Docs Connect your cloud
Connect your cloud · Azure
Azure coverage catalog
Every resource type Kumo.io reads from Azure — 113 types across 46 Azure services — rendered from the machine-readable catalog our CI enforces against the crawlers themselves. If it says stable here, a crawler ships behind it.
What "coverage" means here
This catalog is rendered from Kumo.io's declarative provider definition — the same document our conformance tests hold the crawlers to, in both directions: a crawler emitting an undeclared type fails our build, and a stable row with no crawler behind it fails it too. experimental rows are declared ahead of implementation: their scopes report as skipped rather than silently missing.
Resource types by service
network · 28 types
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Application Gateway | network.application_gateway | network.gateway | stable |
| Application Security Group | network.application_security_group | network.security_group | stable |
| Azure Firewall | network.azure_firewall | network.security_group | stable |
| Bastion Host | network.bastion_host | network.gateway | stable |
| DNS Record Set | network.dns_record_set | network.dns_zone | stable |
| DNS Zone | network.dns_zone | network.dns_zone | stable |
| ExpressRoute Circuit | network.express_route_circuit | network.gateway | stable |
| Firewall Policy | network.firewall_policy | network.security_group | stable |
| Front Door | network.front_door | network.load_balancer | stable |
| Front Door WAF Policy | network.front_door_waf_policy | network.security_group | stable |
| Load Balancer | network.load_balancer | network.load_balancer | stable |
| Local Network Gateway | network.local_network_gateway | network.gateway | stable |
| NAT Gateway | network.nat_gateway | network.nat_gateway | stable |
| Network Interface | network.network_interface | network.network_interface | stable |
| Network Security Group | network.network_security_group | network.security_group | stable |
| Network Watcher | network.network_watcher | observability.monitor | stable |
| Private DNS Zone | network.private_dns_zone | network.dns_zone | stable |
| Private Endpoint | network.private_endpoint | network.vpc_endpoint | stable |
| Private Link Service | network.private_link_service | network.vpc_endpoint | stable |
| Public IP Address | network.public_ip_address | network.elastic_ip | stable |
| Public IP Prefix | network.public_ip_prefix | network.elastic_ip | stable |
| Route Table | network.route_table | network.route_table | stable |
| Subnet | network.subnet | network.subnet | stable |
| Traffic Manager Profile | network.traffic_manager_profile | network.load_balancer | stable |
| Virtual Hub | network.virtual_hub | network.gateway | stable |
| Virtual Network | network.virtual_network | network.vpc | stable |
| Virtual Network Gateway | network.virtual_network_gateway | network.vpn_gateway | stable |
| Virtual WAN | network.virtual_wan | network.gateway | stable |
compute · 9 types
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Availability Set | compute.availability_set | compute.placement_group | stable |
| Managed Disk | compute.disk | storage.volume | stable |
| Disk Encryption Set | compute.disk_encryption_set | security.key | stable |
| Compute Gallery | compute.gallery | storage.bucket | stable |
| Gallery Image Definition | compute.gallery_image | storage.snapshot | stable |
| Disk Snapshot | compute.snapshot | storage.snapshot | stable |
| Virtual Machine | compute.virtual_machine | compute.instance | stable |
| Virtual Machine Scale Set | compute.virtual_machine_scale_set | compute.auto_scaling_group | stable |
| Scale Set Virtual Machine | compute.vmss_vm | compute.instance | stable |
documentdb · 6 types
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Cosmos DB Cassandra Keyspace | documentdb.cassandra_keyspace | database.database | stable |
| Cosmos DB Account | documentdb.database_account | database.cluster | stable |
| Cosmos DB Gremlin Database | documentdb.gremlin_database | database.database | stable |
| Cosmos DB MongoDB Database | documentdb.mongodb_database | database.database | stable |
| Cosmos DB SQL Database | documentdb.sql_database | database.database | stable |
| Cosmos DB Table | documentdb.table | database.database | stable |
storage · 5 types
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Blob Service | storage.blob_service | storage.bucket | stable |
| File Service | storage.file_service | storage.filesystem | stable |
| Queue Service | storage.queue_service | messaging.queue | stable |
| Storage Account | storage.storage_account | storage.bucket | stable |
| Table Service | storage.table_service | database.database | stable |
web · 5 types
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Function App | web.function_app | compute.function | stable |
| App Service Plan | web.server_farm | compute.node_group | stable |
| App Service | web.site | compute.service | stable |
| App Service Deployment Slot | web.slot | compute.service | stable |
| Static Web App | web.static_site | compute.service | stable |
insights · 4 types
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Monitor Action Group | insights.action_group | observability.alarm | stable |
| Autoscale Setting | insights.autoscale_setting | observability.alarm | stable |
| Application Insights Component | insights.component | observability.monitor | stable |
| Monitor Metric Alert | insights.metric_alert | observability.alarm | stable |
keyvault · 4 types
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Key Vault Certificate | keyvault.certificate | security.certificate | stable |
| Key Vault Key | keyvault.key | security.key | stable |
| Key Vault Secret | keyvault.secret | security.secret | stable |
| Key Vault | keyvault.vault | security.key | stable |
cdn · 3 types
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Front Door Endpoint | cdn.afd_endpoint | network.cdn_distribution | stable |
| CDN Endpoint | cdn.endpoint | network.cdn_distribution | stable |
| CDN Profile | cdn.profile | network.cdn_distribution | stable |
eventgrid · 3 types
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Event Grid Domain | eventgrid.domain | messaging.topic | stable |
| Event Grid System Topic | eventgrid.system_topic | messaging.topic | stable |
| Event Grid Topic | eventgrid.topic | messaging.topic | stable |
servicebus · 3 types
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Service Bus Namespace | servicebus.namespace | messaging.namespace | stable |
| Service Bus Queue | servicebus.queue | messaging.queue | stable |
| Service Bus Topic | servicebus.topic | messaging.topic | stable |
sql · 3 types
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| SQL Database | sql.database | database.database | stable |
| SQL Elastic Pool | sql.elastic_pool | database.cluster | stable |
| SQL Server | sql.server | database.instance | stable |
apimanagement · 2 types
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| API Management API | apimanagement.api | api.rest_api | stable |
| API Management Service | apimanagement.service | api.gateway | stable |
containerregistry · 2 types
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Container Registry | containerregistry.registry | storage.container_repository | stable |
| Registry Replication | containerregistry.replication | storage.container_repository | stable |
containerservice · 2 types
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| AKS Agent Pool | containerservice.agent_pool | compute.node_group | stable |
| AKS Cluster | containerservice.managed_cluster | compute.cluster | stable |
devices · 2 types
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| IoT Hub | devices.iot_hub | messaging.topic | stable |
| IoT Device Provisioning Service | devices.provisioning_service | messaging.topic | stable |
eventhub · 2 types
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Event Hub | eventhub.event_hub | messaging.topic | stable |
| Event Hubs Namespace | eventhub.namespace | messaging.namespace | stable |
app · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Container App | app.container_app | compute.service | stable |
appconfiguration · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| App Configuration Store | appconfiguration.configuration_store | config.config_map | stable |
authorization · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Role Assignment | authorization.role_assignment | identity.role | stable |
automation · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Automation Account | automation.automation_account | automation.job | stable |
batch · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Batch Account | batch.batch_account | compute.cluster | stable |
cache · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Azure Cache for Redis | cache.redis | database.cache_cluster | stable |
containerinstance · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Container Instance Group | containerinstance.container_group | compute.container_instance | stable |
dashboard · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Managed Grafana | dashboard.grafana | observability.monitor | stable |
databricks · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Databricks Workspace | databricks.workspace | analytics.workspace | stable |
datafactory · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Data Factory | datafactory.factory | analytics.workspace | stable |
devtestlab · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| DevTest Lab | devtestlab.lab | compute.cluster | stable |
hdinsight · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| HDInsight Cluster | hdinsight.cluster | compute.cluster | stable |
identity · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Managed Identity | identity.managed_identity | identity.role | stable |
logic · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Logic App Workflow | logic.workflow | workflow.state_machine | stable |
machinelearningservices · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Machine Learning Workspace | machinelearningservices.workspace | analytics.workspace | stable |
maps · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Azure Maps Account | maps.account | compute.service | stable |
mysql · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Azure Database for MySQL | mysql.server | database.instance | stable |
netapp · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| NetApp Account | netapp.account | storage.filesystem | stable |
notificationhubs · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Notification Hubs Namespace | notificationhubs.namespace | messaging.namespace | stable |
operationalinsights · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Log Analytics Workspace | operationalinsights.workspace | observability.log_group | stable |
postgresql · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Azure Database for PostgreSQL | postgresql.server | database.instance | stable |
purview · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Purview Account | purview.account | analytics.workspace | stable |
recoveryservices · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Recovery Services Vault | recoveryservices.vault | storage.bucket | stable |
relay · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Relay Namespace | relay.namespace | messaging.namespace | stable |
resources · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Resource Group | resources.resource_group | identity.organizational_unit | stable |
search · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Cognitive Search Service | search.search_service | database.instance | stable |
servicefabric · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Service Fabric Cluster | servicefabric.cluster | compute.cluster | stable |
signalrservice · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| SignalR Service | signalrservice.signalr | messaging.topic | stable |
streamanalytics · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Stream Analytics Job | streamanalytics.streaming_job | analytics.job | stable |
synapse · 1 type
| Resource | Provider type | Semantic type | Status |
|---|---|---|---|
| Synapse Workspace | synapse.workspace | analytics.workspace | stable |
Connections between resources
Topology is more than inventory: 27 declared connection types link resources into the graph — attachment, containment, traffic paths, dependency — with 80 declarative edge-derivation rules computing relationships from crawled attributes.
| Connection family | Types |
|---|---|
| structural | 21 |
| security | 2 |
| identity | 2 |
| dependency | 1 |
| network | 1 |
Sensitive fields, classified at the source
The definition also carries the base sensitivity table: attribute rows and pattern
fallbacks that classify sensitive configuration at ingestion, before anything is stored.
Tenant policy can tighten these classifications — never relax the
secret/credential classes. See
Redaction and sensitive fields
for the full data-handling model.