Docs Connect your cloud
Connect your cloud · AWS
AWS coverage catalog
Every resource type Kumo.io reads from AWS — 120 types across 29 AWS services — rendered from the machine-readable catalog our CI enforces against the crawlers themselves. If it says stable here, a crawler ships behind it.
120 resource types29 AWS services119 connection typesconformance-tested against crawlers
What "coverage" means here
This catalog is rendered from Kumo.io's declarative provider definition — the same document our conformance tests hold the crawlers to, in both directions: a crawler emitting an undeclared type fails our build, and a stable row with no crawler behind it fails it too. experimental rows are declared ahead of implementation: their scopes report as skipped rather than silently missing.
120
resource types
29
AWS services
119
stable
1
experimental
119
connection types
Don't see a service you need? Coverage grows continuously. Every addition ships with a reviewable change to the published read-only policy, never a silent permission grab. Tell us what's missing; the catalog is how we prioritize.
Resource types by service
ec2 · 23apigateway · 16apigatewayv2 · 9iam · 6cloudfront · 5ecs · 5eventbridge · 5rds · 5elasticache · 4elbv2 · 4stepfunctions · 4wafv2 · 4autoscaling · 3efs · 3eks · 3kms · 3lambda · 3organizations · 2route53 · 2sns · 2acm · 1cloudwatch · 1dynamodb · 1ecr · 1firehose · 1logs · 1s3 · 1secretsmanager · 1sqs · 1
ec2 · 23 types
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Availability Zone | ec2.availability_zone | network.availability_zone | stable |
| Customer Gateway | ec2.customer_gateway | network.customer_gateway | stable |
| DHCP Options | ec2.dhcp_options | network.dhcp_options | stable |
| Elastic IP | ec2.elastic_ip | network.elastic_ip | stable |
| Instance | ec2.instance | compute.instance | stable |
| Internet Gateway | ec2.internet_gateway | network.internet_gateway | stable |
| Launch Template | ec2.launch_template | compute.launch_template | experimental |
| NAT Gateway | ec2.nat_gateway | network.nat_gateway | stable |
| Network ACL | ec2.network_acl | network.network_acl | stable |
| Network ACL Entry | ec2.network_acl_entry | network.firewall_rule | stable |
| Network Interface | ec2.network_interface | network.network_interface | stable |
| Route | ec2.route | network.route | stable |
| Route Table | ec2.route_table | network.route_table | stable |
| Security Group | ec2.security_group | network.security_group | stable |
| Security Group Rule | ec2.security_group_rule | network.security_group_rule | stable |
| Snapshot | ec2.snapshot | storage.snapshot | stable |
| Subnet | ec2.subnet | network.subnet | stable |
| Transit Gateway | ec2.transit_gateway | network.transit_gateway | stable |
| Volume | ec2.volume | storage.volume | stable |
| VPC | ec2.vpc | network.vpc | stable |
| VPC Endpoint | ec2.vpc_endpoint | network.vpc_endpoint | stable |
| VPC Peering Connection | ec2.vpc_peering_connection | network.peering_connection | stable |
| VPN Gateway | ec2.vpn_gateway | network.vpn_gateway | stable |
apigateway · 16 types
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| API Key | apigateway.api_key | api.key | stable |
| Authorizer | apigateway.authorizer | api.authorizer | stable |
| Base Path Mapping | apigateway.base_path_mapping | api.base_path_mapping | stable |
| Client Certificate | apigateway.client_certificate | security.client_certificate | stable |
| Deployment | apigateway.deployment | api.deployment | stable |
| Domain Name | apigateway.domain_name | api.domain | stable |
| Integration | apigateway.integration | api.integration | stable |
| Method | apigateway.method | api.method | stable |
| Model | apigateway.model | api.model | stable |
| Request Validator | apigateway.request_validator | api.request_validator | stable |
| Resource | apigateway.resource | api.resource | stable |
| REST API | apigateway.rest_api | api.rest_api | stable |
| Stage | apigateway.stage | api.stage | stable |
| Usage Plan | apigateway.usage_plan | api.usage_plan | stable |
| Usage Plan Key | apigateway.usage_plan_key | api.usage_plan_key | stable |
| VPC Link | apigateway.vpc_link | api.vpc_link | stable |
apigatewayv2 · 9 types
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| API | apigatewayv2.api | api.http_api | stable |
| API Mapping | apigatewayv2.api_mapping | api.mapping | stable |
| Authorizer | apigatewayv2.authorizer | api.authorizer | stable |
| Deployment | apigatewayv2.deployment | api.deployment | stable |
| Domain Name | apigatewayv2.domain_name | api.domain | stable |
| Integration | apigatewayv2.integration | api.integration | stable |
| Route | apigatewayv2.route | api.route | stable |
| Stage | apigatewayv2.stage | api.stage | stable |
| VPC Link | apigatewayv2.vpc_link | api.vpc_link | stable |
iam · 6 types
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Group | iam.group | identity.group | stable |
| Instance Profile | iam.instance_profile | identity.instance_profile | stable |
| Policy | iam.policy | identity.policy | stable |
| Policy Statement | iam.policy_statement | identity.policy_statement | stable |
| Role | iam.role | identity.role | stable |
| User | iam.user | identity.user | stable |
cloudfront · 5 types
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Cache Policy | cloudfront.cache_policy | policy.cdn_cache | stable |
| Distribution | cloudfront.distribution | network.cdn_distribution | stable |
| Function | cloudfront.function | compute.cdn_function | stable |
| Origin Access Identity | cloudfront.origin_access_identity | security.cdn_origin_access_identity | stable |
| Origin Request Policy | cloudfront.origin_request_policy | policy.cdn_origin_request | stable |
ecs · 5 types
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Cluster | ecs.cluster | compute.cluster | stable |
| Container Instance | ecs.container_instance | compute.container_instance | stable |
| Service | ecs.service | compute.service | stable |
| Task | ecs.task | compute.task | stable |
| Task Definition | ecs.task_definition | compute.task_definition | stable |
eventbridge · 5 types
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| API Destination | eventbridge.api_destination | messaging.api_destination | stable |
| Archive | eventbridge.archive | messaging.event_archive | stable |
| Connection | eventbridge.connection | messaging.connection | stable |
| Event Bus | eventbridge.event_bus | messaging.event_bus | stable |
| Rule | eventbridge.rule | messaging.event_rule | stable |
rds · 5 types
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| DB Cluster | rds.db_cluster | database.cluster | stable |
| DB Instance | rds.db_instance | database.instance | stable |
| DB Parameter Group | rds.db_parameter_group | database.parameter_group | stable |
| DB Subnet Group | rds.db_subnet_group | network.subnet_group | stable |
| Option Group | rds.option_group | database.option_group | stable |
elasticache · 4 types
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Cache Cluster | elasticache.cache_cluster | database.cache_cluster | stable |
| Cache Subnet Group | elasticache.cache_subnet_group | network.cache_subnet_group | stable |
| Replication Group | elasticache.replication_group | database.cache_replication_group | stable |
| Snapshot | elasticache.snapshot | database.snapshot | stable |
elbv2 · 4 types
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Listener | elbv2.listener | network.listener | stable |
| Listener Rule | elbv2.listener_rule | network.listener_rule | stable |
| Load Balancer | elbv2.load_balancer | network.load_balancer | stable |
| Target Group | elbv2.target_group | network.target_group | stable |
stepfunctions · 4 types
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Activity | stepfunctions.activity | workflow.activity | stable |
| State Machine | stepfunctions.state_machine | workflow.state_machine | stable |
| State Machine Alias | stepfunctions.state_machine_alias | workflow.state_machine_alias | stable |
| State Machine Version | stepfunctions.state_machine_version | workflow.state_machine_version | stable |
wafv2 · 4 types
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| IP Set | wafv2.ip_set | security.ip_set | stable |
| Regex Pattern Set | wafv2.regex_pattern_set | security.regex_pattern_set | stable |
| Rule Group | wafv2.rule_group | security.waf_rule_group | stable |
| Web ACL | wafv2.web_acl | security.web_acl | stable |
autoscaling · 3 types
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Auto Scaling Group | autoscaling.auto_scaling_group | compute.auto_scaling_group | stable |
| Launch Configuration | autoscaling.launch_configuration | compute.launch_configuration | stable |
| Launch Template | autoscaling.launch_template | compute.launch_template | stable |
efs · 3 types
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Access Point | efs.access_point | storage.filesystem_access_point | stable |
| File System | efs.file_system | storage.filesystem | stable |
| Mount Target | efs.mount_target | storage.filesystem_mount | stable |
eks · 3 types
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Cluster | eks.cluster | compute.cluster | stable |
| Fargate Profile | eks.fargate_profile | compute.fargate_profile | stable |
| Node Group | eks.node_group | compute.node_group | stable |
kms · 3 types
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Alias | kms.alias | security.key | stable |
| Grant | kms.grant | security.key_grant | stable |
| Key | kms.key | security.key | stable |
lambda · 3 types
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Event Source Mapping | lambda.event_source_mapping | compute.event_source_mapping | stable |
| Function | lambda.function | compute.function | stable |
| Layer | lambda.layer | compute.layer | stable |
organizations · 2 types
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Account | organizations.account | identity.account | stable |
| Organizational Unit | organizations.organizational_unit | identity.organizational_unit | stable |
route53 · 2 types
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Hosted Zone | route53.hosted_zone | network.dns_zone | stable |
| Resource Record Set | route53.resource_record_set | network.dns_record | stable |
sns · 2 types
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Subscription | sns.subscription | messaging.subscription | stable |
| Topic | sns.topic | messaging.topic | stable |
acm · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Certificate | acm.certificate | security.certificate | stable |
cloudwatch · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Alarm | cloudwatch.alarm | observability.alarm | stable |
dynamodb · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Table | dynamodb.table | database.table | stable |
ecr · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Repository | ecr.repository | storage.container_repository | stable |
firehose · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Delivery Stream | firehose.delivery_stream | streaming.delivery_stream | stable |
logs · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Log Group | logs.log_group | observability.log_group | stable |
s3 · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Bucket | s3.bucket | storage.bucket | stable |
secretsmanager · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Secret | secretsmanager.secret | security.secret | stable |
sqs · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Queue | sqs.queue | messaging.queue | stable |
Connections between resources
Topology is more than inventory: 119 declared connection types link resources into the graph — attachment, containment, traffic paths, dependency — with 56 declarative edge-derivation rules computing relationships from crawled attributes.
| Connection family | Types |
|---|---|
| structural | 35 |
| data_flow | 28 |
| security | 16 |
| network | 16 |
| dependency | 13 |
| identity | 6 |
| management | 3 |
| observability | 2 |
Sensitive fields, classified at the source
The definition also carries the base sensitivity table: attribute rows and pattern
fallbacks that classify sensitive configuration at ingestion, before anything is stored.
Tenant policy can tighten these classifications — never relax the
secret/credential classes. See
Redaction and sensitive fields
for the full data-handling model.