Resource Inventory

This document contains the most up-to-date lists of resources that Lacework currently ingests.

AWS

Service	API
accessanalyzer	list-analyzers
acm	list-certificates
apigateway	Expand to view the list of APIs get-api-keys get-client-certificates get-domain-names get-rest-apis get-sdk-types get-usage-plans get-vpc-links
apigatewayv2	Expand to view the list of APIs get-apis get-domain-names get-vpc-links
appsync	Expand to view the list of APIs list-domain-names list-graphql-apis
autoscaling	describe-launch-configurations
cloudfront	list-distributions
cloudtrail	describe-trails
cloudwatch	describe-alarm
config	Expand to view the list of APIs describe-configuration-recorder-status describe-configuration-recorders describe-delivery-channel-status describe-delivery-channels
dax	Expand to view the list of APIs describe-clusters describe-parameter-groups describe-subnet-groups
dynamodb	list-tables
ec2	Expand to view the list of APIs describe-customer-gateways describe-dhcp-options describe-instances describe-internet-gateways describe-key-pairs describe-nat-gateways describe-network-interfaces describe-regions describe-route-tables describe-security-groups describe-snapshots describe-subnets describe-transit-gateways describe-volumes describe-vpcs describe-vpc-endpoints describe-flow-logs describe-vpc-peering-connections describe-vpn-connections describe-vpn-gateways
ecr	describe-repositories
ecs	Expand to view the list of APIs list-clusters list-container-instances list-services list-task-definitions list-tasks
eks	list-clusters
elasticache	describe-replication-groups
elb	describe-load-balancers
elbv2	Expand to view the list of APIs describe-load-balancers describe-ssl-policies describe-target-groups describe-listeners
es	list-domain-names
firehose	list-delivery-streams
iam	Expand to view the list of APIs get-account-password-policy get-account-summary get-credential-report list-groups list-policies list-roles list-saml-providers list-server-certificates list-users list-virtual-mfa-devices
identitystore	Expand to view the list of APIs list-groups list-users
kms	Expand to view the list of APIs list-aliases list-keys
laceworkaccountdetails	build-integration-account-urn
lambda	list-functions
logs	describe-log-groups
network-firewall	Expand to view the list of APIs list-firewalls list-firewall-policies list-rule-groups
opensearch	list-domain-names
organization-details	describe-organization
organizations	Expand to view the list of APIs list-accounts list-delegated-administrators describe-organization list-aws-service-access-for-organization describe-effective-policy list-policies describe-resource-policy list-roots
rds	Expand to view the list of APIs describe-db-clusters describe-db-cluster-snapshots describe-db-instances describe-event-subscriptions
redshift	redshift
route53	Expand to view the list of APIs get-checker-ip-ranges list-cidr-collections list-geo-locations list-health-checks list-hosted-zones list-query-logging-configs list-reusable-delegation-sets list-traffic-policies list-traffic-policy-instances
route53domains	Expand to view the list of APIs view-billing list-domains list-operations list-prices
s3	list-buckets
s3control	get-public-access-block
sagemaker	Expand to view the list of APIs list-actions list-algorithms list-apps list-app-image-configs list-artifacts list-auto-ml-jobs list-code-repositories list-compilation-jobs list-contexts list-data-quality-job-definitions list-devices list-device-fleets list-domains list-edge-deployment-plans list-edge-packaging-jobs list-endpoints list-endpoint-configs list-experiments list-feature-groups list-flow-definitions list-human-task-uis list-hyper-parameter-tuning-jobs list-images list-inference-experiments list-inference-recommendations-jobs list-labeling-jobs list-lineage-groups list-models list-model-bias-job-definitions list-model-cards list-model-explainability-job-definitions list-model-packages list-model-package-groups list-model-quality-job-definitions list-monitoring-schedules list-notebook-instances list-notebook-instance-lifecycle-configs list-pipelines list-processing-jobs list-projects list-spaces list-studio-lifecycle-configs list-subscribed-workteams list-training-jobs list-transform-jobs list-trials list-trial-components list-user-profiles list-workforces list-workteams
secretsmanager	list-secrets
sns	Expand to view the list of APIs list-subscriptions list-topics
sqs	list-queues
sso-admin	list-instances
waf	Expand to view the list of APIs list-activated-rules-in-rule-group list-byte-match-sets list-geo-match-sets list-ip-sets list-logging-configurations list-rate-based-rules list-regex-match-sets list-regex-pattern-sets list-rules list-rule-groups list-size-constraint-sets list-sql-injection-match-sets list-web-acls list-xss-match-sets
waf-regional	Expand to view the list of APIs list-byte-match-sets list-geo-match-sets list-ip-sets list-rate-based-rules list-regex-match-sets list-regex-pattern-sets list-rules list-rule-groups list-size-constraint-sets list-sql-injection-match-sets list-web-acls
wafv2	Expand to view the list of APIs list-ip-sets list-managed-rule-sets list-regex-pattern-sets list-rule-groups list-web-acls

note

Lacework is currently expanding its service coverage in AWS. As we begin assessing these services for the first time, you may notice the New service accessed in region alert on your Lacework Console. This alert will originate from Lacework Service IP Addresses and can be safely disregarded. If you have any questions regarding the alert, please contact Lacework Support for further assistance.

Google Cloud

Service	API
App Engine	Expand to view the list of APIs appengine.googleapis.com/Application appengine.googleapis.com/Service appengine.googleapis.com/Version appengine.googleapis.com/Instance
Artifact Registry	Expand to view the list of APIs artifactregistry.googleapis.com/DockerImage artifactregistry.googleapis.com/Repository
BigQuery	Expand to view the list of APIs bigquery.googleapis.com/Dataset bigquery.googleapis.com/Table bigquery.googleapis.com/Model
Cloud Bigtable	Expand to view the list of APIs bigtableadmin.googleapis.com/AppProfile bigtableadmin.googleapis.com/Backup bigtableadmin.googleapis.com/Cluster bigtableadmin.googleapis.com/Instance bigtableadmin.googleapis.com/Table
Cloud Billing	cloudbilling.googleapis.com/BillingAccount
Certificate Authority Service	Expand to view the list of APIs privateca.googleapis.com/CaPool privateca.googleapis.com/CertificateAuthority privateca.googleapis.com/CertificateRevocationList privateca.googleapis.com/CertificateTemplate
Cloud Functions	cloudfunctions.googleapis.com/CloudFunction
Cloud Run	Expand to view the list of APIs run.googleapis.com/DomainMapping run.googleapis.com/Revision run.googleapis.com/Service
Container Registry	containerregistry.googleapis.com/Image
Dataproc	Expand to view the list of APIs dataproc.googleapis.com/Cluster dataproc.googleapis.com/Job
Dialogflow	Expand to view the list of APIs dialogflow.googleapis.com/Agent dialogflow.googleapis.com/LocationSettings
Cloud Data Loss Prevention	Expand to view the list of APIs dlp.googleapis.com/StoredInfoType dlp.googleapis.com/DeidentifyTemplate dlp.googleapis.com/DlpJob dlp.googleapis.com/InspectTemplate dlp.googleapis.com/JobTrigger
Cloud DNS	Expand to view the list of APIs dns.googleapis.com/ManagedZone dns.googleapis.com/Policy
Eventarc	eventarc.googleapis.com/Trigger
Identity and Access Management	Expand to view the list of APIs iam.googleapis.com/Role iam.googleapis.com/ServiceAccount iam.googleapis.com/ServiceAccountKey
Cloud Key Management Service	Expand to view the list of APIs cloudkms.googleapis.com/KeyRing cloudkms.googleapis.com/CryptoKey cloudkms.googleapis.com/CryptoKeyVersion cloudkms.googleapis.com/ImportJob
Pub/Sub	Expand to view the list of APIs pubsub.googleapis.com/Topic pubsub.googleapis.com/Topic pubsub.googleapis.com/Snapshot
Cloud Spanner	Expand to view the list of APIs spanner.googleapis.com/Instance spanner.googleapis.com/Database spanner.googleapis.com/Backup
Cloud SQL	Expand to view the list of APIs sqladmin.googleapis.com/Instance sqladmin.googleapis.com/BackupRun
Cloud Storage	storage.googleapis.com/Bucket
Cloud OS Config	Expand to view the list of APIs osconfig.googleapis.com/PatchDeployment osconfig.googleapis.com/VulnerabilityReport
Compute Engine	Expand to view the list of APIs compute.googleapis.com/Autoscaler compute.googleapis.com/Address compute.googleapis.com/GlobalAddress compute.googleapis.com/BackendBucket compute.googleapis.com/BackendService compute.googleapis.com/Commitment compute.googleapis.com/Disk compute.googleapis.com/ExternalVpnGateway compute.googleapis.com/Firewall compute.googleapis.com/ForwardingRule compute.googleapis.com/GlobalForwardingRule compute.googleapis.com/HealthCheck compute.googleapis.com/HttpHealthCheck compute.googleapis.com/HttpsHealthCheck compute.googleapis.com/Image compute.googleapis.com/Instance compute.googleapis.com/InstanceGroup compute.googleapis.com/InstanceGroupManager compute.googleapis.com/InstanceTemplate compute.googleapis.com/Interconnect compute.googleapis.com/InterconnectAttachment compute.googleapis.com/License compute.googleapis.com/Network compute.googleapis.com/NetworkEndpointGroup compute.googleapis.com/NodeGroup compute.googleapis.com/NodeTemplate compute.googleapis.com/PacketMirroring compute.googleapis.com/Project compute.googleapis.com/RegionBackendService compute.googleapis.com/RegionDisk compute.googleapis.com/Reservation compute.googleapis.com/ResourcePolicy compute.googleapis.com/Route compute.googleapis.com/Router compute.googleapis.com/SecurityPolicy compute.googleapis.com/Snapshot compute.googleapis.com/SslCertificate compute.googleapis.com/SslPolicy compute.googleapis.com/Subnetwork compute.googleapis.com/TargetHttpProxy compute.googleapis.com/TargetHttpsProxy compute.googleapis.com/TargetInstance compute.googleapis.com/TargetPool compute.googleapis.com/TargetTcpProxy compute.googleapis.com/TargetSslProxy compute.googleapis.com/TargetVpnGateway compute.googleapis.com/UrlMap compute.googleapis.com/VpnGateway compute.googleapis.com/VpnTunnel
Google Kubernetes Engine	Expand to view the list of APIs container.googleapis.com/Cluster container.googleapis.com/NodePool k8s.io/Node k8s.io/Pod k8s.io/Namespace k8s.io/Service rbac.authorization.k8s.io/Role rbac.authorization.k8s.io/RoleBinding rbac.authorization.k8s.io/ClusterRole rbac.authorization.k8s.io/ClusterRoleBinding networking.k8s.io/NetworkPolicy
Resource Manager	Expand to view the list of APIs cloudresourcemanager.googleapis.com/Organization cloudresourcemanager.googleapis.com/Folder cloudresourcemanager.googleapis.com/Project cloudresourcemanager.googleapis.com/TagKey cloudresourcemanager.googleapis.com/TagValue
Service Usage	serviceusage.googleapis.com/Service
Cloud Data Fusion	datafusion.googleapis.com/Instance
Cloud Logging	Expand to view the list of APIs logging.googleapis.com/LogBucket logging.googleapis.com/LogMetric logging.googleapis.com/LogSink
Network Management API	networkmanagement.googleapis.com/ConnectivityTest
Managed Service for Microsoft Active Directory	managedidentities.googleapis.com/Domain
Game Servers	Expand to view the list of APIs gameservices.googleapis.com/GameServerCluster gameservices.googleapis.com/Realm gameservices.googleapis.com/GameServerConfig gameservices.googleapis.com/GameServerDeployment
Dataflow	dataflow.googleapis.com/Job
Hub	gkehub.googleapis.com/Membership
Secret Manager	Expand to view the list of APIs secretmanager.googleapis.com/Secret secretmanager.googleapis.com/SecretVersion
Cloud TPU	tpu.googleapis.com/Node
Filestore	file.googleapis.com/Instance
Service Directory	servicedirectory.googleapis.com/Namespace
Assured Workloads	assuredworkloads.googleapis.com/Workload
API Gateway	Expand to view the list of APIs apigateway.googleapis.com/Api apigateway.googleapis.com/ApiConfig apigateway.googleapis.com/Gateway
App Engine Memcache	memcache.googleapis.com/Instance
Document AI	Expand to view the list of APIs documentai.googleapis.com/HumanReviewConfig documentai.googleapis.com/LabelerPool documentai.googleapis.com/Processor documentai.googleapis.com/ProcessorVersion
Memorystore for Redis	redis.googleapis.com/Instance
Vertex AI	Expand to view the list of APIs aiplatform.googleapis.com/BatchPredictionJob aiplatform.googleapis.com/CustomJob aiplatform.googleapis.com/DataLabelingJob aiplatform.googleapis.com/Dataset aiplatform.googleapis.com/Endpoint aiplatform.googleapis.com/HyperparameterTuningJob aiplatform.googleapis.com/MetadataStore aiplatform.googleapis.com/Model aiplatform.googleapis.com/ModelDeploymentMonitoringJob aiplatform.googleapis.com/PipelineJob aiplatform.googleapis.com/SpecialistPool aiplatform.googleapis.com/TrainingPipeline
Cloud Monitoring	monitoring.googleapis.com/AlertPolicy
Serverless VPC Access	vpcaccess.googleapis.com/Connector
Service Management	servicemanagement.googleapis.com/ManagedService
Dataproc Metastore	Expand to view the list of APIs metastore.googleapis.com/Service metastore.googleapis.com/MetadataImport metastore.googleapis.com/Backup

note

• For the full list of possible resources, see Supported asset types.
  
• To view the list of resources from the Google Cloud console, select Asset Inventory > Resource.
• Lacework is currently expanding its service coverage in GCP. As we begin assessing these services for the first time, you may notice the New GCP service accessed in region alert on your Lacework Console. This alert will originate from Lacework Service IP Addresses and can be safely disregarded. If you have any questions regarding the alert, please contact Lacework Support for further assistance.

Azure

Azure Resource Graph Table	Azure Resource Type
Microsoft.AzureActiveDirectory	Expand to view the list of resource types Microsoft.AzureActiveDirectory/guestUsages (Guest Usages) Microsoft.AzureActiveDirectory/b2cDirectories (B2C Tenants)
Microsoft.Cache	Expand to view the list of resource types Microsoft.Cache/Redis (Azure Cache for Redis) Microsoft.Cache/RedisEnterprise (Redis Enterprise)
Microsoft.Cache	Expand to view the list of resource types Microsoft.Compute/ProximityPlacementGroups (Proximity Placement Groups) Microsoft.Compute/sharedVmImages/versions Microsoft.Compute/capacityReservationGroups (Capacity Reservation Groups) Microsoft.Compute/diskEncryptionSets (Disk Encryption Sets) Microsoft.Compute/galleries/applications/versions (VM Application Versions) Microsoft.Compute/virtualMachineScaleSets (Virtual Machine Scale Sets) Microsoft.Compute/capacityReservationGroups/capacityReservations Microsoft.Compute/cloudServices (Cloud Services (extended support)) Microsoft.Compute/sharedVmExtensions Microsoft.Compute/sshPublicKeys (SSH keys) Microsoft.Compute/sharedVmImages Microsoft.Compute/virtualMachines/runCommands Microsoft.Compute/VirtualMachines (Virtual Machines) Microsoft.Compute/images (Images) Microsoft.Compute/galleries/applications (VM Application Definitions) Microsoft.Compute/disks (Disks) Microsoft.Compute/swiftlets Microsoft.Compute/snapshots (Snapshots) Microsoft.Compute/virtualMachines/extensions Microsoft.Compute/diskAccesses (Disk Accesses) Microsoft.Compute/galleries/images/versions (VM Image Versions) Microsoft.Compute/virtualMachineScaleSets/virtualMachines/networkInterfaces/ipConfigurations/publicIPAddresses Microsoft.Compute/restorePointCollections (Restore Point Collections) Microsoft.Compute/hostGroups/hosts (Hosts) Microsoft.Compute/sharedVmExtensions/versions Microsoft.Compute/capacityReservations Microsoft.Compute/availabilitySets (Availability Sets) Microsoft.Compute/hostGroups (Host Groups) Microsoft.Compute/galleries/images (VM Image Definitions) Microsoft.Compute/galleries (Azure Compute Galleries)
Microsoft.ContainerInstance	Microsoft.ContainerInstance/containerGroups (Container Instances)
Microsoft.ContainerRegistry	Expand to view the list of resource types Microsoft.ContainerRegistry/registries/tasks Microsoft.ContainerRegistry/registries (Container Registries) Microsoft.ContainerRegistry/registries/buildTasks Microsoft.ContainerRegistry/registries/replications (Container Registry Replications) Microsoft.ContainerRegistry/registries/webhooks (Container Registry Webhooks) Microsoft.ContainerRegistry/registries/taskRuns Microsoft.ContainerRegistry/registries/agentPools
Microsoft.ContainerService	Expand to view the list of resource types Microsoft.ContainerService/openShiftManagedCluster Microsoft.ContainerService/containerServices Microsoft.ContainerService/snapshots Microsoft.ContainerService/managedClusters (Kubernetes Services)
Microsoft.DBforMariaDB	Microsoft.DBforMariaDB/servers (Azure Database for MariaDB Servers)
Microsoft.DBforMySQL	Expand to view the list of resource types Microsoft.DBforMySQL/flexibleServers (Azure Database for MySQL Flexible Servers) Microsoft.DBforMySQL/servers (Azure Database for MySQL Servers)
Microsoft.DBforPostgreSQL	Expand to view the list of resource types Microsoft.DBforPostgreSQL/serverGroups (Azure Database for PostgreSQL Server Groups) Microsoft.DBforPostgreSQL/serverGroupsv2 (Azure Database for PostgreSQL Server Groups) Microsoft.DBforPostgreSQL/servers (Azure Database for PostgreSQL Servers) Microsoft.DBforPostgreSQL/singleServers Microsoft.DBforPostgreSQL/serversv2 (Azure Database for PostgreSQL Servers v2) Microsoft.DBforPostgreSQL/flexibleServers (Azure Database for PostgreSQL Flexible Servers)
Microsoft.Insights	Expand to view the list of resource types Microsoft.Insights/activityLogAlerts Microsoft.Insights/workbooks (Azure Workbooks) Microsoft.Insights/dataCollectionEndpoints (Data Collection Endpoints) Microsoft.Insights/scheduledQueryRules Microsoft.Insights/workbooktemplates (Azure Workbook Templates) Microsoft.Insights/actionGroups Microsoft.Insights/notificationGroups Microsoft.Insights/alertRules Microsoft.Insights/components (Application Insights) Microsoft.Insights/metricAlerts Microsoft.Insights/dataCollectionRules (Data Collection Rules) Microsoft.Insights/notificationRules Microsoft.Insights/autoscaleSettings Microsoft.Insights/privateLinkScopes (Azure Monitor Private Link Scopes) Microsoft.Insights/guestDiagnosticSettings Microsoft.Insights/queryPacks Microsoft.Insights/webtests (Availability Tests)
Microsoft.KeyVault	Expand to view the list of resource types Microsoft.KeyVault/HSMpools Microsoft.KeyVault/managedHSMs Microsoft.KeyVault/vaults (Key Vaults)
Microsoft.Kubernetes	Microsoft.Kubernetes/connectedClusters (Kubernetes - Azure Arc)
Microsoft.Network	Expand to view the list of resource types Microsoft.Network privateDnsZones/virtualNetworkLinks Microsoft.Network/NetworkSecurityGroups (Network Security Groups) Microsoft.Network/virtualWans (Virtual WANs) Microsoft.Network/applicationSecurityGroups (Application Security Groups) Microsoft.Network/bastionHosts (Bastions) Microsoft.Network/trafficManagerProfiles Microsoft.Network/virtualRouters Microsoft.Network/customIpPrefixes (Custom IP Prefixes) Microsoft.Network/virtualHubs Microsoft.Network/routeFilters (Route Filters) Microsoft.Network/loadBalancers (Load Balancers) Microsoft.Network/vpnServerConfigurations Microsoft.Network/publicIpPrefixes (Public IP Prefixes) Microsoft.Network/dnsForwardingRulesets (Dns Forwarding Rulesets) Microsoft.Network/networkSecurityPerimeters Microsoft.Network/applicationGateways (Application Gateways) Microsoft.Network/networkProfiles Microsoft.Network/routeTables (Route Tables) Microsoft.Network/vpnGateways Microsoft.Network/securityPartnerProviders Microsoft.Network/dnsResolvers (DNS Private Resolvers) Microsoft.Network/networkWatchers/pingMeshes Microsoft.Network/privateDnsZones (Private DNS zones) Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies (Application Gateway WAF Policies) Microsoft.Network/networkManagers (Network Managers) Microsoft.Network/vpnSites Microsoft.Network/IpAllocations Microsoft.Network/azureFirewalls (Firewalls) Microsoft.Network/networkWatchers/lenses Microsoft.Network/NetworkExperimentProfiles (Internet Analyzer Profiles) Microsoft.Network/expressRoutePorts (ExpressRoute Direct) Microsoft.Network/firewallPolicies (Firewall Policies) Microsoft.Network/networkWatchers/connectionMonitors Microsoft.Network/firewallPolicies/ruleGroups Microsoft.Network/p2sVpnGateways Microsoft.Network/dnsZones (DNS zones) Microsoft.NetworkFunction/azureTrafficCollectors Microsoft.Network/networkWatchers/flowLogs (NSG Flow Logs) Microsoft.Network/serviceEndpointPolicies (Service Endpoint Policies) Microsoft.Network/masterCustomIpPrefixes Microsoft.Network/dscpConfigurations Microsoft.Network/frontDoors (Front Doors) Microsoft.Network/FrontDoorWebApplicationFirewallPolicies (Web Application Firewall Policies (WAF)) Microsoft.Network/networkIntentPolicies Microsoft.Network/virtualNetworkTaps Microsoft.Network/virtualHubs/bgpConnections Microsoft.Network/expressRouteGateways Microsoft.Network/ddosProtectionPlans (DDoS Protection Plans) Microsoft.Network/virtualNetworks (Virtual Networks) Microsoft.Network/connections (Connections) Microsoft.Network/privateEndpointRedirectMaps Microsoft.Network/networkVirtualAppliances Microsoft.Network/privateEndpoints (Private Endpoints) Microsoft.Network/virtualNetworkGateways (Virtual Network Gateways) Microsoft.Network/ipGroups (IP Groups) Microsoft.Network/dnsResolvers/outboundEndpoints Microsoft.Network/networkInterfaces (Network Interfaces) Microsoft.Network/ddosCustomPolicies Microsoft.Network/networkWatchers (Network Watchers) Microsoft.Network/expressRouteCircuits (ExpressRoute Circuits) Microsoft.Network/virtualHubs/ipConfigurations Microsoft.Network/natGateways (NAT Gateways) Microsoft.Network/privateLinkServices (Private Link Services) Microsoft.Network/dnsResolvers/inboundEndpoints Microsoft.Network/localNetworkGateways (Local Network Gateways) Microsoft.Network/PublicIpAddresses (Public IP Addresses) Microsoft.Network/expressRouteCrossConnections Microsoft.Network/sampleResources
Microsoft.RecoveryServices	Expand to view the list of resource types Microsoft.RecoveryServices/vaults/backupStorageConfig Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectedItems Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers Microsoft.RecoveryServices/vaults/replicationFabrics Microsoft.RecoveryServices/vaults/replicationFabrics/replicationProtectionContainers/replicationProtectionContainerMappings Microsoft.RecoveryServices/vaults/replicationFabrics/replicationRecoveryServicesProviders Microsoft.RecoveryServices/vaults (Recovery Services Vaults)
Microsoft.Security	Expand to view the list of resource types Microsoft.Security/assignments Microsoft.Security/iotSecuritySolutions Microsoft.Security/customEntityStoreAssignments Microsoft.SecurityDetonation/chambers (Security Detonation Chambers) Microsoft.Security/securityConnectors Microsoft.SecurityDevops/githubConnectors Microsoft.Security/automations Microsoft.Security/dataScanners Microsoft.Security/standards
Microsoft.Sql	Expand to view the list of resource types Microsoft.Sql/servers (SQL Servers) Microsoft.SqlVirtualMachine/SqlVirtualMachines (SQL Virtual Machines) Microsoft.Sql/servers/databases (SQL Databases) Microsoft.Sql/servers/elasticPools (SQL Elastic Pools) Microsoft.Sql/managedInstances/databases (Managed Databases) Microsoft.SqlVirtualMachine/sqlVirtualMachineGroups Microsoft.Sql/managedInstances (SQL Managed Instances) Microsoft.Sql/instancePools (Instance Pools) Microsoft.Sql/servers/jobAccounts Microsoft.Sql/virtualClusters (Virtual Clusters) Microsoft.Sql/servers/jobAgents (Elastic Job Agents) Microsoft.Sql/servers/administrators
Microsoft.SqlVM	Microsoft.SqlVM
Microsoft.Storage	Expand to view the list of resource types Microsoft.StorageCache/amlFilesystems (Lustre File Systems) Microsoft.StorageCache/caches (HPC Caches) Microsoft.StorageSync/storageSyncServices (Storage Sync Services) Microsoft.Storage/dataMovers Microsoft.Storage/StorageAccounts (Storage Accounts) Microsoft.StorageSyncDev/storageSyncServices (Storage Sync Services) Microsoft.StoragePool/diskPools (Disk Pools) Microsoft.StorageSyncInt/storageSyncServices (Storage Sync Services)
Microsoft.Synapse	Expand to view the list of resource types Microsoft.Synapse/workspaces/kustoPools (Data Explorer Pools (preview)) Microsoft.Synapse/workspaces/eventStreams Microsoft.Synapse/workspaces/bigDataPools (Apache Spark Pools) Microsoft.Synapse/privateLinkHubs (Azure Synapse Analytics (private link hubs)) Microsoft.Synapse/workspaces/sqlDatabases Microsoft.Synapse/workspaces (Azure Synapse Analytics) Microsoft.Synapse/workspaces/sqlPools (Dedicated SQL Pools)
Microsoft.Web	Expand to view the list of resource types Microsoft.Web/apiManagementAccounts Microsoft.Web/containerApps (Container Apps) Microsoft.Web/sites/premierAddons Microsoft.Web/sites (App Services) Microsoft.Web/apiManagementAccounts/apis Microsoft.Web/connections (API Connections) Microsoft.Web/sites/slots (App Service (Slots)) Microsoft.Web/connectionGateways (On-premises Data Gateways) Microsoft.Web/StaticSites (Static Web Apps) Microsoft.Web/KubeEnvironments (App Service Kubernetes Environments) Microsoft.Web/customApis (Logic Apps Custom Connector) Microsoft.Web/HostingEnvironments (App Service Environments) Microsoft.Web/serverFarms (App Service Plans) Microsoft.Web/workerApps Microsoft.Web/certificates

In addition to the above resource types, Lacework resource inventory also ingests the following Active Directory resource types.

Lacework Resource Type: organization
Microsoft Graph Type: organization

OData Type of Response	URL Used to Fetch the Resource	Resource Object Properties
microsoft.graph.organization	GET https://graph.microsoft.com/v1.0/organization	Organization Resource Type

Lacework Resource Type: user
Microsoft Graph Type: user

OData Type of Response	URL Used to Fetch the Resource	Resource Object Properties
microsoft.graph.user	GET https://graph.microsoft.com/v1.0/users?$select=id,displayName,givenName,userPrincipalName,userType,passwordPolicies,onPremisesExtensionAttributes	User Resource Type

Lacework Resource Type: group
Microsoft Graph Type: group

OData Type of Response	URL Used to Fetch the Resource	Resource Object Properties
microsoft.graph.group	GET https://graph.microsoft.com/v1.0/groups	Group Resource Type

Lacework Resource Type: group_member
Microsoft Graph Type: (Not applicable as this is a dependant field of group)

OData Type of Response	URL Used to Fetch the Resource	Resource Object Properties
microsoft.graph.user	GET https://graph.microsoft.com/v1.0/groups/[id]/members	Directory Object Resource Type

Lacework Resource Type: group_owner
Microsoft Graph Type: (Not applicable as this is a dependant field of group)

OData Type of Response	URL Used to Fetch the Resource	Resource Object Properties
microsoft.graph.user	GET https://graph.microsoft.com/v1.0/groups/[id]/owners	User Resource Type

Lacework Resource Type: servicePrincipal
Microsoft Graph Type: servicePrincipal

OData Type of Response	URL Used to Fetch the Resource	Resource Object Properties
microsoft.graph.servicePrincipal	GET https://graph.microsoft.com/v1.0/servicePrincipals	Service Principal Resource Type

Lacework Resource Type: appRoleAssignment
Microsoft Graph Type: appRoleAssignment

OData Type of Response	URL Used to Fetch the Resource	Resource Object Properties
microsoft.graph.appRoleAssignments	GET https://graph.microsoft.com/v1.0/servicePrincipals/(ID)/appRoleAssignments	App Role Assignment Resource Type

Lacework Resource Type: directoryRole
Microsoft Graph Type: directoryRole

OData Type of Response	URL Used to Fetch the Resource	Resource Object Properties
microsoft.graph.directoryRole	GET https://graph.microsoft.com/v1.0/directoryRoles	Directory Role Resource Type

Lacework Resource Type: domain
Microsoft Graph Type: domain

OData Type of Response	URL Used to Fetch the Resource	Resource Object Properties
microsoft.graph.domain	GET https://graph.microsoft.com/v1.0/domains	Domain Resource Type

Lacework Resource Type: administrativeUnit
Microsoft Graph Type: administrativeUnit

OData Type of Response	URL Used to Fetch the Resource	Resource Object Properties
microsoft.graph.administrativeUnit	GET https://graph.microsoft.com/v1.0/directory/administrativeUnits	Administrative Unit Resource Type

note

For the full list of possible resources, see Azure Resource Graph table and resource type reference and Azure Resource Containers.
To view the list of resources from the Azure portal, select Menu > All Resources.