSensitiveData | HAS_ACCESS_TO_SENSITIVE_DATA |
hasAdminPrivileges | HAS_ADMIN_PRIVILEGES |
hasHighPrivileges | HAS_HIGH_PRIVILEGES |
hasSensitiveData | HAS_SENSITIVE_DATA |
isAccessibleFromInternet | IS_ACCESSIBLE_FROM_INTERNET |
isOpenToAllInternet | OPEN_TO_ALL_INTERNET |
isUsedOnPrem | IS_USED_ON_PREM |
lastSeen | LAST_SEEN |
name / graphEntity.properties.name | NAME |
nativeType | NATIVE_TYPE |
projects[].id | PROJECT_IDS |
projects[].name | PROJECT_NAMES |
projects[].name | PROJECTS |
region / graphEntity.properties.region | REGION |
regionLocation | REGION_LOCATION |
repoName | REPOSITORY_NAME |
repositoryExternalId | REPOSITORY_ID |
resourceGroup.externalId | RESOURCE_GROUP_EXTERNAL_ID |
resourceGroup.id | RESOURCE_GROUP_ID |
status / graphEntity.properties.status | STATUS |
status / graphEntity.properties.status | PROVIDER_STATUS |
status / graphEntity.properties.status | SOURCE_STATUS |
| sync time | LAST_CAPTURED |
tags / graphEntity.properties.tags | TAGS |
technology.name | TECHNOLOGY_NAME |
technology.stackLayer | TECHNOLOGY_STACK_LAYER |
type | RESOURCE_TYPE |
typeFields.instanceType | INSTANCE_TYPE |
updatedAt | SOURCE_LAST_MODIFIED |
Resource Group
| Source Field Name | SDM Attribute |
|---|---|
(generated) | CATEGORIES |
cloudAccount.cloudProvider | CLOUD_PROVIDER |
cloudAccount.externalId | SUBSCRIPTION_ID |
cloudAccount.name | SUBSCRIPTION_NAME |
cloudPlatform | CLOUD_PLATFORM |
cloudProviderURL | CLOUD_PROVIDER_URL |
createdAt / graphEntity.properties.creationDate | SOURCE_CREATED_DATE |
externalId | EXTERNAL_ID |
firstSeen | FIRST_SEEN |
graphEntity.properties.accessibleFrom.otherSubscriptions | ACCESSIBLE_FROM_OTHER_SUBSCRIPTIONS |
graphEntity.properties.accessibleFrom.otherVnets | ACCESSIBLE_FROM_OTHER_VNETS |
graphEntity.properties.accessibleFrom.VPN | ACCESSIBLE_FROM_VPN |
graphEntity.properties.applicationEndpoint.validatedOpenPorts | VALIDATED_OPEN_PORTS |
graphEntity.properties.name / native properties | DESCRIPTION |
graphEntity.providerUniqueId | PROVIDER_ID |
graphEntity.providerUniqueId / externalId | UID |
hasAccessToSensitiveData | HAS_ACCESS_TO_SENSITIVE_DATA |
hasAdminPrivileges | HAS_ADMIN_PRIVILEGES |
hasHighPrivileges | HAS_HIGH_PRIVILEGES |
hasSensitiveData | HAS_SENSITIVE_DATA |
isAccessibleFromInternet | IS_ACCESSIBLE_FROM_INTERNET |
isOpenToAllInternet | OPEN_TO_ALL_INTERNET |
lastSeen | LAST_SEEN |
name / graphEntity.properties.name | NAME |
nativeType | NATIVE_TYPE |
projects[].id | PROJECT_IDS |
projects[].name | PROJECT_NAMES |
projects[].name | PROJECTS |
region / graphEntity.properties.region | REGION |
regionLocation | REGION_LOCATION |
resourceGroup.externalId | RESOURCE_GROUP_EXTERNAL_ID |
resourceGroup.id | RESOURCE_GROUP_ID |
status / graphEntity.properties.status | STATUS |
status / graphEntity.properties.status | PROVIDER_STATUS |
status / graphEntity.properties.status | SOURCE_STATUS |
| sync time | LAST_CAPTURED |
tags / graphEntity.properties.tags | TAGS |
technology.name | TECHNOLOGY_NAME |
technology.stackLayer | TECHNOLOGY_STACK_LAYER |
type | RESOURCE_TYPE |
typeFields.instanceType | INSTANCE_TYPE |
updatedAt | SOURCE_LAST_MODIFIED |
Route Table
| Source Field Name | SDM Attribute |
|---|---|
(generated) | CATEGORIES |
cloudAccount.cloudProvider | CLOUD_PROVIDER |
cloudAccount.externalId | SUBSCRIPTION_ID |
cloudAccount.name | SUBSCRIPTION_NAME |
cloudPlatform | CLOUD_PLATFORM |
cloudProviderURL | CLOUD_PROVIDER_URL |
createdAt / graphEntity.properties.creationDate | SOURCE_CREATED_DATE |
externalId | EXTERNAL_ID |
firstSeen | FIRST_SEEN |
graphEntity.properties.accessibleFrom.otherSubscriptions | ACCESSIBLE_FROM_OTHER_SUBSCRIPTIONS |
graphEntity.properties.accessibleFrom.otherVnets | ACCESSIBLE_FROM_OTHER_VNETS |
graphEntity.properties.accessibleFrom.VPN | ACCESSIBLE_FROM_VPN |
graphEntity.properties.applicationEndpoint.validatedOpenPorts | VALIDATED_OPEN_PORTS |
graphEntity.properties.name / native properties | DESCRIPTION |
graphEntity.providerUniqueId | PROVIDER_ID |
graphEntity.providerUniqueId / externalId | UID |
hasAccessToSensitiveData | HAS_ACCESS_TO_SENSITIVE_DATA |
hasAdminPrivileges | HAS_ADMIN_PRIVILEGES |
hasHighPrivileges | HAS_HIGH_PRIVILEGES |
hasSensitiveData | HAS_SENSITIVE_DATA |
isAccessibleFromInternet | IS_ACCESSIBLE_FROM_INTERNET |
isOpenToAllInternet | OPEN_TO_ALL_INTERNET |
lastSeen | LAST_SEEN |
name / graphEntity.properties.name | NAME |
nativeType | NATIVE_TYPE |
projects[].id | PROJECT_IDS |
projects[].name | PROJECT_NAMES |
projects[].name | PROJECTS |
region / graphEntity.properties.region | REGION |
regionLocation | REGION_LOCATION |
resourceGroup.externalId | RESOURCE_GROUP_EXTERNAL_ID |
resourceGroup.id | RESOURCE_GROUP_ID |
status / graphEntity.properties.status | STATUS |
status / graphEntity.properties.status | PROVIDER_STATUS |
status / graphEntity.properties.status | SOURCE_STATUS |
| sync time | LAST_CAPTURED |
tags / graphEntity.properties.tags | TAGS |
technology.name | TECHNOLOGY_NAME |
technology.stackLayer | TECHNOLOGY_STACK_LAYER |
type | RESOURCE_TYPE |
typeFields.instanceType | INSTANCE_TYPE |
updatedAt | SOURCE_LAST_MODIFIED |
Secret Container
| Source Field Name | SDM Attribute |
|---|---|
(generated) | CATEGORIES |
cloudAccount.cloudProvider | CLOUD_PROVIDER |
cloudAccount.externalId | SUBSCRIPTION_ID |
cloudAccount.name | SUBSCRIPTION_NAME |
cloudPlatform | CLOUD_PLATFORM |
cloudProviderURL | CLOUD_PROVIDER_URL |
createdAt / graphEntity.properties.creationDate | SOURCE_CREATED_DATE |
externalId | EXTERNAL_ID |
firstSeen | FIRST_SEEN |
graphEntity.properties.accessibleFrom.otherSubscriptions | ACCESSIBLE_FROM_OTHER_SUBSCRIPTIONS |
graphEntity.properties.accessibleFrom.otherVnets | ACCESSIBLE_FROM_OTHER_VNETS |
graphEntity.properties.accessibleFrom.VPN | ACCESSIBLE_FROM_VPN |
graphEntity.properties.applicationEndpoint.validatedOpenPorts | VALIDATED_OPEN_PORTS |
graphEntity.properties.name / native properties | DESCRIPTION |
graphEntity.providerUniqueId | PROVIDER_ID |
graphEntity.providerUniqueId / externalId | UID |
hasAccessToSensitiveData | HAS_ACCESS_TO_SENSITIVE_DATA |
hasAdminPrivileges | HAS_ADMIN_PRIVILEGES |
hasHighPrivileges | HAS_HIGH_PRIVILEGES |
hasSensitiveData | HAS_SENSITIVE_DATA |
isAccessibleFromInternet | IS_ACCESSIBLE_FROM_INTERNET |
isOpenToAllInternet | OPEN_TO_ALL_INTERNET |
lastSeen | LAST_SEEN |
name / graphEntity.properties.name | NAME |
nativeType | NATIVE_TYPE |
projects[].id | PROJECT_IDS |
projects[].name | PROJECT_NAMES |
projects[].name | PROJECTS |
region / graphEntity.properties.region | REGION |
regionLocation | REGION_LOCATION |
resourceGroup.externalId | RESOURCE_GROUP_EXTERNAL_ID |
resourceGroup.id | RESOURCE_GROUP_ID |
status / graphEntity.properties.status | STATUS |
status / graphEntity.properties.status | PROVIDER_STATUS |
status / graphEntity.properties.status | SOURCE_STATUS |
| sync time | LAST_CAPTURED |
tags / graphEntity.properties.tags | TAGS |
technology.name | TECHNOLOGY_NAME |
technology.stackLayer | TECHNOLOGY_STACK_LAYER |
type | RESOURCE_TYPE |
typeFields.instanceType | INSTANCE_TYPE |
updatedAt | SOURCE_LAST_MODIFIED |
Snapshot
| Source Field Name | SDM Attribute |
|---|---|
(generated) | CATEGORIES |
cloudAccount.cloudProvider | CLOUD_PROVIDER |
cloudAccount.externalId | SUBSCRIPTION_ID |
cloudAccount.name | SUBSCRIPTION_NAME |
cloudPlatform | CLOUD_PLATFORM |
cloudProviderURL | CLOUD_PROVIDER_URL |
createdAt / graphEntity.properties.creationDate | SOURCE_CREATED_DATE |
externalId | EXTERNAL_ID |
firstSeen | FIRST_SEEN |
graphEntity.properties.accessibleFrom.otherSubscriptions | ACCESSIBLE_FROM_OTHER_SUBSCRIPTIONS |
graphEntity.properties.accessibleFrom.otherVnets | ACCESSIBLE_FROM_OTHER_VNETS |
graphEntity.properties.accessibleFrom.VPN | ACCESSIBLE_FROM_VPN |
graphEntity.properties.applicationEndpoint.validatedOpenPorts | VALIDATED_OPEN_PORTS |
graphEntity.properties.name / native properties | DESCRIPTION |
graphEntity.providerUniqueId | PROVIDER_ID |
graphEntity.providerUniqueId / externalId | UID |
hasAccessToSensitiveData | HAS_ACCESS_TO_SENSITIVE_DATA |
hasAdminPrivileges | HAS_ADMIN_PRIVILEGES |
hasHighPrivileges | HAS_HIGH_PRIVILEGES |
hasSensitiveData | HAS_SENSITIVE_DATA |
isAccessibleFromInternet | IS_ACCESSIBLE_FROM_INTERNET |
isOpenToAllInternet | OPEN_TO_ALL_INTERNET |
lastSeen | LAST_SEEN |
name / graphEntity.properties.name | NAME |
nativeType | NATIVE_TYPE |
projects[].id | PROJECT_IDS |
projects[].name | PROJECT_NAMES |
projects[].name | PROJECTS |
region / graphEntity.properties.region | REGION |
regionLocation | REGION_LOCATION |
resourceGroup.externalId | RESOURCE_GROUP_EXTERNAL_ID |
resourceGroup.id | RESOURCE_GROUP_ID |
status / graphEntity.properties.status | STATUS |
status / graphEntity.properties.status | PROVIDER_STATUS |
status / graphEntity.properties.status | SOURCE_STATUS |
| sync time | LAST_CAPTURED |
tags / graphEntity.properties.tags | TAGS |
technology.name | TECHNOLOGY_NAME |
technology.stackLayer | TECHNOLOGY_STACK_LAYER |
type | RESOURCE_TYPE |
typeFields.instanceType | INSTANCE_TYPE |
updatedAt | SOURCE_LAST_MODIFIED |
Storage Account
| Source Field Name | SDM Attribute |
|---|---|
(generated) | CATEGORIES |
cloudAccount.cloudProvider | CLOUD_PROVIDER |
cloudAccount.externalId | SUBSCRIPTION_ID |
cloudAccount.name | SUBSCRIPTION_NAME |
cloudPlatform | CLOUD_PLATFORM |
cloudProviderURL | CLOUD_PROVIDER_URL |
createdAt / graphEntity.properties.creationDate | SOURCE_CREATED_DATE |
externalId | EXTERNAL_ID |
firstSeen | FIRST_SEEN |
graphEntity.properties.accessibleFrom.otherSubscriptions | ACCESSIBLE_FROM_OTHER_SUBSCRIPTIONS |
graphEntity.properties.accessibleFrom.otherVnets | ACCESSIBLE_FROM_OTHER_VNETS |
graphEntity.properties.accessibleFrom.VPN | ACCESSIBLE_FROM_VPN |
graphEntity.properties.applicationEndpoint.validatedOpenPorts | VALIDATED_OPEN_PORTS |
graphEntity.properties.name / native properties | DESCRIPTION |
graphEntity.providerUniqueId | PROVIDER_ID |
graphEntity.providerUniqueId / externalId | UID |
hasAccessToSensitiveData | HAS_ACCESS_TO_SENSITIVE_DATA |
hasAdminPrivileges | HAS_ADMIN_PRIVILEGES |
hasHighPrivileges | HAS_HIGH_PRIVILEGES |
hasSensitiveData | HAS_SENSITIVE_DATA |
isAccessibleFromInternet | IS_ACCESSIBLE_FROM_INTERNET |
isOpenToAllInternet | OPEN_TO_ALL_INTERNET |
lastSeen | LAST_SEEN |
name / graphEntity.properties.name | NAME |
nativeType | NATIVE_TYPE |
projects[].id | PROJECT_IDS |
projects[].name | PROJECT_NAMES |
projects[].name | PROJECTS |
region / graphEntity.properties.region | REGION |
regionLocation | REGION_LOCATION |
resourceGroup.externalId | RESOURCE_GROUP_EXTERNAL_ID |
resourceGroup.id | RESOURCE_GROUP_ID |
status / graphEntity.properties.status | STATUS |
status / graphEntity.properties.status | PROVIDER_STATUS |
status / graphEntity.properties.status | SOURCE_STATUS |
| sync time | LAST_CAPTURED |
tags / graphEntity.properties.tags | TAGS |
technology.name | TECHNOLOGY_NAME |
technology.stackLayer | TECHNOLOGY_STACK_LAYER |
type | RESOURCE_TYPE |
typeFields.instanceType | INSTANCE_TYPE |
updatedAt | SOURCE_LAST_MODIFIED |
Subnet
| Source Field Name | SDM Attribute |
|---|---|
(generated) | CATEGORIES |
cloudAccount.cloudProvider | CLOUD_PROVIDER |
cloudAccount.externalId | SUBSCRIPTION_ID |
cloudAccount.name | SUBSCRIPTION_NAME |
cloudPlatform | CLOUD_PLATFORM |
cloudProviderURL | CLOUD_PROVIDER_URL |
createdAt / graphEntity.properties.creationDate | SOURCE_CREATED_DATE |
externalId | EXTERNAL_ID |
firstSeen | FIRST_SEEN |
graphEntity.properties.accessibleFrom.otherSubscriptions | ACCESSIBLE_FROM_OTHER_SUBSCRIPTIONS |
graphEntity.properties.accessibleFrom.otherVnets | ACCESSIBLE_FROM_OTHER_VNETS |
graphEntity.properties.accessibleFrom.VPN | ACCESSIBLE_FROM_VPN |
graphEntity.properties.applicationEndpoint.validatedOpenPorts | VALIDATED_OPEN_PORTS |
graphEntity.properties.name / native properties | DESCRIPTION |
graphEntity.providerUniqueId | PROVIDER_ID |
graphEntity.providerUniqueId / externalId | UID |
hasAccessToSensitiveData | HAS_ACCESS_TO_SENSITIVE_DATA |
hasAdminPrivileges | HAS_ADMIN_PRIVILEGES |
hasHighPrivileges | HAS_HIGH_PRIVILEGES |
hasSensitiveData | HAS_SENSITIVE_DATA |
isAccessibleFromInternet | IS_ACCESSIBLE_FROM_INTERNET |
isOpenToAllInternet | OPEN_TO_ALL_INTERNET |
lastSeen | LAST_SEEN |
name / graphEntity.properties.name | NAME |
nativeType | NATIVE_TYPE |
projects[].id | PROJECT_IDS |
projects[].name | PROJECT_NAMES |
projects[].name | PROJECTS |
region / graphEntity.properties.region | REGION |
regionLocation | REGION_LOCATION |
resourceGroup.externalId | RESOURCE_GROUP_EXTERNAL_ID |
resourceGroup.id | RESOURCE_GROUP_ID |
status / graphEntity.properties.status | STATUS |
status / graphEntity.properties.status | PROVIDER_STATUS |
status / graphEntity.properties.status | SOURCE_STATUS |
| sync time | LAST_CAPTURED |
tags / graphEntity.properties.tags | TAGS |
technology.name | TECHNOLOGY_NAME |
technology.stackLayer | TECHNOLOGY_STACK_LAYER |
type | RESOURCE_TYPE |
typeFields.instanceType | INSTANCE_TYPE |
updatedAt | SOURCE_LAST_MODIFIED |
Subscription
| Source Field Name | SDM Attribute |
|---|---|
(generated) | CATEGORIES |
cloudAccount.cloudProvider | CLOUD_PROVIDER |
cloudAccount.externalId | SUBSCRIPTION_ID |
cloudAccount.name | SUBSCRIPTION_NAME |
cloudPlatform | CLOUD_PLATFORM |
cloudProviderURL | CLOUD_PROVIDER_URL |
createdAt / graphEntity.properties.creationDate | SOURCE_CREATED_DATE |
externalId | EXTERNAL_ID |
firstSeen | FIRST_SEEN |
graphEntity.properties.accessibleFrom.otherSubscriptions | ACCESSIBLE_FROM_OTHER_SUBSCRIPTIONS |
graphEntity.properties.accessibleFrom.otherVnets | ACCESSIBLE_FROM_OTHER_VNETS |
graphEntity.properties.accessibleFrom.VPN | ACCESSIBLE_FROM_VPN |
graphEntity.properties.applicationEndpoint.validatedOpenPorts | VALIDATED_OPEN_PORTS |
graphEntity.properties.name / native properties | DESCRIPTION |
graphEntity.providerUniqueId | PROVIDER_ID |
graphEntity.providerUniqueId / externalId | UID |
hasAccessToSensitiveData | HAS_ACCESS_TO_SENSITIVE_DATA |
hasAdminPrivileges | HAS_ADMIN_PRIVILEGES |
hasHighPrivileges | HAS_HIGH_PRIVILEGES |
hasSensitiveData | HAS_SENSITIVE_DATA |
isAccessibleFromInternet | IS_ACCESSIBLE_FROM_INTERNET |
isOpenToAllInternet | OPEN_TO_ALL_INTERNET |
lastSeen | LAST_SEEN |
name / graphEntity.properties.name | NAME |
nativeType | NATIVE_TYPE |
projects[].id | PROJECT_IDS |
projects[].name | PROJECT_NAMES |
projects[].name | PROJECTS |
region / graphEntity.properties.region | REGION |
regionLocation | REGION_LOCATION |
resourceGroup.externalId | RESOURCE_GROUP_EXTERNAL_ID |
resourceGroup.id | RESOURCE_GROUP_ID |
status / graphEntity.properties.status | STATUS |
status / graphEntity.properties.status | PROVIDER_STATUS |
status / graphEntity.properties.status | SOURCE_STATUS |
| sync time | LAST_CAPTURED |
tags / graphEntity.properties.tags | TAGS |
technology.name | TECHNOLOGY_NAME |
technology.stackLayer | TECHNOLOGY_STACK_LAYER |
type | RESOURCE_TYPE |
typeFields.instanceType | INSTANCE_TYPE |
updatedAt | SOURCE_LAST_MODIFIED |
Volume
| Source Field Name | SDM Attribute |
|---|---|
(generated) | CATEGORIES |
cloudAccount.cloudProvider | CLOUD_PROVIDER |
cloudAccount.externalId | SUBSCRIPTION_ID |
cloudAccount.name | SUBSCRIPTION_NAME |
cloudPlatform | CLOUD_PLATFORM |
cloudProviderURL | CLOUD_PROVIDER_URL |
createdAt / graphEntity.properties.creationDate | SOURCE_CREATED_DATE |
externalId | EXTERNAL_ID |
firstSeen | FIRST_SEEN |
graphEntity.properties.accessibleFrom.otherSubscriptions | ACCESSIBLE_FROM_OTHER_SUBSCRIPTIONS |
graphEntity.properties.accessibleFrom.otherVnets | ACCESSIBLE_FROM_OTHER_VNETS |
graphEntity.properties.accessibleFrom.VPN | ACCESSIBLE_FROM_VPN |
graphEntity.properties.applicationEndpoint.validatedOpenPorts | VALIDATED_OPEN_PORTS |
graphEntity.properties.name / native properties | DESCRIPTION |
graphEntity.providerUniqueId | PROVIDER_ID |
graphEntity.providerUniqueId / externalId | UID |
hasAccessToSensitiveData | HAS_ACCESS_TO_SENSITIVE_DATA |
hasAdminPrivileges | HAS_ADMIN_PRIVILEGES |
hasHighPrivileges | HAS_HIGH_PRIVILEGES |
hasSensitiveData | HAS_SENSITIVE_DATA |
isAccessibleFromInternet | IS_ACCESSIBLE_FROM_INTERNET |
isOpenToAllInternet | OPEN_TO_ALL_INTERNET |
lastSeen | LAST_SEEN |
name / graphEntity.properties.name | NAME |
nativeType | NATIVE_TYPE |
projects[].id | PROJECT_IDS |
projects[].name | PROJECT_NAMES |
projects[].name | PROJECTS |
region / graphEntity.properties.region | REGION |
regionLocation | REGION_LOCATION |
resourceGroup.externalId | RESOURCE_GROUP_EXTERNAL_ID |
resourceGroup.id | RESOURCE_GROUP_ID |
status / graphEntity.properties.status | STATUS |
status / graphEntity.properties.status | PROVIDER_STATUS |
status / graphEntity.properties.status | SOURCE_STATUS |
| sync time | LAST_CAPTURED |
tags / graphEntity.properties.tags | TAGS |
technology.name | TECHNOLOGY_NAME |
technology.stackLayer | TECHNOLOGY_STACK_LAYER |
type | RESOURCE_TYPE |
typeFields.instanceType | INSTANCE_TYPE |
updatedAt | SOURCE_LAST_MODIFIED |
Web Service
| Source Field Name | SDM Attribute |
|---|---|
(generated) | CATEGORIES |
cloudAccount.cloudProvider | CLOUD_PROVIDER |
cloudAccount.externalId | SUBSCRIPTION_ID |
cloudAccount.name | SUBSCRIPTION_NAME |
cloudPlatform | CLOUD_PLATFORM |
cloudProviderURL | CLOUD_PROVIDER_URL |
createdAt / graphEntity.properties.creationDate | SOURCE_CREATED_DATE |
externalId | EXTERNAL_ID |
firstSeen | FIRST_SEEN |
graphEntity.properties.accessibleFrom.otherSubscriptions | ACCESSIBLE_FROM_OTHER_SUBSCRIPTIONS |
graphEntity.properties.accessibleFrom.otherVnets | ACCESSIBLE_FROM_OTHER_VNETS |
graphEntity.properties.accessibleFrom.VPN | ACCESSIBLE_FROM_VPN |
graphEntity.properties.applicationEndpoint.validatedOpenPorts | VALIDATED_OPEN_PORTS |
graphEntity.properties.name / native properties | DESCRIPTION |
graphEntity.providerUniqueId | PROVIDER_ID |
graphEntity.providerUniqueId / externalId | UID |
hasAccessToSensitiveData | HAS_ACCESS_TO_SENSITIVE_DATA |
hasAdminPrivileges | HAS_ADMIN_PRIVILEGES |
hasHighPrivileges | HAS_HIGH_PRIVILEGES |
hasSensitiveData | HAS_SENSITIVE_DATA |
isAccessibleFromInternet | IS_ACCESSIBLE_FROM_INTERNET |
isOpenToAllInternet | OPEN_TO_ALL_INTERNET |
lastSeen | LAST_SEEN |
name / graphEntity.properties.name | NAME |
nativeType | NATIVE_TYPE |
projects[].id | PROJECT_IDS |
projects[].name | PROJECT_NAMES |
projects[].name | PROJECTS |
region / graphEntity.properties.region | REGION |
regionLocation | REGION_LOCATION |
resourceGroup.externalId | RESOURCE_GROUP_EXTERNAL_ID |
resourceGroup.id | RESOURCE_GROUP_ID |
status / graphEntity.properties.status | STATUS |
status / graphEntity.properties.status | PROVIDER_STATUS |
status / graphEntity.properties.status | SOURCE_STATUS |
| sync time | LAST_CAPTURED |
tags / graphEntity.properties.tags | TAGS |
technology.name | TECHNOLOGY_NAME |
technology.stackLayer | TECHNOLOGY_STACK_LAYER |
type | RESOURCE_TYPE |
typeFields.instanceType | INSTANCE_TYPE |
updatedAt | SOURCE_LAST_MODIFIED |
Issue (V1)
| Source Field Name | SDM Attribute |
|---|---|
issue.control.id | TYPE |
issue.control.resolutionRecommendation | RECOMMENDATION |
issue.createdAt | FIRST_SEEN |
issue.dueAt | DUE_AT |
issue.entitySnapshot.name | ENTITY_NAME |
issue.entitySnapshot.nativeType | ENTITY_TYPE |
issue.entitySnapshot.providerId | TARGETS |
issue.id | UID |
issue.id | NAME |
issue.severity | SEVERITY |
issue.status | STATUS |
issue.updatedAt | LAST_SEEN |
issue.url | WIZ_URL |
| sync time | LAST_CAPTURED |
Issue Definition (V1)
| Source Field Name | SDM Attribute |
|---|---|
(generated) | CATEGORIES |
control.description | DESCRIPTION |
control.id | UID |
control.name | NAME |
control.resolutionRecommendation | RECOMMENDATION |
control.securityCategories | SECURITY_CATEGORIES |
control.securitySubCategories | SECURITY_SUBCATEGORIES |
control.severity | SEVERITY |
control.type | TYPE |
| sync time | LAST_CAPTURED |
Issue V2
| Source Field Name | SDM Attribute |
|---|---|
issue.control.id | TYPE |
issue.createdAt | FIRST_SEEN |
issue.dueAt | DUE_AT |
issue.entitySnapshot.name | ENTITY_NAME |
issue.entitySnapshot.nativeType | ENTITY_TYPE |
issue.entitySnapshot.providerId | TARGETS |
issue.id | UID |
issue.id | NAME |
issue.resolutionReason | RESOLUTION_REASON |
issue.severity | SEVERITY |
issue.status | STATUS |
issue.updatedAt | LAST_SEEN |
issue.wizUrl | WIZ_URL |
| sync time | LAST_CAPTURED |
Issue Definition V2
| Source Field Name | SDM Attribute |
|---|---|
(generated) | CATEGORIES |
control.description | DESCRIPTION |
control.enabled | ENABLED |
control.id | UID |
control.name | NAME |
control.resolutionRecommendation | RECOMMENDATION |
control.securitySubCategories[].title | SECURITY_SUB_CATEGORIES |
control.severity | SEVERITY |
| sync time | LAST_CAPTURED |
Configuration Finding
| Source Field Name | SDM Attribute |
|---|---|
| AnalyzedAt | SOURCE_LAST_MODIFIED |
| AnalyzedAt | ANALYZED_AT |
| CloudSourceLink | CLOUD_SOURCE_LINK |
| ConfigurationPath | PATH |
| ConfigurationRuleID / ConfigurationRuleName | TYPE |
| ConfigurationRuleTags | CONFIGURATION_RULE_TAGS |
| CurrentConfigurationValue | CURRENT_CONFIGURATION_VALUE |
| ExpectedConfigurationValue | EXPECTED_CONFIGURATION_VALUE |
| ExpectedConfigurationValue + CurrentConfigurationValue | EVIDENCE |
| FirstDetectedAt | FIRST_SEEN |
| Id | UID |
| LastDetectedAt | LAST_SEEN |
| Note | NOTE |
| ObjectCloudPlatform | OBJECT_CLOUD_PLATFORM |
| ObjectExternalId, ObjectId, ObjectProviderId | TARGETS |
| ObjectName | ENTITY_NAME |
| ObjectNativeType | OBJECT_NATIVE_TYPE |
| ObjectProviderId | OBJECT_PROVIDER_ID |
| ObjectRegion | OBJECT_REGION |
| ObjectTags | OBJECT_TAGS |
| ObjectType | ENTITY_TYPE |
| ProductIds | PRODUCT_IDS |
| Projects | PROJECTS |
| Remediation | RECOMMENDATION |
| ResourceStatus | RESOURCE_STATUS |
| ScopeObjectId | CLOUD_ACCOUNT_ID |
| ScopeObjectProviderId | SCOPE_OBJECT_PROVIDER_ID |
| ScopeObjectType | SCOPE_OBJECT_TYPE |
| Severity | SEVERITY |
| Severity | SOURCE_SEVERITY |
| Severity | SEVERITY_SCORE |
| Status | PROVIDER_STATUS |
| Status | SOURCE_STATUS |
| SubscriptionName | SUBSCRIPTION_NAME |
| sync time | LAST_CAPTURED |
Configuration Finding Definition
| Source Field Name | SDM Attribute |
|---|---|
| Category | CATEGORIES |
| ConfigurationRuleDescription | DESCRIPTION |
| ConfigurationRuleID / ConfigurationRuleName | UID |
| ConfigurationRuleName | NAME |
| Framework | FRAMEWORKS |
| Remediation | RECOMMENDATION |
| Severity | SEVERITY |
| Severity | SOURCE_SEVERITY |
| Severity | SEVERITY_SCORE |
| SubCategory | SUB_CATEGORIES |
| sync time | LAST_CAPTURED |
Vulnerability
| Source Field Name | SDM Attribute |
|---|---|
| Initial Access Potential | INITIAL_ACCESS_POTENTIAL |
| Is High Profile Threat | HIGH_PROFILE_THREAT |
Privileges Required (CVSS V3) | CVSS_V3_PR |
| RuntimeValidationResult | RUNTIME_VALIDATION_RESULT |
| sync time | LAST_CAPTURED |
User Interaction Required (CVSS V3) | CVSS_V3_UI |
vulnerability.criticalRelatedIssuesCount | CRITICAL_RELATED_ISSUES_COUNT |
vulnerability.CVEDescription / vulnerability.name | TYPE |
vulnerability.cvssSeverity | CVSS_SEVERITY |
vulnerability.detailedName | DESCRIPTION |
vulnerability.detailedName | DETAILED_NAME |
vulnerability.detectionMethod | DETECTION_METHOD |
vulnerability.exploitabilityScore | EXPLOITABILITY_SCORE |
vulnerability.firstDetectedAt | FIRST_SEEN |
vulnerability.fixedVersion | FIXED_VERSION |
vulnerability.hasFix | HAS_FIX |
vulnerability.highRelatedIssuesCount | HIGH_RELATED_ISSUES_COUNT |
vulnerability.id | UID |
vulnerability.impactScore | IMPACT_SCORE |
vulnerability.infoRelatedIssuesCount | INFO_RELATED_ISSUES_COUNT |
vulnerability.lastDetectedAt | LAST_SEEN |
vulnerability.limitedInternetAccess | LIMITED_INTERNET_ACCESS |
vulnerability.locationPath | LOCATION_PATH |
vulnerability.lowRelatedIssuesCount | LOW_RELATED_ISSUES_COUNT |
vulnerability.mediumRelatedIssuesCount | MEDIUM_RELATED_ISSUES_COUNT |
vulnerability.name | NAME |
vulnerability.nvdSeverity | NVD_SEVERITY |
vulnerability.resolutionReason | RESOLUTION_REASON |
vulnerability.score | SCORE |
vulnerability.status | STATUS |
vulnerability.vendorSeverity | SEVERITY |
vulnerability.vendorSeverity | VENDOR_SEVERITY |
vulnerability.vulnerableAsset.name | ENTITY_NAME |
vulnerability.vulnerableAsset.providerId | TARGETS |
vulnerability.vulnerableAsset.type | ASSET_TYPE |
vulnerability.vulnerableAsset.type | ENTITY_TYPE |
vulnerability.wideInternetAccess | WIDE_INTERNET_ACCESS |
vulnerability.wizUrl | WIZ_URL |
Vulnerability (by Severity)
| Source Field Name | SDM Attribute |
|---|---|
| Initial Access Potential | INITIAL_ACCESS_POTENTIAL |
| Is High Profile Threat | HIGH_PROFILE_THREAT |
Privileges Required (CVSS V3) | CVSS_V3_PR |
| RuntimeValidationResult | RUNTIME_VALIDATION_RESULT |
| sync time | LAST_CAPTURED |
User Interaction Required (CVSS V3) | CVSS_V3_UI |
vulnerability.criticalRelatedIssuesCount | CRITICAL_RELATED_ISSUES_COUNT |
vulnerability.CVEDescription / vulnerability.name | TYPE |
vulnerability.cvssSeverity | CVSS_SEVERITY |
vulnerability.detailedName | DESCRIPTION |
vulnerability.detailedName | DETAILED_NAME |
vulnerability.detectionMethod | DETECTION_METHOD |
vulnerability.exploitabilityScore | EXPLOITABILITY_SCORE |
vulnerability.firstDetectedAt | FIRST_SEEN |
vulnerability.fixedVersion | FIXED_VERSION |
vulnerability.hasFix | HAS_FIX |
vulnerability.highRelatedIssuesCount | HIGH_RELATED_ISSUES_COUNT |
vulnerability.id | UID |
vulnerability.impactScore | IMPACT_SCORE |
vulnerability.infoRelatedIssuesCount | INFO_RELATED_ISSUES_COUNT |
vulnerability.lastDetectedAt | LAST_SEEN |
vulnerability.limitedInternetAccess | LIMITED_INTERNET_ACCESS |
vulnerability.locationPath | LOCATION_PATH |
vulnerability.lowRelatedIssuesCount | LOW_RELATED_ISSUES_COUNT |
vulnerability.mediumRelatedIssuesCount | MEDIUM_RELATED_ISSUES_COUNT |
vulnerability.name | NAME |
vulnerability.nvdSeverity | NVD_SEVERITY |
vulnerability.resolutionReason | RESOLUTION_REASON |
vulnerability.score | SCORE |
vulnerability.status | STATUS |
vulnerability.vendorSeverity | SEVERITY |
vulnerability.vendorSeverity | VENDOR_SEVERITY |
vulnerability.vulnerableAsset.name | ENTITY_NAME |
vulnerability.vulnerableAsset.providerId | TARGETS |
vulnerability.vulnerableAsset.type | ASSET_TYPE |
vulnerability.vulnerableAsset.type | ENTITY_TYPE |
vulnerability.wideInternetAccess | WIDE_INTERNET_ACCESS |
vulnerability.wizUrl | WIZ_URL |
Vulnerability Definition
| Source Field Name | SDM Attribute |
|---|---|
(generated) | CATEGORIES |
| sync time | LAST_CAPTURED |
vulnerability.CVEDescription / vulnerability.description | DESCRIPTION |
vulnerability.exploitabilityScore | EXPLOITABILITY_SCORE |
vulnerability.exploitable | HAS_EXPLOIT |
vulnerability.name | UID |
vulnerability.name | NAME |
vulnerability.remediation | RECOMMENDATION |
vulnerability.score | SCORE |
vulnerability.vendorSeverity | SEVERITY |
Secret Finding
| Source Field Name | SDM Attribute |
|---|---|
| applicationServices / relatedApplicationServices | APPLICATION_SERVICES / RELATED_APPLICATION_SERVICES |
codeToCloudPipelineStage | CODE_TO_CLOUD_PIPELINE_STAGE |
confidence | CONFIDENCE |
environments | ENVIRONMENTS |
firstSeenAt | FIRST_FOUND |
id | UID |
| isEncrypted / isManaged | IS_ENCRYPTED / IS_MANAGED |
lastSeenAt | LAST_FOUND |
path | PATH |
projects | PROJECTS |
relatedIssueAnalytics.*SeverityCount, issueCount | *_RELATED_ISSUES_COUNT |
resolutionReason | RESOLUTION_REASON |
resolvedAt | LAST_FIXED |
resource.cloudAccount.*, resource.cloudProviderURL | CLOUD_ACCOUNT_ID / CLOUD_ACCOUNT_NAME / CLOUD_PROVIDER / CLOUD_PROVIDER_URL |
resource.id, resource.externalId, repo / registry IDs | TARGETS |
resource.typedProperties.isDefaultBranch | IS_DEFAULT_BRANCH |
resource.typedProperties.networkProperties.has*InternetExposure | WIDE_INTERNET_ACCESS / LIMITED_INTERNET_ACCESS |
resource.typedProperties.registry.{id,name} | CONTAINER_REGISTRY_* |
resource.typedProperties.repository.public / archived | IS_PUBLIC_REPOSITORY / IS_ARCHIVED_REPOSITORY |
resource.typedProperties.repository.{id,name,platform} | CODE_REPOSITORY_* |
resource.{id,name,type,nativeType,region,status,tags} | RESOURCE_* |
rule.id (fallback rule.name, type) | TYPE |
scanType | SCAN_TYPE |
secretDataId | SECRET_DATA_ID |
severity | SEVERITY / SOURCE_SEVERITY / SEVERITY_SCORE |
status | STATUS / SOURCE_STATUS / PROVIDER_STATUS / STATUS_CATEGORY |
| sync time | LAST_CAPTURED |
type | SECRET_TYPE |
validationStatus | VALIDATION_STATUS |
| vcsCodeAuthors / vcsCodeOwners | VCS_CODE_AUTHORS / VCS_CODE_OWNERS |
Secret Finding Definition
| Source Field Name | SDM Attribute |
|---|---|
["Secret", rule.type] | CATEGORIES |
rule.description | DESCRIPTION |
rule.id (fallback rule.name, type) | UID |
rule.name | NAME |
rule.remediationInstructions | RECOMMENDATION |
rule.severity | SEVERITY / SOURCE_SEVERITY / SEVERITY_SCORE |
| sync time | LAST_CAPTURED |
type | TAGS |
Operations & API
Expand each connector object to see its operation options, delta-sync behavior, and the API it uses. See connector operation options for how to apply operation options (keys and values are case-sensitive).
Virtual Machine
Operation options
| Option | Type | Default | Description |
|---|---|---|---|
projectId | String | * | Filter by project ID. Accepts a comma-separated list of project IDs; the connector runs one report per project and merges the results. Unset or * syncs all projects. |
subscriptionId | String | — | Filter by cloud subscription/account ID |
region | String | — | Filter by cloud region |
cloudPlatform | String | — | Filter by cloud platform (AWS, Azure, GCP, etc.) |
technologyName | String | — | Filter by technology name (comma-separated, e.g., AWS EC2 Instance,Azure Compute Virtual Machine) |
technologyCategory | String | — | Filter by technology category (comma-separated) |
technologyStackLayer | String | — | Filter by technology stack layer (comma-separated). Valid values: APPLICATION_AND_DATA, CLOUD_ENTITLEMENTS, DATA_STORES, MACHINE_LEARNING_AND_AI, NETWORKING, SECURITY_AND_IDENTITY |
hasAdminPrivileges | Boolean | — | Filter by admin privileges |
hasHighPrivileges | Boolean | — | Filter by high privileges |
hasSensitiveData | Boolean | — | Filter by sensitive data |
hasAccessToSensitiveData | Boolean | — | Filter by access to sensitive data |
isAccessibleFromInternet | Boolean | — | Filter by internet accessibility |
isOpenToAllInternet | Boolean | — | Filter by open to all internet |
hasNote | Boolean | — | Filter by presence of notes |
Delta sync
Not supported. The connector performs a full sync of Virtual Machine on every run and applies no incremental date filter.
API
- Type: V2 Report (CSV download)
mutation CreateReport($input: CreateReportInput!) {
operation: createReport(input: $input) {
node: report {
id
}
}
}
note
Note: The technology filter (technologyV2) is sent server-side to the Wiz Reports API. When any of technologyName, technologyCategory, or technologyStackLayer is specified, the connector builds a technologyV2 filter object in the report creation request. This filters at the API level, reducing the dataset before download.
note
- Assets that Wiz has not reported for 30 consecutive days are automatically marked inactive, reflecting resources that have likely been decommissioned.
- To use lifecycle management, all five asset models (Container, Container Image, Serverless, Virtual Machine, Repository Branch) must be enabled.
Container
Operation options
| Option | Type | Default | Description |
|---|---|---|---|
projectId | String | * | Filter by project ID. Accepts a comma-separated list of project IDs; the connector runs one report per project and merges the results. Unset or * syncs all projects. |
subscriptionId | String | — | Filter by cloud subscription/account ID |
region | String | — | Filter by cloud region |
cloudPlatform | String | — | Filter by cloud platform (AWS, Azure, GCP, etc.) |
technologyName | String | — | Filter by technology name (comma-separated, e.g., AWS EC2 Instance,Azure Compute Virtual Machine) |
technologyCategory | String | — | Filter by technology category (comma-separated) |
technologyStackLayer | String | — | Filter by technology stack layer (comma-separated). Valid values: APPLICATION_AND_DATA, CLOUD_ENTITLEMENTS, DATA_STORES, MACHINE_LEARNING_AND_AI, NETWORKING, SECURITY_AND_IDENTITY |
hasAdminPrivileges | Boolean | — | Filter by admin privileges |
hasHighPrivileges | Boolean | — | Filter by high privileges |
hasSensitiveData | Boolean | — | Filter by sensitive data |
hasAccessToSensitiveData | Boolean | — | Filter by access to sensitive data |
isAccessibleFromInternet | Boolean | — | Filter by internet accessibility |
isOpenToAllInternet | Boolean | — | Filter by open to all internet |
hasNote | Boolean | — | Filter by presence of notes |
Delta sync
Not supported. The connector performs a full sync of Container on every run and applies no incremental date filter.
API
- Type: V2 Report (CSV download)
mutation CreateReport($input: CreateReportInput!) {
operation: createReport(input: $input) {
node: report {
id
}
}
}
note
Note: The technology filter (technologyV2) is sent server-side to the Wiz Reports API. When any of technologyName, technologyCategory, or technologyStackLayer is specified, the connector builds a technologyV2 filter object in the report creation request. This filters at the API level, reducing the dataset before download.
note
- Assets that Wiz has not reported for 30 consecutive days are automatically marked inactive, reflecting resources that have likely been decommissioned.
- To use lifecycle management, all five asset models (Container, Container Image, Serverless, Virtual Machine, Repository Branch) must be enabled.
Container Image
Operation options
| Option | Type | Default | Description |
|---|---|---|---|
projectId | String | * | Filter by project ID. Accepts a comma-separated list of project IDs; the connector runs one report per project and merges the results. Unset or * syncs all projects. |
subscriptionId | String | — | Filter by cloud subscription/account ID |
region | String | — | Filter by cloud region |
cloudPlatform | String | — | Filter by cloud platform (AWS, Azure, GCP, etc.) |
technologyName | String | — | Filter by technology name (comma-separated, e.g., AWS EC2 Instance,Azure Compute Virtual Machine) |
technologyCategory | String | — | Filter by technology category (comma-separated) |
technologyStackLayer | String | — | Filter by technology stack layer (comma-separated). Valid values: APPLICATION_AND_DATA, CLOUD_ENTITLEMENTS, DATA_STORES, MACHINE_LEARNING_AND_AI, NETWORKING, SECURITY_AND_IDENTITY |
hasAdminPrivileges | Boolean | — | Filter by admin privileges |
hasHighPrivileges | Boolean | — | Filter by high privileges |
hasSensitiveData | Boolean | — | Filter by sensitive data |
hasAccessToSensitiveData | Boolean | — | Filter by access to sensitive data |
isAccessibleFromInternet | Boolean | — | Filter by internet accessibility |
isOpenToAllInternet | Boolean | — | Filter by open to all internet |
hasNote | Boolean | — | Filter by presence of notes |
Delta sync
Not supported. The connector performs a full sync of Container Image on every run and applies no incremental date filter.
API
- Type: V2 Report (CSV download)
mutation CreateReport($input: CreateReportInput!) {
operation: createReport(input: $input) {
node: report {
id
}
}
}
note
Note: The technology filter (technologyV2) is sent server-side to the Wiz Reports API. When any of technologyName, technologyCategory, or technologyStackLayer is specified, the connector builds a technologyV2 filter object in the report creation request. This filters at the API level, reducing the dataset before download.
note
- Assets that Wiz has not reported for 30 consecutive days are automatically marked inactive, reflecting resources that have likely been decommissioned.
- To use lifecycle management, all five asset models (Container, Container Image, Serverless, Virtual Machine, Repository Branch) must be enabled.
Database Server
Operation options
| Option | Type | Default | Description |
|---|---|---|---|
projectId | String | * | Filter by project ID. Accepts a comma-separated list of project IDs; the connector runs one report per project and merges the results. Unset or * syncs all projects. |
subscriptionId | String | — | Filter by cloud subscription/account ID |
region | String | — | Filter by cloud region |
cloudPlatform | String | — | Filter by cloud platform (AWS, Azure, GCP, etc.) |
technologyName | String | — | Filter by technology name (comma-separated, e.g., AWS EC2 Instance,Azure Compute Virtual Machine) |
technologyCategory | String | — | Filter by technology category (comma-separated) |
technologyStackLayer | String | — | Filter by technology stack layer (comma-separated). Valid values: APPLICATION_AND_DATA, CLOUD_ENTITLEMENTS, DATA_STORES, MACHINE_LEARNING_AND_AI, NETWORKING, SECURITY_AND_IDENTITY |
hasAdminPrivileges | Boolean | — | Filter by admin privileges |
hasHighPrivileges | Boolean | — | Filter by high privileges |
hasSensitiveData | Boolean | — | Filter by sensitive data |
hasAccessToSensitiveData | Boolean | — | Filter by access to sensitive data |
isAccessibleFromInternet | Boolean | — | Filter by internet accessibility |
isOpenToAllInternet | Boolean | — | Filter by open to all internet |
hasNote | Boolean | — | Filter by presence of notes |
Delta sync
Not supported. The connector performs a full sync of Database Server on every run and applies no incremental date filter.
API
- Type: V2 Report (CSV download)
mutation CreateReport($input: CreateReportInput!) {
operation: createReport(input: $input) {
node: report {
id
}
}
}
note
Note: The technology filter (technologyV2) is sent server-side to the Wiz Reports API. When any of technologyName, technologyCategory, or technologyStackLayer is specified, the connector builds a technologyV2 filter object in the report creation request. This filters at the API level, reducing the dataset before download.
Serverless
Operation options
| Option | Type | Default | Description |
|---|---|---|---|
projectId | String | * | Filter by project ID. Accepts a comma-separated list of project IDs; the connector runs one report per project and merges the results. Unset or * syncs all projects. |
subscriptionId | String | — | Filter by cloud subscription/account ID |
region | String | — | Filter by cloud region |
cloudPlatform | String | — | Filter by cloud platform (AWS, Azure, GCP, etc.) |
technologyName | String | — | Filter by technology name (comma-separated, e.g., AWS EC2 Instance,Azure Compute Virtual Machine) |
technologyCategory | String | — | Filter by technology category (comma-separated) |
technologyStackLayer | String | — | Filter by technology stack layer (comma-separated). Valid values: APPLICATION_AND_DATA, CLOUD_ENTITLEMENTS, DATA_STORES, MACHINE_LEARNING_AND_AI, NETWORKING, SECURITY_AND_IDENTITY |
hasAdminPrivileges | Boolean | — | Filter by admin privileges |
hasHighPrivileges | Boolean | — | Filter by high privileges |
hasSensitiveData | Boolean | — | Filter by sensitive data |
hasAccessToSensitiveData | Boolean | — | Filter by access to sensitive data |
isAccessibleFromInternet | Boolean | — | Filter by internet accessibility |
isOpenToAllInternet | Boolean | — | Filter by open to all internet |
hasNote | Boolean | — | Filter by presence of notes |
Delta sync
Not supported. The connector performs a full sync of Serverless on every run and applies no incremental date filter.
API
- Type: V2 Report (CSV download)
mutation CreateReport($input: CreateReportInput!) {
operation: createReport(input: $input) {
node: report {
id
}
}
}
note
Note: The technology filter (technologyV2) is sent server-side to the Wiz Reports API. When any of technologyName, technologyCategory, or technologyStackLayer is specified, the connector builds a technologyV2 filter object in the report creation request. This filters at the API level, reducing the dataset before download.
note
- Assets that Wiz has not reported for 30 consecutive days are automatically marked inactive, reflecting resources that have likely been decommissioned.
- To use lifecycle management, all five asset models (Container, Container Image, Serverless, Virtual Machine, Repository Branch) must be enabled.
Virtual Machine Image
Operation options
| Option | Type | Default | Description |
|---|---|---|---|
projectId | String | * | Filter by project ID. Accepts a comma-separated list of project IDs; the connector runs one report per project and merges the results. Unset or * syncs all projects. |
subscriptionId | String | — | Filter by cloud subscription/account ID |
region | String | — | Filter by cloud region |
cloudPlatform | String | — | Filter by cloud platform (AWS, Azure, GCP, etc.) |
technologyName | String | — | Filter by technology name (comma-separated, e.g., AWS EC2 Instance,Azure Compute Virtual Machine) |
technologyCategory | String | — | Filter by technology category (comma-separated) |
technologyStackLayer | String | — | Filter by technology stack layer (comma-separated). Valid values: APPLICATION_AND_DATA, CLOUD_ENTITLEMENTS, DATA_STORES, MACHINE_LEARNING_AND_AI, NETWORKING, SECURITY_AND_IDENTITY |
hasAdminPrivileges | Boolean | — | Filter by admin privileges |
hasHighPrivileges | Boolean | — | Filter by high privileges |
hasSensitiveData | Boolean | — | Filter by sensitive data |
hasAccessToSensitiveData | Boolean | — | Filter by access to sensitive data |
isAccessibleFromInternet | Boolean | — | Filter by internet accessibility |
isOpenToAllInternet | Boolean | — | Filter by open to all internet |
hasNote | Boolean | — | Filter by presence of notes |
Delta sync
Not supported. The connector performs a full sync of Virtual Machine Image on every run and applies no incremental date filter.
API
- Type: V2 Report (CSV download)
mutation CreateReport($input: CreateReportInput!) {
operation: createReport(input: $input) {
node: report {
id
}
}
}
note
Note: The technology filter (technologyV2) is sent server-side to the Wiz Reports API. When any of technologyName, technologyCategory, or technologyStackLayer is specified, the connector builds a technologyV2 filter object in the report creation request. This filters at the API level, reducing the dataset before download.
Virtual Network
Operation options
| Option | Type | Default | Description |
|---|---|---|---|
projectId | String | * | Filter by project ID. Accepts a comma-separated list of project IDs; the connector runs one report per project and merges the results. Unset or * syncs all projects. |
subscriptionId | String | — | Filter by cloud subscription/account ID |
region | String | — | Filter by cloud region |
cloudPlatform | String | — | Filter by cloud platform (AWS, Azure, GCP, etc.) |
technologyName | String | — | Filter by technology name (comma-separated, e.g., AWS EC2 Instance,Azure Compute Virtual Machine) |
technologyCategory | String | — | Filter by technology category (comma-separated) |
technologyStackLayer | String | — | Filter by technology stack layer (comma-separated). Valid values: APPLICATION_AND_DATA, CLOUD_ENTITLEMENTS, DATA_STORES, MACHINE_LEARNING_AND_AI, NETWORKING, SECURITY_AND_IDENTITY |
hasAdminPrivileges | Boolean | — | Filter by admin privileges |
hasHighPrivileges | Boolean | — | Filter by high privileges |
hasSensitiveData | Boolean | — | Filter by sensitive data |
hasAccessToSensitiveData | Boolean | — | Filter by access to sensitive data |
isAccessibleFromInternet | Boolean | — | Filter by internet accessibility |
isOpenToAllInternet | Boolean | — | Filter by open to all internet |
hasNote | Boolean | — | Filter by presence of notes |
Delta sync
Not supported. The connector performs a full sync of Virtual Network on every run and applies no incremental date filter.
API
- Type: V2 Report (CSV download)
mutation CreateReport($input: CreateReportInput!) {
operation: createReport(input: $input) {
node: report {
id
}
}
}
note
Note: The technology filter (technologyV2) is sent server-side to the Wiz Reports API. When any of technologyName, technologyCategory, or technologyStackLayer is specified, the connector builds a technologyV2 filter object in the report creation request. This filters at the API level, reducing the dataset before download.
Application Endpoint
Operation options
| Option | Type | Default | Description |
|---|---|---|---|
projectId | String | * | Filter by project ID. Accepts a comma-separated list of project IDs; the connector runs one report per project and merges the results. Unset or * syncs all projects. |
subscriptionId | String | — | Filter by cloud subscription/account ID |
region | String | — | Filter by cloud region |
cloudPlatform | String | — | Filter by cloud platform (AWS, Azure, GCP, etc.) |
technologyName | String | — | Filter by technology name (comma-separated, e.g., AWS EC2 Instance,Azure Compute Virtual Machine) |
technologyCategory | String | — | Filter by technology category (comma-separated) |
technologyStackLayer | String | — | Filter by technology stack layer (comma-separated). Valid values: APPLICATION_AND_DATA, CLOUD_ENTITLEMENTS, DATA_STORES, MACHINE_LEARNING_AND_AI, NETWORKING, SECURITY_AND_IDENTITY |
hasAdminPrivileges | Boolean | — | Filter by admin privileges |
hasHighPrivileges | Boolean | — | Filter by high privileges |
hasSensitiveData | Boolean | — | Filter by sensitive data |
hasAccessToSensitiveData | Boolean | — | Filter by access to sensitive data |
isAccessibleFromInternet | Boolean | — | Filter by internet accessibility |
isOpenToAllInternet | Boolean | — | Filter by open to all internet |
hasNote | Boolean | — | Filter by presence of notes |
Delta sync
Not supported. The connector performs a full sync of Application Endpoint on every run and applies no incremental date filter.
API
- Type: V2 Report (CSV download)
mutation CreateReport($input: CreateReportInput!) {
operation: createReport(input: $input) {
node: report {
id
}
}
}
note
Note: The technology filter (technologyV2) is sent server-side to the Wiz Reports API. When any of technologyName, technologyCategory, or technologyStackLayer is specified, the connector builds a technologyV2 filter object in the report creation request. This filters at the API level, reducing the dataset before download.
Bucket
Operation options
| Option | Type | Default | Description |
|---|---|---|---|
projectId | String | * | Filter by project ID. Accepts a comma-separated list of project IDs; the connector runs one report per project and merges the results. Unset or * syncs all projects. |
subscriptionId | String | — | Filter by cloud subscription/account ID |
region | String | — | Filter by cloud region |
cloudPlatform | String | — | Filter by cloud platform (AWS, Azure, GCP, etc.) |
technologyName | String | — | Filter by technology name (comma-separated, e.g., AWS EC2 Instance,Azure Compute Virtual Machine) |
technologyCategory | String | — | Filter by technology category (comma-separated) |
technologyStackLayer | String | — | Filter by technology stack layer (comma-separated). Valid values: APPLICATION_AND_DATA, CLOUD_ENTITLEMENTS, DATA_STORES, MACHINE_LEARNING_AND_AI, NETWORKING, SECURITY_AND_IDENTITY |
hasAdminPrivileges | Boolean | — | Filter by admin privileges |
hasHighPrivileges | Boolean | — | Filter by high privileges |
hasSensitiveData | Boolean | — | Filter by sensitive data |
hasAccessToSensitiveData | Boolean | — | Filter by access to sensitive data |
isAccessibleFromInternet | Boolean | — | Filter by internet accessibility |
isOpenToAllInternet | Boolean | — | Filter by open to all internet |
hasNote | Boolean | — | Filter by presence of notes |
Delta sync
Not supported. The connector performs a full sync of Bucket on every run and applies no incremental date filter.
API
- Type: V2 Report (CSV download)
mutation CreateReport($input: CreateReportInput!) {
operation: createReport(input: $input) {
node: report {
id
}
}
}
note
Note: The technology filter (technologyV2) is sent server-side to the Wiz Reports API. When any of technologyName, technologyCategory, or technologyStackLayer is specified, the connector builds a technologyV2 filter object in the report creation request. This filters at the API level, reducing the dataset before download.
Compute Instance Group
Operation options
| Option | Type | Default | Description |
|---|---|---|---|
projectId | String | * | Filter by project ID. Accepts a comma-separated list of project IDs; the connector runs one report per project and merges the results. Unset or * syncs all projects. |
subscriptionId | String | — | Filter by cloud subscription/account ID |
region | String | — | Filter by cloud region |
cloudPlatform | String | — | Filter by cloud platform (AWS, Azure, GCP, etc.) |
technologyName | String | — | Filter by technology name (comma-separated, e.g., AWS EC2 Instance,Azure Compute Virtual Machine) |
technologyCategory | String | — | Filter by technology category (comma-separated) |
technologyStackLayer | String | — | Filter by technology stack layer (comma-separated). Valid values: APPLICATION_AND_DATA, CLOUD_ENTITLEMENTS, DATA_STORES, MACHINE_LEARNING_AND_AI, NETWORKING, SECURITY_AND_IDENTITY |
hasAdminPrivileges | Boolean | — | Filter by admin privileges |
hasHighPrivileges | Boolean | — | Filter by high privileges |
hasSensitiveData | Boolean | — | Filter by sensitive data |
hasAccessToSensitiveData | Boolean | — | Filter by access to sensitive data |
isAccessibleFromInternet | Boolean | — | Filter by internet accessibility |
isOpenToAllInternet | Boolean | — | Filter by open to all internet |
hasNote | Boolean | — | Filter by presence of notes |
Delta sync
Not supported. The connector performs a full sync of Compute Instance Group on every run and applies no incremental date filter.
API
- Type: V2 Report (CSV download)
mutation CreateReport($input: CreateReportInput!) {
operation: createReport(input: $input) {
node: report {
id
}
}
}
note
Note: The technology filter (technologyV2) is sent server-side to the Wiz Reports API. When any of technologyName, technologyCategory, or technologyStackLayer is specified, the connector builds a technologyV2 filter object in the report creation request. This filters at the API level, reducing the dataset before download.
Access Role
Operation options
| Option | Type | Default | Description |
|---|---|---|---|
projectId | String | * | Filter by project ID. Accepts a comma-separated list of project IDs; the connector runs one report per project and merges the results. Unset or * syncs all projects. |
subscriptionId | String | — | Filter by cloud subscription/account ID |
region | String | — | Filter by cloud region |
cloudPlatform | String | — | Filter by cloud platform (AWS, Azure, GCP, etc.) |
technologyName | String | — | Filter by technology name (comma-separated, e.g., AWS EC2 Instance,Azure Compute Virtual Machine) |
technologyCategory | String | — | Filter by technology category (comma-separated) |
technologyStackLayer | String | — | Filter by technology stack layer (comma-separated). Valid values: APPLICATION_AND_DATA, CLOUD_ENTITLEMENTS, DATA_STORES, MACHINE_LEARNING_AND_AI, NETWORKING, SECURITY_AND_IDENTITY |
hasAdminPrivileges | Boolean | — | Filter by admin privileges |
hasHighPrivileges | Boolean | — | Filter by high privileges |
hasSensitiveData | Boolean | — | Filter by sensitive data |
hasAccessToSensitiveData | Boolean | — | Filter by access to sensitive data |
isAccessibleFromInternet | Boolean | — | Filter by internet accessibility |
isOpenToAllInternet | Boolean | — | Filter by open to all internet |
hasNote | Boolean | — | Filter by presence of notes |
Delta sync
Not supported. The connector performs a full sync of Access Role on every run and applies no incremental date filter.
API
- Type: V2 Report (CSV download)
mutation CreateReport($input: CreateReportInput!) {
operation: createReport(input: $input) {
node: report {
id
}
}
}
note
Note: The technology filter (technologyV2) is sent server-side to the Wiz Reports API. When any of technologyName, technologyCategory, or technologyStackLayer is specified, the connector builds a technologyV2 filter object in the report creation request. This filters at the API level, reducing the dataset before download.
Access Role Binding
Operation options
| Option | Type | Default | Description |
|---|---|---|---|
projectId | String | * | Filter by project ID. Accepts a comma-separated list of project IDs; the connector runs one report per project and merges the results. Unset or * syncs all projects. |
subscriptionId | String | — | Filter by cloud subscription/account ID |
region | String | — | Filter by cloud region |
cloudPlatform | String | — | Filter by cloud platform (AWS, Azure, GCP, etc.) |
technologyName | String | — | Filter by technology name (comma-separated, e.g., AWS EC2 Instance,Azure Compute Virtual Machine) |
technologyCategory | String | — | Filter by technology category (comma-separated) |
technologyStackLayer | String | — | Filter by technology stack layer (comma-separated). Valid values: APPLICATION_AND_DATA, CLOUD_ENTITLEMENTS, DATA_STORES, MACHINE_LEARNING_AND_AI, NETWORKING, SECURITY_AND_IDENTITY |
hasAdminPrivileges | Boolean | — | Filter by admin privileges |
hasHighPrivileges | Boolean | — | Filter by high privileges |
hasSensitiveData | Boolean | — | Filter by sensitive data |
hasAccessToSensitiveData | Boolean | — | Filter by access to sensitive data |
isAccessibleFromInternet | Boolean | — | Filter by internet accessibility |
isOpenToAllInternet | Boolean | — | Filter by open to all internet |
hasNote | Boolean | — | Filter by presence of notes |
Delta sync
Not supported. The connector performs a full sync of Access Role Binding on every run and applies no incremental date filter.
API
- Type: V2 Report (CSV download)
mutation CreateReport($input: CreateReportInput!) {
operation: createReport(input: $input) {
node: report {
id
}
}
}
note
Note: The technology filter (technologyV2) is sent server-side to the Wiz Reports API. When any of technologyName, technologyCategory, or technologyStackLayer is specified, the connector builds a technologyV2 filter object in the report creation request. This filters at the API level, reducing the dataset before download.
API Gateway
Operation options
| Option | Type | Default | Description |
|---|---|---|---|
projectId | String | * | Filter by project ID. Accepts a comma-separated list of project IDs; the connector runs one report per project and merges the results. Unset or * syncs all projects. |
subscriptionId | String | — | Filter by cloud subscription/account ID |
region | String | — | Filter by cloud region |
cloudPlatform | String | — | Filter by cloud platform (AWS, Azure, GCP, etc.) |
technologyName | String | — | Filter by technology name (comma-separated, e.g., AWS EC2 Instance,Azure Compute Virtual Machine) |
technologyCategory | String | — | Filter by technology category (comma-separated) |
technologyStackLayer | String | — | Filter by technology stack layer (comma-separated). Valid values: APPLICATION_AND_DATA, CLOUD_ENTITLEMENTS, DATA_STORES, MACHINE_LEARNING_AND_AI, NETWORKING, SECURITY_AND_IDENTITY |
hasAdminPrivileges | Boolean | — | Filter by admin privileges |
hasHighPrivileges | Boolean | — | Filter by high privileges |
hasSensitiveData | Boolean | — | Filter by sensitive data |
hasAccessToSensitiveData | Boolean | — | Filter by access to sensitive data |
isAccessibleFromInternet | Boolean | — | Filter by internet accessibility |
isOpenToAllInternet | Boolean | — | Filter by open to all internet |
hasNote | Boolean | — | Filter by presence of notes |
Delta sync
Not supported. The connector performs a full sync of API Gateway on every run and applies no incremental date filter.
API
- Type: V2 Report (CSV download)
mutation CreateReport($input: CreateReportInput!) {
operation: createReport(input: $input) {
node: report {
id
}
}
}
note
Note: The technology filter (technologyV2) is sent server-side to the Wiz Reports API. When any of technologyName, technologyCategory, or technologyStackLayer is specified, the connector builds a technologyV2 filter object in the report creation request. This filters at the API level, reducing the dataset before download.
Backup Service
Operation options
| Option | Type | Default | Description |
|---|---|---|---|
projectId | String | * | Filter by project ID. Accepts a comma-separated list of project IDs; the connector runs one report per project and merges the results. Unset or * syncs all projects. |
subscriptionId | String | — | Filter by cloud subscription/account ID |
region | String | — | Filter by cloud region |
cloudPlatform | String | — | Filter by cloud platform (AWS, Azure, GCP, etc.) |
technologyName | String | — | Filter by technology name (comma-separated, e.g., AWS EC2 Instance,Azure Compute Virtual Machine) |
technologyCategory | String | — | Filter by technology category (comma-separated) |
technologyStackLayer | String | — | Filter by technology stack layer (comma-separated). Valid values: APPLICATION_AND_DATA, CLOUD_ENTITLEMENTS, DATA_STORES, MACHINE_LEARNING_AND_AI, NETWORKING, SECURITY_AND_IDENTITY |
hasAdminPrivileges | Boolean | — | Filter by admin privileges |
hasHighPrivileges | Boolean | — | Filter by high privileges |
hasSensitiveData | Boolean | — | Filter by sensitive data |
hasAccessToSensitiveData | Boolean | — | Filter by access to sensitive data |
isAccessibleFromInternet | Boolean | — | Filter by internet accessibility |
isOpenToAllInternet | Boolean | — | Filter by open to all internet |
hasNote | Boolean | — | Filter by presence of notes |
Delta sync
Not supported. The connector performs a full sync of Backup Service on every run and applies no incremental date filter.
API
- Type: V2 Report (CSV download)
mutation CreateReport($input: CreateReportInput!) {
operation: createReport(input: $input) {
node: report {
id
}
}
}
note
Note: The technology filter (technologyV2) is sent server-side to the Wiz Reports API. When any of technologyName, technologyCategory, or technologyStackLayer is specified, the connector builds a technologyV2 filter object in the report creation request. This filters at the API level, reducing the dataset before download.
CI/CD Service
Operation options
| Option | Type | Default | Description |
|---|---|---|---|
projectId | String | * | Filter by project ID. Accepts a comma-separated list of project IDs; the connector runs one report per project and merges the results. Unset or * syncs all projects. |
subscriptionId | String | — | Filter by cloud subscription/account ID |
region | String | — | Filter by cloud region |
cloudPlatform | String | — | Filter by cloud platform (AWS, Azure, GCP, etc.) |
technologyName | String | — | Filter by technology name (comma-separated, e.g., AWS EC2 Instance,Azure Compute Virtual Machine) |
technologyCategory | String | — | Filter by technology category (comma-separated) |
technologyStackLayer | String | — | Filter by technology stack layer (comma-separated). Valid values: APPLICATION_AND_DATA, CLOUD_ENTITLEMENTS, DATA_STORES, MACHINE_LEARNING_AND_AI, NETWORKING, SECURITY_AND_IDENTITY |
hasAdminPrivileges | Boolean | — | Filter by admin privileges |
hasHighPrivileges | Boolean | — | Filter by high privileges |
hasSensitiveData | Boolean | — | Filter by sensitive data |
hasAccessToSensitiveData | Boolean | — | Filter by access to sensitive data |
isAccessibleFromInternet | Boolean | — | Filter by internet accessibility |
isOpenToAllInternet | Boolean | — | Filter by open to all internet |
hasNote | Boolean | — | Filter by presence of notes |
Delta sync
Not supported. The connector performs a full sync of CI/CD Service on every run and applies no incremental date filter.
API
- Type: V2 Report (CSV download)
mutation CreateReport($input: CreateReportInput!) {
operation: createReport(input: $input) {
node: report {
id
}
}
}
note
Note: The technology filter (technologyV2) is sent server-side to the Wiz Reports API. When any of technologyName, technologyCategory, or technologyStackLayer is specified, the connector builds a technologyV2 filter object in the report creation request. This filters at the API level, reducing the dataset before download.
Cloud Log Configuration
Operation options
| Option | Type | Default | Description |
|---|---|---|---|
projectId | String | * | Filter by project ID. Accepts a comma-separated list of project IDs; the connector runs one report per project and merges the results. Unset or * syncs all projects. |
subscriptionId | String | — | Filter by cloud subscription/account ID |
region | String | — | Filter by cloud region |
cloudPlatform | String | — | Filter by cloud platform (AWS, Azure, GCP, etc.) |
technologyName | String | — | Filter by technology name (comma-separated, e.g., AWS EC2 Instance,Azure Compute Virtual Machine) |
technologyCategory | String | — | Filter by technology category (comma-separated) |
technologyStackLayer | String | — | Filter by technology stack layer (comma-separated). Valid values: APPLICATION_AND_DATA, CLOUD_ENTITLEMENTS, DATA_STORES, MACHINE_LEARNING_AND_AI, NETWORKING, SECURITY_AND_IDENTITY |
hasAdminPrivileges | Boolean | — | Filter by admin privileges |
hasHighPrivileges | Boolean | — | Filter by high privileges |
hasSensitiveData | Boolean | — | Filter by sensitive data |
hasAccessToSensitiveData | Boolean | — | Filter by access to sensitive data |
isAccessibleFromInternet | Boolean | — | Filter by internet accessibility |
isOpenToAllInternet | Boolean | — | Filter by open to all internet |
hasNote | Boolean | — | Filter by presence of notes |
Delta sync
Not supported. The connector performs a full sync of Cloud Log Configuration on every run and applies no incremental date filter.
API
- Type: V2 Report (CSV download)
mutation CreateReport($input: CreateReportInput!) {
operation: createReport(input: $input) {
node: report {
id
}
}
}
note
Note: The technology filter (technologyV2) is sent server-side to the Wiz Reports API. When any of technologyName, technologyCategory, or technologyStackLayer is specified, the connector builds a technologyV2 filter object in the report creation request. This filters at the API level, reducing the dataset before download.
Container Registry
Operation options
| Option | Type | Default | Description |
|---|---|---|---|
projectId | String | * | Filter by project ID. Accepts a comma-separated list of project IDs; the connector runs one report per project and merges the results. Unset or * syncs all projects. |
subscriptionId | String | — | Filter by cloud subscription/account ID |
region | String | — | Filter by cloud region |
cloudPlatform | String | — | Filter by cloud platform (AWS, Azure, GCP, etc.) |
technologyName | String | — | Filter by technology name (comma-separated, e.g., AWS EC2 Instance,Azure Compute Virtual Machine) |
technologyCategory | String | — | Filter by technology category (comma-separated) |
technologyStackLayer | String | — | Filter by technology stack layer (comma-separated). Valid values: APPLICATION_AND_DATA, CLOUD_ENTITLEMENTS, DATA_STORES, MACHINE_LEARNING_AND_AI, NETWORKING, SECURITY_AND_IDENTITY |
hasAdminPrivileges | Boolean | — | Filter by admin privileges |
hasHighPrivileges | Boolean | — | Filter by high privileges |
hasSensitiveData | Boolean | — | Filter by sensitive data |
hasAccessToSensitiveData | Boolean | — | Filter by access to sensitive data |
isAccessibleFromInternet | Boolean | — | Filter by internet accessibility |
isOpenToAllInternet | Boolean | — | Filter by open to all internet |
hasNote | Boolean | — | Filter by presence of notes |
Delta sync
Not supported. The connector performs a full sync of Container Registry on every run and applies no incremental date filter.
API
- Type: V2 Report (CSV download)
mutation CreateReport($input: CreateReportInput!) {
operation: createReport(input: $input) {
node: report {
id
}
}
}
note
Note: The technology filter (technologyV2) is sent server-side to the Wiz Reports API. When any of technologyName, technologyCategory, or technologyStackLayer is specified, the connector builds a technologyV2 filter object in the report creation request. This filters at the API level, reducing the dataset before download.
Container Service
Operation options
| Option | Type | Default | Description |
|---|---|---|---|
projectId | String | * | Filter by project ID. Accepts a comma-separated list of project IDs; the connector runs one report per project and merges the results. Unset or * syncs all projects. |
subscriptionId | String | — | Filter by cloud subscription/account ID |
region | String | — | Filter by cloud region |
cloudPlatform | String | — | Filter by cloud platform (AWS, Azure, GCP, etc.) |
technologyName | String | — | Filter by technology name (comma-separated, e.g., AWS EC2 Instance,Azure Compute Virtual Machine) |
technologyCategory | String | — | Filter by technology category (comma-separated) |
technologyStackLayer | String | — | Filter by technology stack layer (comma-separated). Valid values: APPLICATION_AND_DATA, CLOUD_ENTITLEMENTS, DATA_STORES, MACHINE_LEARNING_AND_AI, NETWORKING, SECURITY_AND_IDENTITY |
hasAdminPrivileges | Boolean | — | Filter by admin privileges |
hasHighPrivileges | Boolean | — | Filter by high privileges |
hasSensitiveData | Boolean | — | Filter by sensitive data |
hasAccessToSensitiveData | Boolean | — | Filter by access to sensitive data |
isAccessibleFromInternet | Boolean | — | Filter by internet accessibility |
isOpenToAllInternet | Boolean | — | Filter by open to all internet |
hasNote | Boolean | — | Filter by presence of notes |
Delta sync
Not supported. The connector performs a full sync of Container Service on every run and applies no incremental date filter.
API
- Type: V2 Report (CSV download)
mutation CreateReport($input: CreateReportInput!) {
operation: createReport(input: $input) {
node: report {
id
}
}
}
note
Note: The technology filter (technologyV2) is sent server-side to the Wiz Reports API. When any of technologyName, technologyCategory, or technologyStackLayer is specified, the connector builds a technologyV2 filter object in the report creation request. This filters at the API level, reducing the dataset before download.
DaemonSet
Operation options
| Option | Type | Default | Description |
|---|---|---|---|
projectId | String | * | Filter by project ID. Accepts a comma-separated list of project IDs; the connector runs one report per project and merges the results. Unset or * syncs all projects. |
subscriptionId | String | — | Filter by cloud subscription/account ID |
region | String | — | Filter by cloud region |
cloudPlatform | String | — | Filter by cloud platform (AWS, Azure, GCP, etc.) |
technologyName | String | — | Filter by technology name (comma-separated, e.g., AWS EC2 Instance,Azure Compute Virtual Machine) |
technologyCategory | String | — | Filter by technology category (comma-separated) |
technologyStackLayer | String | — | Filter by technology stack layer (comma-separated). Valid values: APPLICATION_AND_DATA, CLOUD_ENTITLEMENTS, DATA_STORES, MACHINE_LEARNING_AND_AI, NETWORKING, SECURITY_AND_IDENTITY |
hasAdminPrivileges | Boolean | — | Filter by admin privileges |
hasHighPrivileges | Boolean | — | Filter by high privileges |
hasSensitiveData | Boolean | — | Filter by sensitive data |
hasAccessToSensitiveData | Boolean | — | Filter by access to sensitive data |
isAccessibleFromInternet | Boolean | — | Filter by internet accessibility |
isOpenToAllInternet | Boolean | — | Filter by open to all internet |
hasNote | Boolean | — | Filter by presence of notes |
Delta sync
Not supported. The connector performs a full sync of DaemonSet on every run and applies no incremental date filter.
API
- Type: V2 Report (CSV download)
mutation CreateReport($input: CreateReportInput!) {
operation: createReport(input: $input) {
node: report {
id
}
}
}
note
Note: The technology filter (technologyV2) is sent server-side to the Wiz Reports API. When any of technologyName, technologyCategory, or technologyStackLayer is specified, the connector builds a technologyV2 filter object in the report creation request. This filters at the API level, reducing the dataset before download.
Data Workload
Operation options
| Option | Type | Default | Description |
|---|---|---|---|
projectId | String | * | Filter by project ID. Accepts a comma-separated list of project IDs; the connector runs one report per project and merges the results. Unset or * syncs all projects. |
subscriptionId | String | — | Filter by cloud subscription/account ID |
region | String | — | Filter by cloud region |
cloudPlatform | String | — | Filter by cloud platform (AWS, Azure, GCP, etc.) |
technologyName | String | — | Filter by technology name (comma-separated, e.g., AWS EC2 Instance,Azure Compute Virtual Machine) |
technologyCategory | String | — | Filter by technology category (comma-separated) |
technologyStackLayer | String | — | Filter by technology stack layer (comma-separated). Valid values: APPLICATION_AND_DATA, CLOUD_ENTITLEMENTS, DATA_STORES, MACHINE_LEARNING_AND_AI, NETWORKING, SECURITY_AND_IDENTITY |
hasAdminPrivileges | Boolean | — | Filter by admin privileges |
hasHighPrivileges | Boolean | — | Filter by high privileges |
hasSensitiveData | Boolean | — | Filter by sensitive data |
hasAccessToSensitiveData | Boolean | — | Filter by access to sensitive data |
isAccessibleFromInternet | Boolean | — | Filter by internet accessibility |
isOpenToAllInternet | Boolean | — | Filter by open to all internet |
hasNote | Boolean | — | Filter by presence of notes |
Delta sync
Not supported. The connector performs a full sync of Data Workload on every run and applies no incremental date filter.
API
- Type: V2 Report (CSV download)
mutation CreateReport($input: CreateReportInput!) {
operation: createReport(input: $input) {
node: report {
id
}
}
}
note
Note: The technology filter (technologyV2) is sent server-side to the Wiz Reports API. When any of technologyName, technologyCategory, or technologyStackLayer is specified, the connector builds a technologyV2 filter object in the report creation request. This filters at the API level, reducing the dataset before download.
Deployment
Operation options
| Option | Type | Default | Description |
|---|---|---|---|
projectId | String | * | Filter by project ID. Accepts a comma-separated list of project IDs; the connector runs one report per project and merges the results. Unset or * syncs all projects. |
subscriptionId | String | — | Filter by cloud subscription/account ID |
region | String | — | Filter by cloud region |
cloudPlatform | String | — | Filter by cloud platform (AWS, Azure, GCP, etc.) |
technologyName | String | — | Filter by technology name (comma-separated, e.g., AWS EC2 Instance,Azure Compute Virtual Machine) |
technologyCategory | String | — | Filter by technology category (comma-separated) |
technologyStackLayer | String | — | Filter by technology stack layer (comma-separated). Valid values: APPLICATION_AND_DATA, CLOUD_ENTITLEMENTS, DATA_STORES, MACHINE_LEARNING_AND_AI, NETWORKING, SECURITY_AND_IDENTITY |
hasAdminPrivileges | Boolean | — | Filter by admin privileges |
hasHighPrivileges | Boolean | — | Filter by high privileges |
hasSensitiveData | Boolean | — | Filter by sensitive data |
hasAccessToSensitiveData | Boolean | — | Filter by access to sensitive data |
isAccessibleFromInternet | Boolean | — | Filter by internet accessibility |
isOpenToAllInternet | Boolean | — | Filter by open to all internet |
hasNote | Boolean | — | Filter by presence of notes |
Delta sync
Not supported. The connector performs a full sync of Deployment on every run and applies no incremental date filter.
API
- Type: V2 Report (CSV download)
mutation CreateReport($input: CreateReportInput!) {
operation: createReport(input: $input) {
node: report {
id
}
}
}
note
Note: The technology filter (technologyV2) is sent server-side to the Wiz Reports API. When any of technologyName, technologyCategory, or technologyStackLayer is specified, the connector builds a technologyV2 filter object in the report creation request. This filters at the API level, reducing the dataset before download.
Encryption Key
Operation options
| Option | Type | Default | Description |
|---|---|---|---|
projectId | String | * | Filter by project ID. Accepts a comma-separated list of project IDs; the connector runs one report per project and merges the results. Unset or * syncs all projects. |
subscriptionId | String | — | Filter by cloud subscription/account ID |
region | String | — | Filter by cloud region |
cloudPlatform | String | — | Filter by cloud platform (AWS, Azure, GCP, etc.) |
technologyName | String | — | Filter by technology name (comma-separated, e.g., AWS EC2 Instance,Azure Compute Virtual Machine) |
technologyCategory | String | — | Filter by technology category (comma-separated) |
technologyStackLayer | String | — | Filter by technology stack layer (comma-separated). Valid values: APPLICATION_AND_DATA, CLOUD_ENTITLEMENTS, DATA_STORES, MACHINE_LEARNING_AND_AI, NETWORKING, SECURITY_AND_IDENTITY |
hasAdminPrivileges | Boolean | — | Filter by admin privileges |
hasHighPrivileges | Boolean | — | Filter by high privileges |
hasSensitiveData | Boolean | — | Filter by sensitive data |
hasAccessToSensitiveData | Boolean | — | Filter by access to sensitive data |
isAccessibleFromInternet | Boolean | — | Filter by internet accessibility |
isOpenToAllInternet | Boolean | — | Filter by open to all internet |
hasNote | Boolean | — | Filter by presence of notes |
Delta sync
Not supported. The connector performs a full sync of Encryption Key on every run and applies no incremental date filter.
API
- Type: V2 Report (CSV download)
mutation CreateReport($input: CreateReportInput!) {
operation: createReport(input: $input) {
node: report {
id
}
}
}
note
Note: The technology filter (technologyV2) is sent server-side to the Wiz Reports API. When any of technologyName, technologyCategory, or technologyStackLayer is specified, the connector builds a technologyV2 filter object in the report creation request. This filters at the API level, reducing the dataset before download.
File System Service
Operation options
| Option | Type | Default | Description |
|---|---|---|---|
projectId | String | * | Filter by project ID. Accepts a comma-separated list of project IDs; the connector runs one report per project and merges the results. Unset or * syncs all projects. |
subscriptionId | String | — | Filter by cloud subscription/account ID |
region | String | — | Filter by cloud region |
cloudPlatform | String | — | Filter by cloud platform (AWS, Azure, GCP, etc.) |
technologyName | String | — | Filter by technology name (comma-separated, e.g., AWS EC2 Instance,Azure Compute Virtual Machine) |
technologyCategory | String | — | Filter by technology category (comma-separated) |
technologyStackLayer | String | — | Filter by technology stack layer (comma-separated). Valid values: APPLICATION_AND_DATA, CLOUD_ENTITLEMENTS, DATA_STORES, MACHINE_LEARNING_AND_AI, NETWORKING, SECURITY_AND_IDENTITY |
hasAdminPrivileges | Boolean | — | Filter by admin privileges |
hasHighPrivileges | Boolean | — | Filter by high privileges |
hasSensitiveData | Boolean | — | Filter by sensitive data |
hasAccessToSensitiveData | Boolean | — | Filter by access to sensitive data |
isAccessibleFromInternet | Boolean | — | Filter by internet accessibility |
isOpenToAllInternet | Boolean | — | Filter by open to all internet |
hasNote | Boolean | — | Filter by presence of notes |
Delta sync
Not supported. The connector performs a full sync of File System Service on every run and applies no incremental date filter.
API
- Type: V2 Report (CSV download)
mutation CreateReport($input: CreateReportInput!) {
operation: createReport(input: $input) {
node: report {
id
}
}
}
note
Note: The technology filter (technologyV2) is sent server-side to the Wiz Reports API. When any of technologyName, technologyCategory, or technologyStackLayer is specified, the connector builds a technologyV2 filter object in the report creation request. This filters at the API level, reducing the dataset before download.
Firewall
Operation options
| Option | Type | Default | Description |
|---|---|---|---|
projectId | String | * | Filter by project ID. Accepts a comma-separated list of project IDs; the connector runs one report per project and merges the results. Unset or * syncs all projects. |
subscriptionId | String | — | Filter by cloud subscription/account ID |
region | String | — | Filter by cloud region |
cloudPlatform | String | — | Filter by cloud platform (AWS, Azure, GCP, etc.) |
technologyName | String | — | Filter by technology name (comma-separated, e.g., AWS EC2 Instance,Azure Compute Virtual Machine) |
technologyCategory | String | — | Filter by technology category (comma-separated) |
technologyStackLayer | String | — | Filter by technology stack layer (comma-separated). Valid values: APPLICATION_AND_DATA, CLOUD_ENTITLEMENTS, DATA_STORES, MACHINE_LEARNING_AND_AI, NETWORKING, SECURITY_AND_IDENTITY |
hasAdminPrivileges | Boolean | — | Filter by admin privileges |
hasHighPrivileges | Boolean | — | Filter by high privileges |
hasSensitiveData | Boolean | — | Filter by sensitive data |
hasAccessToSensitiveData | Boolean | — | Filter by access to sensitive data |
isAccessibleFromInternet | Boolean | — | Filter by internet accessibility |
isOpenToAllInternet | Boolean | — | Filter by open to all internet |
hasNote | Boolean | — | Filter by presence of notes |
Delta sync
Not supported. The connector performs a full sync of Firewall on every run and applies no incremental date filter.
API
- Type: V2 Report (CSV download)
mutation CreateReport($input: CreateReportInput!) {
operation: createReport(input: $input) {
node: report {
id
}
}
}
note
Note: The technology filter (technologyV2) is sent server-side to the Wiz Reports API. When any of technologyName, technologyCategory, or technologyStackLayer is specified, the connector builds a technologyV2 filter object in the report creation request. This filters at the API level, reducing the dataset before download.
Gateway
Operation options
| Option | Type | Default | Description |
|---|---|---|---|
projectId | String | * | Filter by project ID. Accepts a comma-separated list of project IDs; the connector runs one report per project and merges the results. Unset or * syncs all projects. |
subscriptionId | String | — | Filter by cloud subscription/account ID |
region | String | — | Filter by cloud region |
cloudPlatform | String | — | Filter by cloud platform (AWS, Azure, GCP, etc.) |
technologyName | String | — | Filter by technology name (comma-separated, e.g., AWS EC2 Instance,Azure Compute Virtual Machine) |
technologyCategory | String | — | Filter by technology category (comma-separated) |
technologyStackLayer | String | — | Filter by technology stack layer (comma-separated). Valid values: APPLICATION_AND_DATA, CLOUD_ENTITLEMENTS, DATA_STORES, MACHINE_LEARNING_AND_AI, NETWORKING, SECURITY_AND_IDENTITY |
hasAdminPrivileges | Boolean | — | Filter by admin privileges |
hasHighPrivileges | Boolean | — | Filter by high privileges |
hasSensitiveData | Boolean | — | Filter by sensitive data |
hasAccessToSensitiveData | Boolean | — | Filter by access to sensitive data |
isAccessibleFromInternet | Boolean | — | Filter by internet accessibility |
isOpenToAllInternet | Boolean | — | Filter by open to all internet |
hasNote | Boolean | — | Filter by presence of notes |
Delta sync
Not supported. The connector performs a full sync of Gateway on every run and applies no incremental date filter.
API
- Type: V2 Report (CSV download)
mutation CreateReport($input: CreateReportInput!) {
operation: createReport(input: $input) {
node: report {
id
}
}
}
note
Note: The technology filter (technologyV2) is sent server-side to the Wiz Reports API. When any of technologyName, technologyCategory, or technologyStackLayer is specified, the connector builds a technologyV2 filter object in the report creation request. This filters at the API level, reducing the dataset before download.
Kubernetes Cluster
Operation options
| Option | Type | Default | Description |
|---|---|---|---|
projectId | String | * | Filter by project ID. Accepts a comma-separated list of project IDs; the connector runs one report per project and merges the results. Unset or * syncs all projects. |
subscriptionId | String | — | Filter by cloud subscription/account ID |
region | String | — | Filter by cloud region |
cloudPlatform | String | — | Filter by cloud platform (AWS, Azure, GCP, etc.) |
technologyName | String | — | Filter by technology name (comma-separated, e.g., AWS EC2 Instance,Azure Compute Virtual Machine) |
technologyCategory | String | — | Filter by technology category (comma-separated) |
technologyStackLayer | String | — | Filter by technology stack layer (comma-separated). Valid values: APPLICATION_AND_DATA, CLOUD_ENTITLEMENTS, DATA_STORES, MACHINE_LEARNING_AND_AI, NETWORKING, SECURITY_AND_IDENTITY |
hasAdminPrivileges | Boolean | — | Filter by admin privileges |
hasHighPrivileges | Boolean | — | Filter by high privileges |
hasSensitiveData | Boolean | — | Filter by sensitive data |
hasAccessToSensitiveData | Boolean | — | Filter by access to sensitive data |
isAccessibleFromInternet | Boolean | — | Filter by internet accessibility |
isOpenToAllInternet | Boolean | — | Filter by open to all internet |
hasNote | Boolean | — | Filter by presence of notes |
Delta sync
Not supported. The connector performs a full sync of Kubernetes Cluster on every run and applies no incremental date filter.
API
- Type: V2 Report (CSV download)
mutation CreateReport($input: CreateReportInput!) {
operation: createReport(input: $input) {
node: report {
id
}
}
}
note
Note: The technology filter (technologyV2) is sent server-side to the Wiz Reports API. When any of technologyName, technologyCategory, or technologyStackLayer is specified, the connector builds a technologyV2 filter object in the report creation request. This filters at the API level, reducing the dataset before download.
Load Balancer
Operation options
| Option | Type | Default | Description |
|---|---|---|---|
projectId | String | * | Filter by project ID. Accepts a comma-separated list of project IDs; the connector runs one report per project and merges the results. Unset or * syncs all projects. |
subscriptionId | String | — | Filter by cloud subscription/account ID |
region | String | — | Filter by cloud region |
cloudPlatform | String | — | Filter by cloud platform (AWS, Azure, GCP, etc.) |
technologyName | String | — | Filter by technology name (comma-separated, e.g., AWS EC2 Instance,Azure Compute Virtual Machine) |
technologyCategory | String | — | Filter by technology category (comma-separated) |
technologyStackLayer | String | — | Filter by technology stack layer (comma-separated). Valid values: APPLICATION_AND_DATA, CLOUD_ENTITLEMENTS, DATA_STORES, MACHINE_LEARNING_AND_AI, NETWORKING, SECURITY_AND_IDENTITY |
hasAdminPrivileges | Boolean | — | Filter by admin privileges |
hasHighPrivileges | Boolean | — | Filter by high privileges |
hasSensitiveData | Boolean | — | Filter by sensitive data |
hasAccessToSensitiveData | Boolean | — | Filter by access to sensitive data |
isAccessibleFromInternet | Boolean | — | Filter by internet accessibility |
isOpenToAllInternet | Boolean | — | Filter by open to all internet |
hasNote | Boolean | — | Filter by presence of notes |
Delta sync
Not supported. The connector performs a full sync of Load Balancer on every run and applies no incremental date filter.
API
- Type: V2 Report (CSV download)
mutation CreateReport($input: CreateReportInput!) {
operation: createReport(input: $input) {
node: report {
id
}
}
}
note
Note: The technology filter (technologyV2) is sent server-side to the Wiz Reports API. When any of technologyName, technologyCategory, or technologyStackLayer is specified, the connector builds a technologyV2 filter object in the report creation request. This filters at the API level, reducing the dataset before download.
Messaging Service
Operation options
| Option | Type | Default | Description |
|---|---|---|---|
projectId | String | * | Filter by project ID. Accepts a comma-separated list of project IDs; the connector runs one report per project and merges the results. Unset or * syncs all projects. |
subscriptionId | String | — | Filter by cloud subscription/account ID |
region | String | — | Filter by cloud region |
cloudPlatform | String | — | Filter by cloud platform (AWS, Azure, GCP, etc.) |
technologyName | String | — | Filter by technology name (comma-separated, e.g., AWS EC2 Instance,Azure Compute Virtual Machine) |
technologyCategory | String | — | Filter by technology category (comma-separated) |
technologyStackLayer | String | — | Filter by technology stack layer (comma-separated). Valid values: APPLICATION_AND_DATA, CLOUD_ENTITLEMENTS, DATA_STORES, MACHINE_LEARNING_AND_AI, NETWORKING, SECURITY_AND_IDENTITY |
hasAdminPrivileges | Boolean | — | Filter by admin privileges |
hasHighPrivileges | Boolean | — | Filter by high privileges |
hasSensitiveData | Boolean | — | Filter by sensitive data |
hasAccessToSensitiveData | Boolean | — | Filter by access to sensitive data |
isAccessibleFromInternet | Boolean | — | Filter by internet accessibility |
isOpenToAllInternet | Boolean | — | Filter by open to all internet |
hasNote | Boolean | — | Filter by presence of notes |
Delta sync
Not supported. The connector performs a full sync of Messaging Service on every run and applies no incremental date filter.
API
- Type: V2 Report (CSV download)
mutation CreateReport($input: CreateReportInput!) {
operation: createReport(input: $input) {
node: report {
id
}
}
}
note
Note: The technology filter (technologyV2) is sent server-side to the Wiz Reports API. When any of technologyName, technologyCategory, or technologyStackLayer is specified, the connector builds a technologyV2 filter object in the report creation request. This filters at the API level, reducing the dataset before download.
Pod
Operation options
| Option | Type | Default | Description |
|---|---|---|---|
projectId | String | * | Filter by project ID. Accepts a comma-separated list of project IDs; the connector runs one report per project and merges the results. Unset or * syncs all projects. |
subscriptionId | String | — | Filter by cloud subscription/account ID |
region | String | — | Filter by cloud region |
cloudPlatform | String | — | Filter by cloud platform (AWS, Azure, GCP, etc.) |
technologyName | String | — | Filter by technology name (comma-separated, e.g., AWS EC2 Instance,Azure Compute Virtual Machine) |
technologyCategory | String | — | Filter by technology category (comma-separated) |
technologyStackLayer | String | — | Filter by technology stack layer (comma-separated). Valid values: APPLICATION_AND_DATA, CLOUD_ENTITLEMENTS, DATA_STORES, MACHINE_LEARNING_AND_AI, NETWORKING, SECURITY_AND_IDENTITY |
hasAdminPrivileges | Boolean | — | Filter by admin privileges |
hasHighPrivileges | Boolean | — | Filter by high privileges |
hasSensitiveData | Boolean | — | Filter by sensitive data |
hasAccessToSensitiveData | Boolean | — | Filter by access to sensitive data |
isAccessibleFromInternet | Boolean | — | Filter by internet accessibility |
isOpenToAllInternet | Boolean | — | Filter by open to all internet |
hasNote | Boolean | — | Filter by presence of notes |
Delta sync
Not supported. The connector performs a full sync of Pod on every run and applies no incremental date filter.
API
- Type: V2 Report (CSV download)
mutation CreateReport($input: CreateReportInput!) {
operation: createReport(input: $input) {
node: report {
id
}
}
}
note
Note: The technology filter (technologyV2) is sent server-side to the Wiz Reports API. When any of technologyName, technologyCategory, or technologyStackLayer is specified, the connector builds a technologyV2 filter object in the report creation request. This filters at the API level, reducing the dataset before download.
Raw Access Policy
Operation options
| Option | Type | Default | Description |
|---|---|---|---|
projectId | String | * | Filter by project ID. Accepts a comma-separated list of project IDs; the connector runs one report per project and merges the results. Unset or * syncs all projects. |
subscriptionId | String | — | Filter by cloud subscription/account ID |
region | String | — | Filter by cloud region |
cloudPlatform | String | — | Filter by cloud platform (AWS, Azure, GCP, etc.) |
technologyName | String | — | Filter by technology name (comma-separated, e.g., AWS EC2 Instance,Azure Compute Virtual Machine) |
technologyCategory | String | — | Filter by technology category (comma-separated) |
technologyStackLayer | String | — | Filter by technology stack layer (comma-separated). Valid values: APPLICATION_AND_DATA, CLOUD_ENTITLEMENTS, DATA_STORES, MACHINE_LEARNING_AND_AI, NETWORKING, SECURITY_AND_IDENTITY |
hasAdminPrivileges | Boolean | — | Filter by admin privileges |
hasHighPrivileges | Boolean | — | Filter by high privileges |
hasSensitiveData | Boolean | — | Filter by sensitive data |
hasAccessToSensitiveData | Boolean | — | Filter by access to sensitive data |
isAccessibleFromInternet | Boolean | — | Filter by internet accessibility |
isOpenToAllInternet | Boolean | — | Filter by open to all internet |
hasNote | Boolean | — | Filter by presence of notes |
Delta sync
Not supported. The connector performs a full sync of Raw Access Policy on every run and applies no incremental date filter.
API
- Type: V2 Report (CSV download)
mutation CreateReport($input: CreateReportInput!) {
operation: createReport(input: $input) {
node: report {
id
}
}
}
note
Note: The technology filter (technologyV2) is sent server-side to the Wiz Reports API. When any of technologyName, technologyCategory, or technologyStackLayer is specified, the connector builds a technologyV2 filter object in the report creation request. This filters at the API level, reducing the dataset before download.
Repository Branch
Operation options
| Option | Type | Default | Description |
|---|---|---|---|
projectId | String | * | Filter by project ID. Accepts a comma-separated list of project IDs; the connector runs one report per project and merges the results. Unset or * syncs all projects. |
subscriptionId | String | — | Filter by cloud subscription/account ID |
region | String | — | Filter by cloud region |
cloudPlatform | String | — | Filter by cloud platform (AWS, Azure, GCP, etc.) |
technologyName | String | — | Filter by technology name (comma-separated, e.g., AWS EC2 Instance,Azure Compute Virtual Machine) |
technologyCategory | String | — | Filter by technology category (comma-separated) |
technologyStackLayer | String | — | Filter by technology stack layer (comma-separated). Valid values: APPLICATION_AND_DATA, CLOUD_ENTITLEMENTS, DATA_STORES, MACHINE_LEARNING_AND_AI, NETWORKING, SECURITY_AND_IDENTITY |
hasAdminPrivileges | Boolean | — | Filter by admin privileges |
hasHighPrivileges | Boolean | — | Filter by high privileges |
hasSensitiveData | Boolean | — | Filter by sensitive data |
hasAccessToSensitiveData | Boolean | — | Filter by access to sensitive data |
isAccessibleFromInternet | Boolean | — | Filter by internet accessibility |
isOpenToAllInternet | Boolean | — | Filter by open to all internet |
hasNote | Boolean | — | Filter by presence of notes |
Delta sync
Not supported. The connector performs a full sync of Repository Branch on every run and applies no incremental date filter.
API
- Type: V2 Report (CSV download)
mutation CreateReport($input: CreateReportInput!) {
operation: createReport(input: $input) {
node: report {
id
}
}
}
note
Note: The technology filter (technologyV2) is sent server-side to the Wiz Reports API. When any of technologyName, technologyCategory, or technologyStackLayer is specified, the connector builds a technologyV2 filter object in the report creation request. This filters at the API level, reducing the dataset before download.
note
- Assets that Wiz has not reported for 30 consecutive days are automatically marked inactive, reflecting resources that have likely been decommissioned.
- To use lifecycle management, all five asset models (Container, Container Image, Serverless, Virtual Machine, Repository Branch) must be enabled.
Resource Group
Operation options
| Option | Type | Default | Description |
|---|---|---|---|
projectId | String | * | Filter by project ID. Accepts a comma-separated list of project IDs; the connector runs one report per project and merges the results. Unset or * syncs all projects. |
subscriptionId | String | — | Filter by cloud subscription/account ID |
region | String | — | Filter by cloud region |
cloudPlatform | String | — | Filter by cloud platform (AWS, Azure, GCP, etc.) |
technologyName | String | — | Filter by technology name (comma-separated, e.g., AWS EC2 Instance,Azure Compute Virtual Machine) |
technologyCategory | String | — | Filter by technology category (comma-separated) |
technologyStackLayer | String | — | Filter by technology stack layer (comma-separated). Valid values: APPLICATION_AND_DATA, CLOUD_ENTITLEMENTS, DATA_STORES, MACHINE_LEARNING_AND_AI, NETWORKING, SECURITY_AND_IDENTITY |
hasAdminPrivileges | Boolean | — | Filter by admin privileges |
hasHighPrivileges | Boolean | — | Filter by high privileges |
hasSensitiveData | Boolean | — | Filter by sensitive data |
hasAccessToSensitiveData | Boolean | — | Filter by access to sensitive data |
isAccessibleFromInternet | Boolean | — | Filter by internet accessibility |
isOpenToAllInternet | Boolean | — | Filter by open to all internet |
hasNote | Boolean | — | Filter by presence of notes |
Delta sync
Not supported. The connector performs a full sync of Resource Group on every run and applies no incremental date filter.
API
- Type: V2 Report (CSV download)
mutation CreateReport($input: CreateReportInput!) {
operation: createReport(input: $input) {
node: report {
id
}
}
}
note
Note: The technology filter (technologyV2) is sent server-side to the Wiz Reports API. When any of technologyName, technologyCategory, or technologyStackLayer is specified, the connector builds a technologyV2 filter object in the report creation request. This filters at the API level, reducing the dataset before download.
Route Table
Operation options
| Option | Type | Default | Description |
|---|---|---|---|
projectId | String | * | Filter by project ID. Accepts a comma-separated list of project IDs; the connector runs one report per project and merges the results. Unset or * syncs all projects. |
subscriptionId | String | — | Filter by cloud subscription/account ID |
region | String | — | Filter by cloud region |
cloudPlatform | String | — | Filter by cloud platform (AWS, Azure, GCP, etc.) |
technologyName | String | — | Filter by technology name (comma-separated, e.g., AWS EC2 Instance,Azure Compute Virtual Machine) |
technologyCategory | String | — | Filter by technology category (comma-separated) |
technologyStackLayer | String | — | Filter by technology stack layer (comma-separated). Valid values: APPLICATION_AND_DATA, CLOUD_ENTITLEMENTS, DATA_STORES, MACHINE_LEARNING_AND_AI, NETWORKING, SECURITY_AND_IDENTITY |
hasAdminPrivileges | Boolean | — | Filter by admin privileges |
hasHighPrivileges | Boolean | — | Filter by high privileges |
hasSensitiveData | Boolean | — | Filter by sensitive data |
hasAccessToSensitiveData | Boolean | — | Filter by access to sensitive data |
isAccessibleFromInternet | Boolean | — | Filter by internet accessibility |
isOpenToAllInternet | Boolean | — | Filter by open to all internet |
hasNote | Boolean | — | Filter by presence of notes |
Delta sync
Not supported. The connector performs a full sync of Route Table on every run and applies no incremental date filter.
API
- Type: V2 Report (CSV download)
mutation CreateReport($input: CreateReportInput!) {
operation: createReport(input: $input) {
node: report {
id
}
}
}
note
Note: The technology filter (technologyV2) is sent server-side to the Wiz Reports API. When any of technologyName, technologyCategory, or technologyStackLayer is specified, the connector builds a technologyV2 filter object in the report creation request. This filters at the API level, reducing the dataset before download.
Secret Container
Operation options
| Option | Type | Default | Description |
|---|---|---|---|
projectId | String | * | Filter by project ID. Accepts a comma-separated list of project IDs; the connector runs one report per project and merges the results. Unset or * syncs all projects. |
subscriptionId | String | — | Filter by cloud subscription/account ID |
region | String | — | Filter by cloud region |
cloudPlatform | String | — | Filter by cloud platform (AWS, Azure, GCP, etc.) |
technologyName | String | — | Filter by technology name (comma-separated, e.g., AWS EC2 Instance,Azure Compute Virtual Machine) |
technologyCategory | String | — | Filter by technology category (comma-separated) |
technologyStackLayer | String | — | Filter by technology stack layer (comma-separated). Valid values: APPLICATION_AND_DATA, CLOUD_ENTITLEMENTS, DATA_STORES, MACHINE_LEARNING_AND_AI, NETWORKING, SECURITY_AND_IDENTITY |
hasAdminPrivileges | Boolean | — | Filter by admin privileges |
hasHighPrivileges | Boolean | — | Filter by high privileges |
hasSensitiveData | Boolean | — | Filter by sensitive data |
hasAccessToSensitiveData | Boolean | — | Filter by access to sensitive data |
isAccessibleFromInternet | Boolean | — | Filter by internet accessibility |
isOpenToAllInternet | Boolean | — | Filter by open to all internet |
hasNote | Boolean | — | Filter by presence of notes |
Delta sync
Not supported. The connector performs a full sync of Secret Container on every run and applies no incremental date filter.
API
- Type: V2 Report (CSV download)
mutation CreateReport($input: CreateReportInput!) {
operation: createReport(input: $input) {
node: report {
id
}
}
}
note
Note: The technology filter (technologyV2) is sent server-side to the Wiz Reports API. When any of technologyName, technologyCategory, or technologyStackLayer is specified, the connector builds a technologyV2 filter object in the report creation request. This filters at the API level, reducing the dataset before download.
Snapshot
Operation options
| Option | Type | Default | Description |
|---|---|---|---|
projectId | String | * | Filter by project ID. Accepts a comma-separated list of project IDs; the connector runs one report per project and merges the results. Unset or * syncs all projects. |
subscriptionId | String | — | Filter by cloud subscription/account ID |
region | String | — | Filter by cloud region |
cloudPlatform | String | — | Filter by cloud platform (AWS, Azure, GCP, etc.) |
technologyName | String | — | Filter by technology name (comma-separated, e.g., AWS EC2 Instance,Azure Compute Virtual Machine) |
technologyCategory | String | — | Filter by technology category (comma-separated) |
technologyStackLayer | String | — | Filter by technology stack layer (comma-separated). Valid values: APPLICATION_AND_DATA, CLOUD_ENTITLEMENTS, DATA_STORES, MACHINE_LEARNING_AND_AI, NETWORKING, SECURITY_AND_IDENTITY |
hasAdminPrivileges | Boolean | — | Filter by admin privileges |
hasHighPrivileges | Boolean | — | Filter by high privileges |
hasSensitiveData | Boolean | — | Filter by sensitive data |
hasAccessToSensitiveData | Boolean | — | Filter by access to sensitive data |
isAccessibleFromInternet | Boolean | — | Filter by internet accessibility |
isOpenToAllInternet | Boolean | — | Filter by open to all internet |
hasNote | Boolean | — | Filter by presence of notes |
Delta sync
Not supported. The connector performs a full sync of Snapshot on every run and applies no incremental date filter.
API
- Type: V2 Report (CSV download)
mutation CreateReport($input: CreateReportInput!) {
operation: createReport(input: $input) {
node: report {
id
}
}
}
note
Note: The technology filter (technologyV2) is sent server-side to the Wiz Reports API. When any of technologyName, technologyCategory, or technologyStackLayer is specified, the connector builds a technologyV2 filter object in the report creation request. This filters at the API level, reducing the dataset before download.
Storage Account
Operation options
| Option | Type | Default | Description |
|---|---|---|---|
projectId | String | * | Filter by project ID. Accepts a comma-separated list of project IDs; the connector runs one report per project and merges the results. Unset or * syncs all projects. |
subscriptionId | String | — | Filter by cloud subscription/account ID |
region | String | — | Filter by cloud region |
cloudPlatform | String | — | Filter by cloud platform (AWS, Azure, GCP, etc.) |
technologyName | String | — | Filter by technology name (comma-separated, e.g., AWS EC2 Instance,Azure Compute Virtual Machine) |
technologyCategory | String | — | Filter by technology category (comma-separated) |
technologyStackLayer | String | — | Filter by technology stack layer (comma-separated). Valid values: APPLICATION_AND_DATA, CLOUD_ENTITLEMENTS, DATA_STORES, MACHINE_LEARNING_AND_AI, NETWORKING, SECURITY_AND_IDENTITY |
hasAdminPrivileges | Boolean | — | Filter by admin privileges |
hasHighPrivileges | Boolean | — | Filter by high privileges |
hasSensitiveData | Boolean | — | Filter by sensitive data |
hasAccessToSensitiveData | Boolean | — | Filter by access to sensitive data |
isAccessibleFromInternet | Boolean | — | Filter by internet accessibility |
isOpenToAllInternet | Boolean | — | Filter by open to all internet |
hasNote | Boolean | — | Filter by presence of notes |
Delta sync
Not supported. The connector performs a full sync of Storage Account on every run and applies no incremental date filter.
API
- Type: V2 Report (CSV download)
mutation CreateReport($input: CreateReportInput!) {
operation: createReport(input: $input) {
node: report {
id
}
}
}
note
Note: The technology filter (technologyV2) is sent server-side to the Wiz Reports API. When any of technologyName, technologyCategory, or technologyStackLayer is specified, the connector builds a technologyV2 filter object in the report creation request. This filters at the API level, reducing the dataset before download.
Subnet
Operation options
| Option | Type | Default | Description |
|---|---|---|---|
projectId | String | * | Filter by project ID. Accepts a comma-separated list of project IDs; the connector runs one report per project and merges the results. Unset or * syncs all projects. |
subscriptionId | String | — | Filter by cloud subscription/account ID |
region | String | — | Filter by cloud region |
cloudPlatform | String | — | Filter by cloud platform (AWS, Azure, GCP, etc.) |
technologyName | String | — | Filter by technology name (comma-separated, e.g., AWS EC2 Instance,Azure Compute Virtual Machine) |
technologyCategory | String | — | Filter by technology category (comma-separated) |
technologyStackLayer | String | — | Filter by technology stack layer (comma-separated). Valid values: APPLICATION_AND_DATA, CLOUD_ENTITLEMENTS, DATA_STORES, MACHINE_LEARNING_AND_AI, NETWORKING, SECURITY_AND_IDENTITY |
hasAdminPrivileges | Boolean | — | Filter by admin privileges |
hasHighPrivileges | Boolean | — | Filter by high privileges |
hasSensitiveData | Boolean | — | Filter by sensitive data |
hasAccessToSensitiveData | Boolean | — | Filter by access to sensitive data |
isAccessibleFromInternet | Boolean | — | Filter by internet accessibility |
isOpenToAllInternet | Boolean | — | Filter by open to all internet |
hasNote | Boolean | — | Filter by presence of notes |
Delta sync
Not supported. The connector performs a full sync of Subnet on every run and applies no incremental date filter.
API
- Type: V2 Report (CSV download)
mutation CreateReport($input: CreateReportInput!) {
operation: createReport(input: $input) {
node: report {
id
}
}
}
note
Note: The technology filter (technologyV2) is sent server-side to the Wiz Reports API. When any of technologyName, technologyCategory, or technologyStackLayer is specified, the connector builds a technologyV2 filter object in the report creation request. This filters at the API level, reducing the dataset before download.
Subscription
Operation options
| Option | Type | Default | Description |
|---|---|---|---|
projectId | String | * | Filter by project ID. Accepts a comma-separated list of project IDs; the connector runs one report per project and merges the results. Unset or * syncs all projects. |
subscriptionId | String | — | Filter by cloud subscription/account ID |
region | String | — | Filter by cloud region |
cloudPlatform | String | — | Filter by cloud platform (AWS, Azure, GCP, etc.) |
technologyName | String | — | Filter by technology name (comma-separated, e.g., AWS EC2 Instance,Azure Compute Virtual Machine) |
technologyCategory | String | — | Filter by technology category (comma-separated) |
technologyStackLayer | String | — | Filter by technology stack layer (comma-separated). Valid values: APPLICATION_AND_DATA, CLOUD_ENTITLEMENTS, DATA_STORES, MACHINE_LEARNING_AND_AI, NETWORKING, SECURITY_AND_IDENTITY |
hasAdminPrivileges | Boolean | — | Filter by admin privileges |
hasHighPrivileges | Boolean | — | Filter by high privileges |
hasSensitiveData | Boolean | — | Filter by sensitive data |
hasAccessToSensitiveData | Boolean | — | Filter by access to sensitive data |
isAccessibleFromInternet | Boolean | — | Filter by internet accessibility |
isOpenToAllInternet | Boolean | — | Filter by open to all internet |
hasNote | Boolean | — | Filter by presence of notes |
Delta sync
Not supported. The connector performs a full sync of Subscription on every run and applies no incremental date filter.
API
- Type: V2 Report (CSV download)
mutation CreateReport($input: CreateReportInput!) {
operation: createReport(input: $input) {
node: report {
id
}
}
}
note
Note: The technology filter (technologyV2) is sent server-side to the Wiz Reports API. When any of technologyName, technologyCategory, or technologyStackLayer is specified, the connector builds a technologyV2 filter object in the report creation request. This filters at the API level, reducing the dataset before download.
Volume
Operation options
| Option | Type | Default | Description |
|---|---|---|---|
projectId | String | * | Filter by project ID. Accepts a comma-separated list of project IDs; the connector runs one report per project and merges the results. Unset or * syncs all projects. |
subscriptionId | String | — | Filter by cloud subscription/account ID |
region | String | — | Filter by cloud region |
cloudPlatform | String | — | Filter by cloud platform (AWS, Azure, GCP, etc.) |
technologyName | String | — | Filter by technology name (comma-separated, e.g., AWS EC2 Instance,Azure Compute Virtual Machine) |
technologyCategory | String | — | Filter by technology category (comma-separated) |
technologyStackLayer | String | — | Filter by technology stack layer (comma-separated). Valid values: APPLICATION_AND_DATA, CLOUD_ENTITLEMENTS, DATA_STORES, MACHINE_LEARNING_AND_AI, NETWORKING, SECURITY_AND_IDENTITY |
hasAdminPrivileges | Boolean | — | Filter by admin privileges |
hasHighPrivileges | Boolean | — | Filter by high privileges |
hasSensitiveData | Boolean | — | Filter by sensitive data |
hasAccessToSensitiveData | Boolean | — | Filter by access to sensitive data |
isAccessibleFromInternet | Boolean | — | Filter by internet accessibility |
isOpenToAllInternet | Boolean | — | Filter by open to all internet |
hasNote | Boolean | — | Filter by presence of notes |
Delta sync
Not supported. The connector performs a full sync of Volume on every run and applies no incremental date filter.
API
- Type: V2 Report (CSV download)
mutation CreateReport($input: CreateReportInput!) {
operation: createReport(input: $input) {
node: report {
id
}
}
}
note
Note: The technology filter (technologyV2) is sent server-side to the Wiz Reports API. When any of technologyName, technologyCategory, or technologyStackLayer is specified, the connector builds a technologyV2 filter object in the report creation request. This filters at the API level, reducing the dataset before download.
Web Service
Operation options
| Option | Type | Default | Description |
|---|---|---|---|
projectId | String | * | Filter by project ID. Accepts a comma-separated list of project IDs; the connector runs one report per project and merges the results. Unset or * syncs all projects. |
subscriptionId | String | — | Filter by cloud subscription/account ID |
region | String | — | Filter by cloud region |
cloudPlatform | String | — | Filter by cloud platform (AWS, Azure, GCP, etc.) |
technologyName | String | — | Filter by technology name (comma-separated, e.g., AWS EC2 Instance,Azure Compute Virtual Machine) |
technologyCategory | String | — | Filter by technology category (comma-separated) |
technologyStackLayer | String | — | Filter by technology stack layer (comma-separated). Valid values: APPLICATION_AND_DATA, CLOUD_ENTITLEMENTS, DATA_STORES, MACHINE_LEARNING_AND_AI, NETWORKING, SECURITY_AND_IDENTITY |
hasAdminPrivileges | Boolean | — | Filter by admin privileges |
hasHighPrivileges | Boolean | — | Filter by high privileges |
hasSensitiveData | Boolean | — | Filter by sensitive data |
hasAccessToSensitiveData | Boolean | — | Filter by access to sensitive data |
isAccessibleFromInternet | Boolean | — | Filter by internet accessibility |
isOpenToAllInternet | Boolean | — | Filter by open to all internet |
hasNote | Boolean | — | Filter by presence of notes |
Delta sync
Not supported. The connector performs a full sync of Web Service on every run and applies no incremental date filter.
API
- Type: V2 Report (CSV download)
mutation CreateReport($input: CreateReportInput!) {
operation: createReport(input: $input) {
node: report {
id
}
}
}
note
Note: The technology filter (technologyV2) is sent server-side to the Wiz Reports API. When any of technologyName, technologyCategory, or technologyStackLayer is specified, the connector builds a technologyV2 filter object in the report creation request. This filters at the API level, reducing the dataset before download.
Issue (V1)
Operation options
| Option | Type | Default | Description |
|---|---|---|---|
fetchInterval | String | 30d | Window size for chunking the fetch (e.g. 30d, 90d, 12mo). |
beginningOfTimeLookback | String | 5y | How far back a beginning-of-time sync starts (e.g. 5y, 1825d). |
issueFetchThreads | Integer | 4 | Thread pool size for parallel fetching |
frameworkCategory | String | — | Filter by framework category |
stackLayer | String | — | Filter by stack layer |
projectId | String | — | Filter by project ID (comma-separated list of IDs) |
severity | String | — | Filter by severity |
status | String | — | Filter by status |
resolutionReason | String | — | Filter by resolution reason |
hasServiceTicket | Boolean | — | Filter by service ticket presence |
hasRemediation | Boolean | — | Filter by remediation availability |
hasAutoRemediation | Boolean | — | Filter by auto-remediation availability |
type | String | — | Filter by issue type |
Delta sync
Supported. The connector performs an incremental (delta) sync via the since sync token, filtering on statusChangedAt.
API
- Type: GraphQL query
- Default filters: Filtered by
statusChangedAtsince last sync
query issueFindings($filterBy: IssueFilters, $first: Int, $after: String, $orderBy: IssueOrder) {
page: issuesV2(filterBy: $filterBy, first: $first, after: $after, orderBy: $orderBy) {
nodes {
id
status
severity
createdAt
updatedAt
dueAt
statusChangedAt
resolutionReason
sourceRules {
... on Control {
id
name
description
severity
resolutionRecommendation
securitySubCategories { id title category { id name framework { id name } } }
}
}
}
pageInfo {
hasNextPage
endCursor
}
}
}
Issue Definition (V1)
Operation options
| Option | Type | Default | Description |
|---|---|---|---|
fetchInterval | String | 30d | Window size for chunking the fetch (e.g. 30d, 90d, 12mo). |
beginningOfTimeLookback | String | 5y | How far back a beginning-of-time sync starts (e.g. 5y, 1825d). |
issueFetchThreads | Integer | 4 | Thread pool size for parallel fetching |
frameworkCategory | String | — | Filter by framework category |
stackLayer | String | — | Filter by stack layer |
projectId | String | — | Filter by project ID (comma-separated list of IDs) |
severity | String | — | Filter by severity |
status | String | — | Filter by status |
resolutionReason | String | — | Filter by resolution reason |
hasServiceTicket | Boolean | — | Filter by service ticket presence |
hasRemediation | Boolean | — | Filter by remediation availability |
hasAutoRemediation | Boolean | — | Filter by auto-remediation availability |
type | String | — | Filter by issue type |
Delta sync
Supported. The connector performs an incremental (delta) sync via the since sync token, filtering on statusChangedAt.
API
- Type: GraphQL query
- Default filters: None (definitions extracted from issues)
query issueFindings($filterBy: IssueFilters, $first: Int, $after: String, $orderBy: IssueOrder) {
page: issuesV2(filterBy: $filterBy, first: $first, after: $after, orderBy: $orderBy) {
nodes {
id
status
severity
createdAt
updatedAt
dueAt
statusChangedAt
resolutionReason
sourceRules {
... on Control {
id
name
description
severity
resolutionRecommendation
securitySubCategories { id title category { id name framework { id name } } }
}
}
}
pageInfo {
hasNextPage
endCursor
}
}
}
Issue V2
Operation options
| Option | Type | Default | Description |
|---|---|---|---|
fetchInterval | String | 30d | Window size for chunking the fetch (e.g. 30d, 90d, 12mo). |
beginningOfTimeLookback | String | 5y | How far back a beginning-of-time sync starts (e.g. 5y, 1825d). |
issueFetchThreads | Integer | 4 | Thread pool size for parallel fetching |
frameworkCategory | String | — | Filter by framework category |
stackLayer | String | — | Filter by stack layer |
projectId | String | * | Filter by project ID (comma-separated; one report each) |
severity | String | — | Filter by severity |
status | String | — | Filter by status |
resolutionReason | String | — | Filter by resolution reason |
hasServiceTicket | Boolean | — | Filter by service ticket presence |
hasRemediation | Boolean | — | Filter by remediation availability |
hasAutoRemediation | Boolean | — | Filter by auto-remediation availability |
type | String | — | Filter by issue type |
Delta sync
Supported. The connector performs an incremental (delta) sync via the since sync token, filtering on statusChangedAt.
API
- Type: V2 Report (CSV download)
mutation CreateReport($input: CreateReportInput!) {
operation: createReport(input: $input) {
node: report {
id
}
}
}
Issue Definition V2
Operation options
| Option | Type | Default | Description |
|---|---|---|---|
fetchInterval | String | 30d | Window size for chunking the fetch (e.g. 30d, 90d, 12mo). |
beginningOfTimeLookback | String | 5y | How far back a beginning-of-time sync starts (e.g. 5y, 1825d). |
issueFetchThreads | Integer | 4 | Thread pool size for parallel fetching |
frameworkCategory | String | — | Filter by framework category |
stackLayer | String | — | Filter by stack layer |
projectId | String | * | Filter by project ID (comma-separated; one report each) |
severity | String | — | Filter by severity |
status | String | — | Filter by status |
resolutionReason | String | — | Filter by resolution reason |
hasServiceTicket | Boolean | — | Filter by service ticket presence |
hasRemediation | Boolean | — | Filter by remediation availability |
hasAutoRemediation | Boolean | — | Filter by auto-remediation availability |
type | String | — | Filter by issue type |
Delta sync
Supported. The connector performs an incremental (delta) sync via the since sync token, filtering on statusChangedAt.
API
- Type: V2 Report (CSV download)
mutation CreateReport($input: CreateReportInput!) {
operation: createReport(input: $input) {
node: report {
id
}
}
}
Configuration Finding
Operation options
| Option | Type | Default | Description |
|---|---|---|---|
projectId | String | * | Filter by project ID (comma-separated; * = all) |
severity | String | — | Filter by severity (comma-separated: CRITICAL,HIGH,MEDIUM,LOW,NONE) |
status | String | — | Filter by status (comma-separated: OPEN,RESOLVED,REJECTED) |
frameworkCategory | String | — | Filter by compliance framework category |
hasRemediationInstructions | Boolean | — | Filter by presence of remediation instructions |
ruleId | String | — | Filter by rule IDs (comma-separated) |
ruleTagKey | String | — | Filter by rule tag key (contains match) |
ruleTagValue | String | — | Filter by rule tag value (contains match) |
Delta sync
Supported. The connector performs an incremental (delta) sync via the since sync token, filtering on updatedAt.
API
- Type: V2 Report (CSV download)
mutation CreateReport($input: CreateReportInput!) {
operation: createReport(input: $input) {
node: report {
id
}
}
}
note
- Incremental syncs filter on
updatedAt, which advances whenever a configuration finding is re-detected or changed. This ensures newly created, updated, reclassified, and resolved findings are all captured on each incremental sync. BecauseupdatedAtadvances on every scan, an incremental sync effectively re-fetches all currently detected findings.
Configuration Finding Definition
Operation options
| Option | Type | Default | Description |
|---|---|---|---|
projectId | String | * | Filter by project ID (comma-separated; * = all) |
severity | String | — | Filter by severity (comma-separated: CRITICAL,HIGH,MEDIUM,LOW,NONE) |
status | String | — | Filter by status (comma-separated: OPEN,RESOLVED,REJECTED) |
frameworkCategory | String | — | Filter by compliance framework category |
hasRemediationInstructions | Boolean | — | Filter by presence of remediation instructions |
ruleId | String | — | Filter by rule IDs (comma-separated) |
ruleTagKey | String | — | Filter by rule tag key (contains match) |
ruleTagValue | String | — | Filter by rule tag value (contains match) |
Delta sync
Supported. The connector performs an incremental (delta) sync via the since sync token, filtering on statusChangedAt.
API
- Type: V2 Report (CSV download)
mutation CreateReport($input: CreateReportInput!) {
operation: createReport(input: $input) {
node: report {
id
}
}
}
Vulnerability
Operation options
| Option | Type | Default | Description |
|---|---|---|---|
assetType | String | VIRTUAL_MACHINE,CONTAINER_IMAGE,SERVERLESS,HOSTED_TECHNOLOGY | Comma-separated asset types to scan |
projectId | String | * | Filter by project ID (comma-separated) |
assetHasAdminPrivileges | Boolean | — | Filter by asset admin privileges |
assetHasHighPrivileges | Boolean | — | Filter by asset high privileges |
assetId | String | — | Filter by specific asset ID |
assetStatus | String | — | Filter by asset status |
baseContainerImage | String | — | Filter by base container image |
cnaScore | Float | — | Filter by CNA score |
cloudPlatforms | String | — | Filter by cloud platforms |
containerRegistry | String | — | Filter by container registry |
containerRepository | String | — | Filter by container repository |
containerServiceId | String | — | Filter by container service ID |
detailedName | String | — | Filter by detailed name |
detectionMethod | String | — | Filter by detection method |
effectiveAttackVector | String | — | Filter by effective attack vector |
hasCisaKevExploit | Boolean | — | Filter by CISA KEV exploit |
hasExploit | Boolean | — | Filter by exploit availability |
hasFix | Boolean | — | Filter by fix availability |
hasTriggerableRemediation | Boolean | — | Filter by triggerable remediation |
isAssetAccessibleFromInternet | Boolean | — | Filter by asset internet accessibility |
isAssetOpenToAllInternet | Boolean | — | Filter by asset open to all internet |
isBaseLayer | Boolean | — | Filter by base layer |
isEndOfLife | Boolean | — | Filter by end of life |
isOperatingSystemEndOfLife | Boolean | — | Filter by OS end of life |
isScannedFromRegistry | Boolean | — | Filter by registry scan |
isScannedFromWorkload | Boolean | — | Filter by workload scan |
nvdSeverity | String | — | Filter by NVD severity |
relatedIssueSeverity | String | — | Filter by related issue severity |
score | Float | — | Filter by CVSS score |
status | String | OPEN, REJECTED, RESOLVED | Filter by vulnerability status |
subscriptionExternalId | String | — | Filter by subscription external ID |
validatedInRuntime | Boolean | — | Filter by runtime validation |
vcsRepositoryId | String | — | Filter by VCS repository ID |
vendorSeverity | String | — | Filter by vendor severity |
vulnerabilityExternalId | String | — | Filter by vulnerability external ID |
vulnerabilityId | String | — | Filter by vulnerability ID |
weightedSeverity | String | — | Filter by weighted severity |
Option | Type | Default | Description |
:----------- | :--------- | :-------- | :--------------------------------------------------------------------------------------------------------------------- |
severity | String | — | Filter by severity (comma-separated: CRITICAL,HIGH,MEDIUM,LOW,NONE). If not provided, all severities are returned. |
Delta sync
Supported. The connector performs an incremental (delta) sync via the since sync token, filtering on updatedAt.
API
- Type: V2 Report (CSV download)
- Default filters: No severity filter (all severities), status =
OPEN, REJECTED, RESOLVED
mutation CreateReport($input: CreateReportInput!) {
operation: createReport(input: $input) {
node: report {
id
}
}
}
note
- Findings inherit the lifecycle of the asset they were found on (Container, Container Image, Repository Branch, Serverless, Virtual Machine): when the underlying asset is marked inactive, its findings are retired automatically.
- To use lifecycle management, all five asset models (Container, Container Image, Serverless, Virtual Machine, Repository Branch) must be enabled.
Vulnerability (by Severity)
Operation options
| Option | Type | Default | Description |
|---|---|---|---|
assetType | String | VIRTUAL_MACHINE,CONTAINER_IMAGE,SERVERLESS,HOSTED_TECHNOLOGY | Comma-separated asset types to scan |
projectId | String | * | Filter by project ID (comma-separated) |
assetHasAdminPrivileges | Boolean | — | Filter by asset admin privileges |
assetHasHighPrivileges | Boolean | — | Filter by asset high privileges |
assetId | String | — | Filter by specific asset ID |
assetStatus | String | — | Filter by asset status |
baseContainerImage | String | — | Filter by base container image |
cnaScore | Float | — | Filter by CNA score |
cloudPlatforms | String | — | Filter by cloud platforms |
containerRegistry | String | — | Filter by container registry |
containerRepository | String | — | Filter by container repository |
containerServiceId | String | — | Filter by container service ID |
detailedName | String | — | Filter by detailed name |
detectionMethod | String | — | Filter by detection method |
effectiveAttackVector | String | — | Filter by effective attack vector |
hasCisaKevExploit | Boolean | — | Filter by CISA KEV exploit |
hasExploit | Boolean | — | Filter by exploit availability |
hasFix | Boolean | — | Filter by fix availability |
hasTriggerableRemediation | Boolean | — | Filter by triggerable remediation |
isAssetAccessibleFromInternet | Boolean | — | Filter by asset internet accessibility |
isAssetOpenToAllInternet | Boolean | — | Filter by asset open to all internet |
isBaseLayer | Boolean | — | Filter by base layer |
isEndOfLife | Boolean | — | Filter by end of life |
isOperatingSystemEndOfLife | Boolean | — | Filter by OS end of life |
isScannedFromRegistry | Boolean | — | Filter by registry scan |
isScannedFromWorkload | Boolean | — | Filter by workload scan |
nvdSeverity | String | — | Filter by NVD severity |
relatedIssueSeverity | String | — | Filter by related issue severity |
score | Float | — | Filter by CVSS score |
status | String | OPEN, REJECTED, RESOLVED | Filter by vulnerability status |
subscriptionExternalId | String | — | Filter by subscription external ID |
validatedInRuntime | Boolean | — | Filter by runtime validation |
vcsRepositoryId | String | — | Filter by VCS repository ID |
vendorSeverity | String | — | Filter by vendor severity |
vulnerabilityExternalId | String | — | Filter by vulnerability external ID |
vulnerabilityId | String | — | Filter by vulnerability ID |
weightedSeverity | String | — | Filter by weighted severity |
Delta sync
Supported. The connector performs an incremental (delta) sync via the since sync token, filtering on updatedAt.
API
- Type: V2 Report (CSV download)
- Default filters: Severity filter per model class, status =
OPEN, REJECTED, RESOLVED
mutation CreateReport($input: CreateReportInput!) {
operation: createReport(input: $input) {
node: report {
id
}
}
}
note
- Findings inherit the lifecycle of the asset they were found on (Container, Container Image, Repository Branch, Serverless, Virtual Machine): when the underlying asset is marked inactive, its findings are retired automatically.
- To use lifecycle management, all five asset models (Container, Container Image, Serverless, Virtual Machine, Repository Branch) must be enabled.
Vulnerability Definition
Operation options
This object does not support any operation options.
Delta sync
Not supported. The connector performs a full sync of Vulnerability Definition on every run and applies no incremental date filter.
API
- Type: GraphQL query
- Default filters: None
query VulnerabilityDefinitions($filterBy: VulnerabilityFilters, $first: Int, $after: String) {
page: vulnerabilities(filterBy: $filterBy, first: $first, after: $after) {
nodes {
id
name
description
severity
vendorSeverity
nvdSeverity
baseScore
cnaScore
exploitabilityScore
exploitable
hasCisaKevExploit
categories
cvssv3 { attackComplexity attackVector confidentialityImpact integrityImpact privilegesRequired userInteractionRequired }
sourceFeeds { id name url }
sourceUrl
type
}
pageInfo {
hasNextPage
endCursor
}
}
}
Secret Finding
Operation options
| Option | Type | Default | Description |
|---|---|---|---|
projectId | comma-string | report projectId (one per project) | Wiz project IDs; unset or * syncs all projects |
type | comma-string | secretInstancesParams.filters.type.equals | CERTIFICATE, PASSWORD, PRIVATE_KEY, PUBLIC_KEY, CLOUD_KEY, DB_CONNECTION_STRING, GIT_CREDENTIAL, SAAS_API_KEY, SSH_AUTHORIZED_KEY, PRESIGNED_URL |
severity | comma-string | severity.equals | CRITICAL, HIGH, MEDIUM, LOW, INFORMATIONAL — defaults to CRITICAL,HIGH,MEDIUM,LOW if unset; pass all five values explicitly to include INFORMATIONAL (mostly non-actionable certificate noise that inflates volume 10–100×) |
status | comma-string | status.equals | OPEN, REJECTED, RESOLVED |
validationStatus | comma-string | validationStatus.equals | VALID, UNKNOWN, INVALID |
codeToCloudPipelineStage | comma-string | codeToCloudPipelineStage.equals | CODE, CLOUD, ATTACK_SURFACE |
scanType | comma-string | scanType.equals | VCS_HISTORICAL_SCAN |
environment | comma-string | environment.equals | PRODUCTION, STAGING, DEVELOPMENT, OTHER, TESTING |
resourceType | comma-string | resourceType.equals | e.g. BUCKET, REPOSITORY, VIRTUAL_MACHINE, CONTAINER_IMAGE |
resourceStatus | comma-string | resourceStatus.equals | Active, Inactive, Error |
resourceRegion | comma-string | resourceRegion.equals | e.g. us-east-1 |
resourceId | comma-string | resourceId.equals | Wiz resource UUIDs |
cloudAccount | comma-string | cloudAccount.equals | Cloud account IDs |
codeRepository | comma-string | codeRepository.equals | Code repository IDs |
containerRegistry | comma-string | containerRegistry.equals | Container registry IDs |
containerRepository | comma-string | containerRepository.equals | Container repository IDs |
secretDataId | comma-string | secretDataId.equals | Secret data fingerprint IDs |
vcsCodeAuthor | comma-string | vcsCodeAuthor.equals | VCS author IDs |
relatedIssueSeverity | comma-string | relatedIssueSeverity.equals | CRITICAL, HIGH, MEDIUM, LOW, INFORMATIONAL |
isPublicRepository | boolean | isPublicRepository.equals | true / false |
isArchivedRepository | boolean | isArchivedRepository.equals | true / false |
isDefaultBranch | boolean | isDefaultBranch.equals | true / false |
isShortTerm | boolean | isShortTerm | true / false |
resourceHasLimitedPublicExposure | boolean | resourceHasLimitedPublicExposure.equals | true / false |
resourceHasWidePublicExposure | boolean | resourceHasWidePublicExposure.equals | true / false |
Delta sync
Supported. The connector performs an incremental (delta) sync via the since sync token, filtering on lastUpdatedAt.
API
- Type: V2 Report (CSV download)
mutation CreateReport($input: CreateReportInput!) {
operation: createReport(input: $input) {
node: report {
id
}
}
}
Secret Finding Definition
Operation options
| Option | Type | Default | Description |
|---|---|---|---|
projectId | comma-string | report projectId (one per project) | Wiz project IDs; unset or * syncs all projects |
type | comma-string | secretInstancesParams.filters.type.equals | CERTIFICATE, PASSWORD, PRIVATE_KEY, PUBLIC_KEY, CLOUD_KEY, DB_CONNECTION_STRING, GIT_CREDENTIAL, SAAS_API_KEY, SSH_AUTHORIZED_KEY, PRESIGNED_URL |
severity | comma-string | severity.equals | CRITICAL, HIGH, MEDIUM, LOW, INFORMATIONAL — defaults to CRITICAL,HIGH,MEDIUM,LOW if unset; pass all five values explicitly to include INFORMATIONAL (mostly non-actionable certificate noise that inflates volume 10–100×) |
status | comma-string | status.equals | OPEN, REJECTED, RESOLVED |
validationStatus | comma-string | validationStatus.equals | VALID, UNKNOWN, INVALID |
codeToCloudPipelineStage | comma-string | codeToCloudPipelineStage.equals | CODE, CLOUD, ATTACK_SURFACE |
scanType | comma-string | scanType.equals | VCS_HISTORICAL_SCAN |
environment | comma-string | environment.equals | PRODUCTION, STAGING, DEVELOPMENT, OTHER, TESTING |
resourceType | comma-string | resourceType.equals | e.g. BUCKET, REPOSITORY, VIRTUAL_MACHINE, CONTAINER_IMAGE |
resourceStatus | comma-string | resourceStatus.equals | Active, Inactive, Error |
resourceRegion | comma-string | resourceRegion.equals | e.g. us-east-1 |
resourceId | comma-string | resourceId.equals | Wiz resource UUIDs |
cloudAccount | comma-string | cloudAccount.equals | Cloud account IDs |
codeRepository | comma-string | codeRepository.equals | Code repository IDs |
containerRegistry | comma-string | containerRegistry.equals | Container registry IDs |
containerRepository | comma-string | containerRepository.equals | Container repository IDs |
secretDataId | comma-string | secretDataId.equals | Secret data fingerprint IDs |
vcsCodeAuthor | comma-string | vcsCodeAuthor.equals | VCS author IDs |
relatedIssueSeverity | comma-string | relatedIssueSeverity.equals | CRITICAL, HIGH, MEDIUM, LOW, INFORMATIONAL |
isPublicRepository | boolean | isPublicRepository.equals | true / false |
isArchivedRepository | boolean | isArchivedRepository.equals | true / false |
isDefaultBranch | boolean | isDefaultBranch.equals | true / false |
isShortTerm | boolean | isShortTerm | true / false |
resourceHasLimitedPublicExposure | boolean | resourceHasLimitedPublicExposure.equals | true / false |
resourceHasWidePublicExposure | boolean | resourceHasWidePublicExposure.equals | true / false |
Delta sync
Supported. The connector performs an incremental (delta) sync via the since sync token, filtering on lastUpdatedAt.
API
- Type: V2 Report (CSV download)
mutation CreateReport($input: CreateReportInput!) {
operation: createReport(input: $input) {
node: report {
id
}
}
}
Changelog
The Wiz connector has undergone the following changes:
| Version | Description | Migration Steps |
|---|---|---|
| 3.4.21 | New Features - Issue and Issue V2: Added a WIZ_URL attribute containing the direct link to the issue in the Wiz console, so findings can be traced back to their source in Wiz. - Project scoping (report-based syncs): The projectId option now accepts a comma-separated list of Wiz project IDs, so a connection can scope its report-based syncs to a specific subset of projects instead of only one project or all of them. The connector runs one Wiz report per listed project and merges the results into the sync. Leaving the option unset (or *) syncs all projects, exactly as before. This applies uniformly across Cloud Resource / Inventory, Vulnerability, Secret Finding, Issue, and Configuration Finding syncs — most notably Cloud Resource inventory, which previously had no way to target a subset of projects. | N/A |
| 3.4.20 | New Features - Container: Added Pod name and Pod external ID attributes, extracted from the container's identifier, so containers can now be correlated to the Kubernetes pod they run in. - Vulnerabilities: Added a Detailed name attribute identifying the specific affected component on a vulnerable asset. | N/A |
| 3.4.19 | Bug Fixes - Configuration Findings: Fixed an issue where incremental syncs stopped returning most configuration (misconfiguration) findings, causing the counts in Brinqa to be significantly lower than in Wiz. Incremental syncs now correctly capture all newly detected, updated, reclassified, and resolved findings. Improvements - Configuration Findings: The last-modified timestamp is now populated from the finding's most recent analysis time, so it is set for all configuration findings. Previously it was often empty because it relied on a status-change timestamp that Wiz leaves unset for findings whose status never changed. | N/A |
| 3.4.18 | New Features - Repository Branch: New asset model that synchronizes source-code repository branches from Wiz (e.g., GitHub) as Code Repository assets, including the repository name, repository identifier, and an on-premises usage indicator. Improvements - Assets (Container, Container Image, Serverless, Virtual Machine, Repository Branch): These assets are now automatically marked inactive once Wiz has not reported them for 30 days, so inventory reflects decommissioned resources without manual cleanup. - Vulnerabilities: Vulnerability findings now follow the lifecycle of the asset they were found on — when the underlying asset becomes inactive, its findings are retired automatically, preventing stale open findings on assets that no longer exist. - To use lifecycle management, all five asset models (Container, Container Image, Serverless, Virtual Machine, Repository Branch) must be enabled. | N/A |
| 3.4.17 | New Features - Added IP addresses and DNS names extraction for Load Balancers across all three major cloud platforms. - AWS: DNS name from the load balancer endpoint - GCP: IP address from the forwarding rule - Azure: Private IP addresses from frontend IP configurations and FQDNs from backend address pools - Load Balancer IP addresses are additionally exposed split by version as IPV4_RANGES and IPV6_RANGES, alongside the combined IP_ADDRESSES. - These attributes enable correlation with external attack surface data for identifying externally-facing services and vulnerabilities. | N/A |
| 3.4.16 | Bug Fixes - Issue / Issue Definition: A full beginning-of-time sync now reaches back a configurable window — default 5 years — instead of only the last 30 days, so older open issues are no longer missed. Configure the window with the new beginningOfTimeLookback operation option (accepts years or days, e.g. 5y, 1825d). | N/A |
| 3.4.15 | New Features - Vulnerability Definition: Added a HAS_EXPLOIT attribute (Boolean) indicating whether a known exploit exists, sourced from the Wiz definition's exploitable field. Bug Fixes - Vulnerability Definition: Fixed EXPLOITABILITY reporting "Actively used" for every definition. The checks on the exploitable and hasCisaKevExploit boolean fields tested only whether a value was present; since Wiz always returns hasCisaKevExploit (it is non-nullable), the check matched every record. They now test the actual boolean value, so "Actively used" is reserved for CISA KEV exploits and "Available" for exploitable definitions. | • Vulnerability Definition: EXPLOITABILITY values change for previously mislabeled definitions and the new HAS_EXPLOIT attribute needs populating — Action: re-sync |
| 3.4.14 | Improvements - Secret Finding: RESOURCE_TAGS and PROJECTS attributes are now multi-valued. Resource tags are parsed from JSON into individual key:value strings, and projects are parsed from JSON into individual project names. This improves usability by exposing structured data as distinct attribute values rather than raw JSON strings. | • Secret Finding: RESOURCE_TAGS and PROJECTS changed from single-valued strings to multi-valued — Action: re-sync |
| 3.4.13 | New Features - Added a new RUNTIME_VALIDATION_RESULT attribute on Vulnerability findings (Critical, High, Medium, Low, None). Exposes Wiz's per-finding runtime validation status (e.g., UNCHECKED, VALIDATED) sourced from the Wiz vulnerability report's RuntimeValidationResult column. Enables customers to build platform-level logic around whether a vulnerability has been validated by Wiz Runtime Sensor. Findings on tenants without Runtime Sensor deployed will report UNCHECKED. - Added a LAST_CAPTURED timestamp attribute to all models, recording when the connector last captured each record during a sync. | N/A |
| 3.4.12 | New Features - Added vulnerability attributes HAS_FIX and FIXED_VERSION to Vulnerability models. - Added new inventory models: Access Role, Access Role Binding, Pod, Route Table, and Gateway. | N/A |
| 3.4.11 | New Features - Added SECURITY_CATEGORIES and SECURITY_SUBCATEGORIES attributes to Issue Definitions to allow for advanced filtering and reporting on specific Wiz policies. | N/A |
| 3.4.10 | Bug Fixes - Fixed Instance ID mapping for Azure Virtual Machines. Azure VMs now correctly use graphEntity.providerUniqueId as the preferred Instance ID, improving record matching accuracy for Azure environments. Previously, Azure VMs could receive a full Azure resource ID, potentially causing consolidation issues. | N/A |
| 3.4.9 | New Features Unified Vulnerability Model - Added a new Vulnerability model that brings in all vulnerabilities across all severity levels (Critical, High, Medium, Low, None) in a single synchronization. - This simplifies configuration by eliminating the need to manage separate severity-specific models individually, reducing setup complexity and consolidation times. - Users can optionally filter by specific severities using the severity operation option (e.g., CRITICAL, HIGH) to control which vulnerabilities are ingested. - The existing severity-specific models (Critical Vulnerability, High Vulnerability, etc.) remain available for backward compatibility. | N/A |
| 3.4.8 | New Features Cloud Resource Internet-Exposure Attributes - Added three new boolean attributes across all cloud inventory models (Virtual Machines, Containers, Databases, Storage Accounts, etc.) surfacing Wiz's network-exposure analysis: - Accessible from VPN — whether the resource is reachable from a corporate VPN. - Accessible from other subscriptions — whether the resource is reachable from other cloud subscriptions or accounts. - Accessible from other VNets — whether the resource is reachable from other virtual networks. - These complement the existing Is accessible from internet attribute and let customers build more nuanced risk-factor rules on cloud-resource exposure. Secret Findings - Added a new Secret Finding model for ingesting Wiz secret instances — leaked credentials, API keys, certificates, and other sensitive values detected on cloud resources, code repositories, container registries, and attack-surface endpoints. - Added a deduplicated Secret Finding Definition model — one definition per Wiz detection rule (e.g., "Stripe Secret Key - Live", "PKCS Certificate"). Many secret findings share a common definition with severity, description, and remediation guidance. - Filtering support to scope the sync by secret attributes (type, severity, status, validation status, scan type, short-term token flag), pipeline stage and environment (Code / Cloud / Attack Surface), resource attributes (type, status, region, ID, internet exposure), source (cloud account, code repository, container registry, VCS author), repository properties (public, archived, default-branch), and related-issue severity. - Severity defaults to Critical, High, Medium, and Low. Pass all five values explicitly to include Informational findings. - Incremental sync supported via the sync token. | N/A |
| 3.4.7 | Improvements Dependency Upgrades - Upgraded internal framework and storage libraries to the latest stable versions for improved reliability, security patches, and alignment with the rest of the connector platform. | N/A |
| 3.4.6 | New Features Data Workload Inventory Support - Added a new Data Workload asset model for discovering and tracking data workload resources such as AWS SageMaker instances. - Data Workloads are now available as a standard inventory object with full support for tags, cloud account details, region, and project associations. Enhanced Vulnerability Risk Assessment - High Profile Threat — A new boolean indicator that flags vulnerabilities associated with high-profile threats, helping prioritize remediation based on real-world risk. - Initial Access Potential — A new boolean indicator that identifies vulnerabilities that could serve as an entry point for attackers, enabling better risk-based prioritization. CVSS V3 Metric Attributes - Privileges Required (CVSS V3) — Reports the privilege level an attacker needs to exploit the vulnerability (e.g., None, Low, High). - User Interaction Required (CVSS V3) — Indicates whether the vulnerability requires user interaction to be exploited. Technology-Based Inventory Filtering - Filter cloud resource inventory by technology name, technology category, or technology stack layer directly at the source. - Supported stack layers include: Application & Data, Cloud Entitlements, Data Stores, Machine Learning & AI, Networking, and Security & Identity. - These filters are applied server-side for faster, more efficient data collection in large cloud environments. Improvements Configuration Finding Definition Tags - Configuration Finding Definitions now properly parse and expose tags as structured key:value pairs. - Previously, raw tag data from Wiz (e.g., {} or unparsed JSON) could appear as empty or malformed values. Tags are now consistently parsed across all models. Container Model Enhancements - Added image ID and image name attributes to the Container inventory model for improved container image tracking. | N/A |