{
"$comment": "GENERATED by build-tools/page-builder/build_llms_assets.py from app/pane-index.json, which is itself generated from service-definitions/pane-catalog.json -- the catalogue the product runs on. Do not edit by hand. Both steps are gated, so the slugs here are the slugs that work.",
"embed_shapes": {
"compound": "",
"service": "",
"note": "Pick by `kind`. Add data-lp-region when region_scope is 'regional'. A compound pane WITHOUT its mount class renders nothing. `attributes` are the columns a service pane shows by default; `optional_attributes` also exist and can be named in data-lp-attributes, but naming ANY attribute replaces the default set entirely. Putting `tags` (AWS/Azure) or `labels` (GCP) FIRST pulls it out of the columns and auto-expands every row to show the chips; anywhere else it is an inline count."
},
"stability": {
"identifiers": "provider, slug, mount and service_id are STABLE. They do not change once published and are never reused for a different pane, so generated markup keeps working.",
"withdrawal": "A pane is occasionally withdrawn. Its container then stops rendering; every other pane on the page is unaffected.",
"schema": "schema_version covers this FILE's shape, which may gain fields but will not rename or repurpose them."
},
"schema_version": 1,
"generated_for": "LLM-assisted dashboard composition",
"site": "https://lightpane.io",
"categories": {
"inventory": "Inventory",
"cost": "Cost",
"security": "Security & Identity",
"compliance": "Compliance",
"operations": "Operations",
"network": "Networking",
"quota": "Quotas & Limits",
"data": "Data & Storage",
"change": "Change & Audit"
},
"providers": [
"aws",
"azure",
"gcp"
],
"tiers": {
"explorer": "Explorer",
"builder": "Builder",
"team": "Team+"
},
"pane_count": 210,
"panes": [
{
"slug": "access-analyzer",
"label": "Access Analyzer",
"description": "IAM Access Analyzer findings \u2014 resources accessible from outside the account's trust boundary.",
"category": "security",
"provider": "aws",
"tier": "explorer",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-access-analyzer-panel",
"catalog_url": "https://lightpane.io/catalog/aws/access-analyzer/"
},
{
"slug": "alarm-gaps",
"label": "Alarm Coverage Gap",
"description": "Resources that should have CloudWatch alarms but don't \u2014 find the gaps before they bite.",
"category": "operations",
"provider": "aws",
"tier": "explorer",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-alarm-gaps-panel",
"catalog_url": "https://lightpane.io/catalog/aws/alarm-gaps/"
},
{
"slug": "ami-inventory",
"label": "Ami Inventory",
"description": "Every AMI in the account with creation date, in-use count and stale candidates ready to deregister.",
"category": "inventory",
"provider": "aws",
"tier": "explorer",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-ami-inventory-panel",
"catalog_url": "https://lightpane.io/catalog/aws/ami-inventory/"
},
{
"slug": "app-health",
"label": "App Health",
"description": "Account-wide operational health scorecard \u2014 15 rules across monitoring, backup, capacity and runtime.",
"category": "operations",
"provider": "aws",
"tier": "explorer",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-app-health-panel",
"catalog_url": "https://lightpane.io/catalog/aws/app-health/"
},
{
"slug": "asg-activity",
"label": "Asg Activity",
"description": "Every Auto Scaling group with capacity, scaling rules and a 24-hour activity timeline.",
"category": "operations",
"provider": "aws",
"tier": "explorer",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-asg-activity-panel",
"catalog_url": "https://lightpane.io/catalog/aws/asg-activity/"
},
{
"slug": "aws-health",
"label": "AWS Health",
"description": "AWS Health events: service incidents, scheduled maintenance, security advisories and notifications.",
"category": "operations",
"provider": "aws",
"tier": "explorer",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-aws-health-panel",
"catalog_url": "https://lightpane.io/catalog/aws/aws-health/"
},
{
"slug": "backup-jobs",
"label": "AWS Backup",
"description": "AWS Backup plans and recent job results \u2014 what's protected, when it ran and any failures.",
"category": "data",
"provider": "aws",
"tier": "explorer",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-backup-jobs-panel",
"catalog_url": "https://lightpane.io/catalog/aws/backup-jobs/"
},
{
"slug": "cfn-drift",
"label": "CloudFormation Drift",
"description": "CloudFormation stacks ranked by drift state, with per-resource property diffs for drifted stacks.",
"category": "compliance",
"provider": "aws",
"tier": "explorer",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-cfn-drift-panel",
"catalog_url": "https://lightpane.io/catalog/aws/cfn-drift/"
},
{
"slug": "cloudfront",
"label": "CloudFront",
"description": "Every CloudFront distribution with hit ratio, requests per hour, error rate and origin latency.",
"category": "network",
"provider": "aws",
"tier": "explorer",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-cloudfront-panel",
"catalog_url": "https://lightpane.io/catalog/aws/cloudfront/"
},
{
"slug": "cloudfront-free-tier",
"label": "CloudFront Free Tier",
"description": "CloudFront Free Tier consumption (1 TB / 10M requests) with burn rate and projected overage.",
"category": "cost",
"provider": "aws",
"tier": "explorer",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-cloudfront-free-tier-panel",
"catalog_url": "https://lightpane.io/catalog/aws/cloudfront-free-tier/"
},
{
"slug": "cloudtrail-search",
"label": "CloudTrail Search",
"description": "Filtered search across CloudTrail events: event name, principal, resource and category.",
"category": "change",
"provider": "aws",
"tier": "team",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-cloudtrail-search-panel",
"catalog_url": "https://lightpane.io/catalog/aws/cloudtrail-search/"
},
{
"slug": "compute-optimizer",
"label": "Compute Optimizer",
"description": "AWS Compute Optimizer findings across EC2, EBS, Lambda, ECS and Auto Scaling in one filterable list.",
"category": "cost",
"provider": "aws",
"tier": "builder",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-compute-optimizer-panel",
"catalog_url": "https://lightpane.io/catalog/aws/compute-optimizer/"
},
{
"slug": "config-compliance",
"label": "Config Compliance",
"description": "AWS Config rules with compliance counts per pack (CIS, PCI, OPS) and non-compliant resources.",
"category": "compliance",
"provider": "aws",
"tier": "explorer",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-config-compliance-panel",
"catalog_url": "https://lightpane.io/catalog/aws/config-compliance/"
},
{
"slug": "cost-by-tag",
"label": "Cost by Tag",
"description": "AWS spend grouped by a tag (Environment, Team, Application) \u2014 what each slice of the account costs.",
"category": "cost",
"provider": "aws",
"tier": "builder",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-cost-by-tag-panel",
"catalog_url": "https://lightpane.io/catalog/aws/cost-by-tag/"
},
{
"slug": "cost-forecast",
"label": "Cost Forecast",
"description": "30 days of daily AWS cost plus a 30-day forecast, with cost anomalies and remediation hints.",
"category": "cost",
"provider": "aws",
"tier": "builder",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-cost-forecast-panel",
"catalog_url": "https://lightpane.io/catalog/aws/cost-forecast/"
},
{
"slug": "cost-summary",
"label": "Cost Summary",
"description": "Month-to-date AWS spend by service, region and account, with the top movers since last month.",
"category": "cost",
"provider": "aws",
"tier": "builder",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-cost-summary-panel",
"catalog_url": "https://lightpane.io/catalog/aws/cost-summary/"
},
{
"slug": "cw-alarms",
"label": "Cw Alarms",
"description": "Every CloudWatch alarm with state, threshold, the metric driving it and a recent sparkline.",
"category": "operations",
"provider": "aws",
"tier": "explorer",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-cw-alarms-panel",
"catalog_url": "https://lightpane.io/catalog/aws/cw-alarms/"
},
{
"slug": "cw-logs",
"label": "CloudWatch Logs Storage",
"description": "Every CloudWatch Log Group with volume, retention, last event and monthly storage cost.",
"category": "operations",
"provider": "aws",
"tier": "explorer",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-cw-logs-panel",
"catalog_url": "https://lightpane.io/catalog/aws/cw-logs/"
},
{
"slug": "daily-briefing",
"label": "Daily Briefing",
"description": "Newspaper-style 24h summary: alarms, security findings, free-tier hot spots and cost opportunities.",
"category": "operations",
"provider": "aws",
"tier": "builder",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-daily-briefing-panel",
"catalog_url": "https://lightpane.io/catalog/aws/daily-briefing/"
},
{
"slug": "data-transfer",
"label": "Data Transfer Hotspots",
"description": "Where AWS data-transfer cost is coming from \u2014 NAT, cross-region, cross-AZ, CloudFront, ranked.",
"category": "cost",
"provider": "aws",
"tier": "explorer",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-data-transfer-panel",
"catalog_url": "https://lightpane.io/catalog/aws/data-transfer/"
},
{
"slug": "dynamodb",
"label": "DynamoDB",
"description": "Every DynamoDB table with capacity, throttles, item count, size and feature flags (PITR, TTL).",
"category": "inventory",
"provider": "aws",
"tier": "explorer",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-dynamodb-panel",
"catalog_url": "https://lightpane.io/catalog/aws/dynamodb/"
},
{
"slug": "ebs-snapshots",
"label": "EBS Snapshot Cost",
"description": "Every EBS snapshot with size, age and whether its source volume still exists \u2014 orphans first.",
"category": "cost",
"provider": "aws",
"tier": "explorer",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-ebs-snapshots-panel",
"catalog_url": "https://lightpane.io/catalog/aws/ebs-snapshots/"
},
{
"slug": "ecs-services",
"label": "ECS Services",
"description": "Every ECS service across every cluster, with deploy state, task counts and recent events.",
"category": "inventory",
"provider": "aws",
"tier": "explorer",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-ecs-services-panel",
"catalog_url": "https://lightpane.io/catalog/aws/ecs-services/"
},
{
"slug": "eip-eni",
"label": "EIP / ENI",
"description": "Every Elastic IP and ENI with attachment state \u2014 unattached EIPs (avoidable hourly cost) first.",
"category": "network",
"provider": "aws",
"tier": "explorer",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-eip-eni-panel",
"catalog_url": "https://lightpane.io/catalog/aws/eip-eni/"
},
{
"slug": "eks-overview",
"label": "EKS Overview",
"description": "Every EKS cluster with Kubernetes version, node groups, add-ons and upcoming upgrade windows.",
"category": "inventory",
"provider": "aws",
"tier": "explorer",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-eks-overview-panel",
"catalog_url": "https://lightpane.io/catalog/aws/eks-overview/"
},
{
"slug": "engine-eol",
"label": "Engine Eol",
"description": "RDS, Aurora, ElastiCache and EKS engines reaching End-of-Life within the next year.",
"category": "compliance",
"provider": "aws",
"tier": "explorer",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-engine-eol-panel",
"catalog_url": "https://lightpane.io/catalog/aws/engine-eol/"
},
{
"slug": "extended-support",
"label": "Extended Support Cost",
"description": "RDS, Aurora and EKS engines on AWS Extended Support, the monthly surcharge and upgrade target.",
"category": "compliance",
"provider": "aws",
"tier": "explorer",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-extended-support-panel",
"catalog_url": "https://lightpane.io/catalog/aws/extended-support/"
},
{
"slug": "free-tier",
"label": "Free Tier Monitor",
"description": "AWS Free Tier usage against allowances \u2014 which services are nearing their limits this month.",
"category": "cost",
"provider": "aws",
"tier": "builder",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-free-tier-panel",
"catalog_url": "https://lightpane.io/catalog/aws/free-tier/"
},
{
"slug": "global-search",
"label": "Global Resource Search",
"description": "Free-text search across every discovered AWS resource \u2014 instances, buckets, functions, databases.",
"category": "inventory",
"provider": "aws",
"tier": "builder",
"kind": "compound",
"region_scope": "all regions",
"mount": "lp-global-search-panel",
"catalog_url": "https://lightpane.io/catalog/aws/global-search/"
},
{
"slug": "guardduty",
"label": "GuardDuty",
"description": "Active GuardDuty threats: crypto-mining, credential exfiltration, unusual API patterns and more.",
"category": "security",
"provider": "aws",
"tier": "explorer",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-guardduty-panel",
"catalog_url": "https://lightpane.io/catalog/aws/guardduty/"
},
{
"slug": "iam-keys",
"label": "IAM Access Keys",
"description": "IAM access keys with age, last-used date and service \u2014 stale and unused keys called out first.",
"category": "security",
"provider": "aws",
"tier": "explorer",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-iam-keys-panel",
"catalog_url": "https://lightpane.io/catalog/aws/iam-keys/"
},
{
"slug": "idle-finder",
"label": "Idle Finder",
"description": "Resources sitting idle and costing money \u2014 low-CPU instances, idle databases, unused volumes.",
"category": "operations",
"provider": "aws",
"tier": "explorer",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-idle-finder-panel",
"catalog_url": "https://lightpane.io/catalog/aws/idle-finder/"
},
{
"slug": "incident-composer",
"label": "Event Correlation",
"description": "Alarms, deploys, security findings and CloudTrail events on one timeline for incident reviews.",
"category": "operations",
"provider": "aws",
"tier": "builder",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-incident-composer-panel",
"catalog_url": "https://lightpane.io/catalog/aws/incident-composer/"
},
{
"slug": "incident-trail",
"label": "CloudTrail Events",
"description": "CloudTrail audit trail of every API call that changed the account \u2014 filter, search and drill in.",
"category": "operations",
"provider": "aws",
"tier": "builder",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-incident-trail-panel",
"catalog_url": "https://lightpane.io/catalog/aws/incident-trail/"
},
{
"slug": "kms-rotation",
"label": "Key & Secret Rotation",
"description": "KMS keys and Secrets Manager secrets with rotation state: off, overdue or actively rotating.",
"category": "security",
"provider": "aws",
"tier": "explorer",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-kms-rotation-panel",
"catalog_url": "https://lightpane.io/catalog/aws/kms-rotation/"
},
{
"slug": "lambda-radar",
"label": "Lambda Radar",
"description": "Every Lambda function with concurrency, error rate, throttles and a 24-hour invocation trend.",
"category": "inventory",
"provider": "aws",
"tier": "explorer",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-lambda-radar-panel",
"catalog_url": "https://lightpane.io/catalog/aws/lambda-radar/"
},
{
"slug": "lb-health",
"label": "Load Balancer Health",
"description": "Every load balancer with target groups, healthy / unhealthy counts and recent state changes.",
"category": "network",
"provider": "aws",
"tier": "explorer",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-lb-health-panel",
"catalog_url": "https://lightpane.io/catalog/aws/lb-health/"
},
{
"slug": "nat-traffic",
"label": "NAT Traffic",
"description": "Every NAT Gateway with bytes-out, connection count and a monthly cost breakdown.",
"category": "network",
"provider": "aws",
"tier": "explorer",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-nat-traffic-panel",
"catalog_url": "https://lightpane.io/catalog/aws/nat-traffic/"
},
{
"slug": "public-exposure",
"label": "Public Exposure Audit",
"description": "Every publicly-reachable resource \u2014 buckets, databases, EC2, ALBs \u2014 split into critical vs expected.",
"category": "security",
"provider": "aws",
"tier": "explorer",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-public-exposure-panel",
"catalog_url": "https://lightpane.io/catalog/aws/public-exposure/"
},
{
"slug": "rds-backups",
"label": "RDS Backups",
"description": "Every RDS instance and Aurora cluster with retention, snapshot age, Multi-AZ and deletion protection.",
"category": "inventory",
"provider": "aws",
"tier": "explorer",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-rds-backups-panel",
"catalog_url": "https://lightpane.io/catalog/aws/rds-backups/"
},
{
"slug": "reachability",
"label": "Reachability",
"description": "VPC Reachability Analyzer paths \u2014 proof that one resource can or cannot reach another.",
"category": "network",
"provider": "aws",
"tier": "builder",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-reachability-panel",
"catalog_url": "https://lightpane.io/catalog/aws/reachability/"
},
{
"slug": "region-map",
"label": "Multi-Region Footprint",
"description": "World map of which AWS regions this account uses, sized by resource count.",
"category": "inventory",
"provider": "aws",
"tier": "builder",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-region-map-panel",
"catalog_url": "https://lightpane.io/catalog/aws/region-map/"
},
{
"slug": "ri-savings",
"label": "RI & Savings Plans",
"description": "Reserved Instances and Savings Plans coverage, utilisation and uncovered on-demand usage.",
"category": "cost",
"provider": "aws",
"tier": "builder",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-ri-savings-panel",
"catalog_url": "https://lightpane.io/catalog/aws/ri-savings/"
},
{
"slug": "rightsize",
"label": "Right-Sizing",
"description": "EC2, EBS, Lambda and ECS resources AWS thinks are over-provisioned, with projected monthly savings.",
"category": "cost",
"provider": "aws",
"tier": "builder",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-rightsize-panel",
"catalog_url": "https://lightpane.io/catalog/aws/rightsize/"
},
{
"slug": "root-summary",
"label": "Root Summary",
"description": "Root credential summary: MFA, access keys, last-used, IAM user count and password policy.",
"category": "operations",
"provider": "aws",
"tier": "explorer",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-root-summary-panel",
"catalog_url": "https://lightpane.io/catalog/aws/root-summary/"
},
{
"slug": "route53",
"label": "Route53",
"description": "Route 53 hosted zones, DNS records and health checks \u2014 DNS state for the account in one view.",
"category": "network",
"provider": "aws",
"tier": "explorer",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-route53-panel",
"catalog_url": "https://lightpane.io/catalog/aws/route53/"
},
{
"slug": "runtime-eol",
"label": "Runtime Eol",
"description": "Lambda functions on deprecated runtimes, with AWS's block-create and disable dates.",
"category": "compliance",
"provider": "aws",
"tier": "explorer",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-runtime-eol-panel",
"catalog_url": "https://lightpane.io/catalog/aws/runtime-eol/"
},
{
"slug": "s3-grid",
"label": "S3 Bucket Grid",
"description": "Every S3 bucket with size, encryption, versioning, public-access-block and storage-class split.",
"category": "data",
"provider": "aws",
"tier": "explorer",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-s3-grid-panel",
"catalog_url": "https://lightpane.io/catalog/aws/s3-grid/"
},
{
"slug": "sd-access-analyzers",
"label": "Access analyzers",
"description": "Every IAM Access Analyzer with type, status and current finding count.",
"category": "security",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "access_analyzers",
"attributes": [
"name",
"type",
"status",
"active_findings",
"last_resource_analyzed_at"
],
"optional_attributes": [
"arn",
"created_at",
"last_resource_analyzed"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-access-analyzers/"
},
{
"slug": "sd-acm-certificates",
"label": "ACM certificates",
"description": "Every ACM certificate with domain, status, validation method and expiry date.",
"category": "network",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "acm_certificates",
"attributes": [
"name",
"certificate_arn",
"domain",
"status",
"type",
"not_after"
],
"optional_attributes": [
"key_algorithm",
"in_use",
"renewal_eligibility",
"not_before"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-acm-certificates/"
},
{
"slug": "sd-amis",
"label": "AMIs",
"description": "Every AMI in the account with creation date, virtualisation type and public-share state.",
"category": "inventory",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "amis",
"attributes": [
"name",
"image_id",
"state",
"architecture",
"root_device_type",
"creation_date",
"public"
],
"optional_attributes": [
"virtualization_type",
"description",
"owner_id",
"tags"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-amis/"
},
{
"slug": "sd-api-gateway-http-apis",
"label": "API Gateway (HTTP)",
"description": "Every HTTP API in API Gateway with protocol, endpoint type and route count.",
"category": "inventory",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "api_gateway_http_apis",
"attributes": [
"name",
"api_id",
"protocol",
"api_endpoint",
"description",
"created"
],
"optional_attributes": [
"cors_origins",
"disable_execute",
"route_selection",
"version",
"tags"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-api-gateway-http-apis/"
},
{
"slug": "sd-api-gateway-rest-apis",
"label": "API Gateway (REST)",
"description": "Every REST API in API Gateway with endpoint type, stage count and last-updated date.",
"category": "inventory",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "api_gateway_rest_apis",
"attributes": [
"name",
"api_id",
"endpoint_type",
"description",
"created"
],
"optional_attributes": [
"protocol",
"disable_execute_api",
"version",
"warnings",
"tags"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-api-gateway-rest-apis/"
},
{
"slug": "sd-autoscaling-groups",
"label": "Auto Scaling groups",
"description": "Every Auto Scaling group with capacity (min / desired / max), instance type and AZs.",
"category": "inventory",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "autoscaling_groups",
"attributes": [
"name",
"min_size",
"desired_capacity",
"max_size",
"instances_count",
"health_check_type",
"zones_subnets",
"created"
],
"optional_attributes": [
"status",
"health_check_grace",
"launch_template",
"launch_config",
"target_groups",
"tags"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-autoscaling-groups/"
},
{
"slug": "sd-backup-jobs",
"label": "Backup jobs",
"description": "Recent AWS Backup jobs with status, resource, backup plan and completion time.",
"category": "data",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "backup_jobs",
"attributes": [
"name",
"state",
"resource_type",
"resource_arn",
"backup_vault_name",
"creation_date",
"completion_date",
"backup_size_bytes"
],
"optional_attributes": [
"backup_job_id",
"backup_plan_id",
"status_message"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-backup-jobs/"
},
{
"slug": "sd-backup-vaults",
"label": "Backup vaults",
"description": "Every AWS Backup vault with recovery-point count, encryption and access policy.",
"category": "data",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "backup_vaults",
"attributes": [
"name",
"number_of_recovery_points",
"encryption_key_arn",
"locked",
"creation_date"
],
"optional_attributes": [
"backup_vault_name",
"backup_vault_arn",
"min_retention_days",
"max_retention_days"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-backup-vaults/"
},
{
"slug": "sd-cloudformation-stacks",
"label": "CloudFormation stacks",
"description": "Every CloudFormation stack with status, drift state, last-updated time and template source.",
"category": "compliance",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "cloudformation_stacks",
"attributes": [
"name",
"status",
"drift_status",
"description",
"termination_protection",
"updated",
"created"
],
"optional_attributes": [
"status_reason",
"deletion_time",
"role_arn",
"outputs_count",
"parameters_count",
"tags"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-cloudformation-stacks/"
},
{
"slug": "sd-cloudfront",
"label": "CloudFront",
"description": "Every CloudFront distribution with status, default cache behaviour and aliases.",
"category": "network",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "cloudfront",
"attributes": [
"name",
"distribution_id",
"status",
"enabled",
"aliases",
"comment"
],
"optional_attributes": [
"domain_name",
"price_class",
"web_acl_id",
"last_modified",
"http_version"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-cloudfront/"
},
{
"slug": "sd-cloudtrail-trails",
"label": "CloudTrail trails",
"description": "Every CloudTrail trail with multi-region flag, logging status and data-events config.",
"category": "operations",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "cloudtrail_trails",
"attributes": [
"name",
"trail_arn",
"s3_bucket",
"is_multi_region",
"log_file_validation",
"home_region"
],
"optional_attributes": [
"include_global",
"has_custom_event_selectors"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-cloudtrail-trails/"
},
{
"slug": "sd-cloudwatch-alarms",
"label": "CloudWatch alarms",
"description": "Every CloudWatch alarm with state (OK / ALARM / INSUFFICIENT_DATA), threshold and metric.",
"category": "operations",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "cloudwatch_alarms",
"attributes": [
"name",
"state",
"namespace",
"metric_name",
"comparison",
"threshold",
"description"
],
"optional_attributes": [
"alarm_name",
"alarm_arn",
"dimensions",
"period",
"evaluation_periods",
"actions_enabled",
"updated"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-cloudwatch-alarms/"
},
{
"slug": "sd-cloudwatch-log-groups",
"label": "CloudWatch log groups",
"description": "Every CloudWatch Log Group with retention setting, stored bytes and last-event time.",
"category": "operations",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "cloudwatch_log_groups",
"attributes": [
"name",
"stored_bytes",
"retention_days",
"kms_key_id",
"data_protection",
"created"
],
"optional_attributes": [
"log_group_arn"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-cloudwatch-log-groups/"
},
{
"slug": "sd-codebuild-projects",
"label": "CodeBuild projects",
"description": "Every CodeBuild project with environment, source provider and last-build outcome.",
"category": "inventory",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "codebuild_projects",
"attributes": [
"name",
"project_name"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-codebuild-projects/"
},
{
"slug": "sd-codepipeline-pipelines",
"label": "CodePipeline pipelines",
"description": "Every CodePipeline with stage count, version, last-execution status and update date.",
"category": "inventory",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "codepipeline_pipelines",
"attributes": [
"name",
"pipeline_name",
"version",
"created",
"updated"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-codepipeline-pipelines/"
},
{
"slug": "sd-config-rules",
"label": "AWS Config rules",
"description": "Every AWS Config rule with compliance counts, source (managed / custom) and trigger type.",
"category": "compliance",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "config_rules",
"attributes": [
"name",
"config_rule_id",
"state",
"source_owner",
"source_identifier",
"description"
],
"optional_attributes": [
"config_rule_name",
"scope"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-config-rules/"
},
{
"slug": "sd-dynamodb-tables",
"label": "DynamoDB tables",
"description": "Every DynamoDB table with billing mode, capacity, item count and size.",
"category": "inventory",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "dynamodb_tables",
"attributes": [
"name",
"table_name",
"status",
"billing_mode",
"item_count",
"table_size",
"creation_time",
"billing_summary",
"provisioned",
"gsi_list",
"replicas",
"ttl_status",
"pitr_status"
],
"optional_attributes": [
"key_schema",
"arn"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-dynamodb-tables/"
},
{
"slug": "sd-ebs-snapshots",
"label": "EBS Snapshots",
"description": "Every EBS snapshot with size, age, source volume and encryption state.",
"category": "data",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "ebs_snapshots",
"attributes": [
"name",
"snapshot_id",
"volume_id",
"state",
"volume_size",
"encrypted",
"start_time",
"progress"
],
"optional_attributes": [
"description",
"owner_id",
"tags"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-ebs-snapshots/"
},
{
"slug": "sd-ebs-volumes",
"label": "EBS volumes",
"description": "Every EBS volume with size, IOPS, encryption and the instance it's attached to.",
"category": "data",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "ebs_volumes",
"attributes": [
"name",
"volume_id",
"size",
"volume_type",
"state",
"encrypted",
"availability_zone",
"attachments"
],
"optional_attributes": [
"iops",
"create_time",
"snapshot_id",
"tags"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-ebs-volumes/"
},
{
"slug": "sd-ec2",
"label": "EC2 instances",
"description": "Every EC2 instance with type, state, IPs, AZ and the AMI it launched from.",
"category": "inventory",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "ec2",
"attributes": [
"name",
"instance_id",
"instance_type",
"state",
"private_ip",
"public_ip",
"subnet_id",
"vpc_id",
"key_name",
"launch_time"
],
"optional_attributes": [
"state_transition_reason",
"availability_zone",
"platform",
"architecture",
"ami_id",
"iam_role",
"security_groups",
"root_device_type",
"ebs_optimized",
"monitoring",
"tags"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-ec2/"
},
{
"slug": "sd-ecr-repositories",
"label": "ECR repositories",
"description": "Every ECR repository with image count, last-pushed date and tag-immutability setting.",
"category": "inventory",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "ecr_repositories",
"attributes": [
"name",
"repository_uri",
"image_tag_mutability",
"scan_on_push",
"created"
],
"optional_attributes": [
"repository_name",
"repository_arn",
"registry_id"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-ecr-repositories/"
},
{
"slug": "sd-ecs-clusters",
"label": "ECS clusters",
"description": "Every ECS cluster with active services, running tasks and capacity providers.",
"category": "inventory",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "ecs_clusters",
"attributes": [
"name",
"status",
"active_services",
"running_tasks",
"pending_tasks",
"container_instances",
"capacity_providers"
],
"optional_attributes": [
"default_capacity",
"arn",
"tags"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-ecs-clusters/"
},
{
"slug": "sd-efs-file-systems",
"label": "EFS file systems",
"description": "Every EFS file system with size, throughput mode, lifecycle policy and mount targets.",
"category": "data",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "efs_file_systems",
"attributes": [
"name",
"file_system_id",
"life_cycle_state",
"performance_mode",
"throughput_mode",
"size_in_bytes",
"encrypted"
],
"optional_attributes": [
"creation_time",
"number_of_mount_targets",
"tags"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-efs-file-systems/"
},
{
"slug": "sd-eks-clusters",
"label": "EKS clusters",
"description": "Every EKS cluster with Kubernetes version, endpoint access and node groups.",
"category": "inventory",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "eks_clusters",
"attributes": [
"name",
"status",
"k8s_version",
"platform_version",
"endpoint_public",
"endpoint_private",
"vpc_id",
"created"
],
"optional_attributes": [
"endpoint",
"role_arn",
"encryption",
"arn",
"tags"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-eks-clusters/"
},
{
"slug": "sd-elastic-ips",
"label": "Elastic IPs",
"description": "Every Elastic IP with attached resource \u2014 unattached EIPs (avoidable hourly cost) first.",
"category": "network",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "elastic_ips",
"attributes": [
"name",
"public_ip",
"allocation_id",
"instance_id",
"private_ip",
"domain"
],
"optional_attributes": [
"association_id",
"network_interface",
"tags"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-elastic-ips/"
},
{
"slug": "sd-elasticache-clusters",
"label": "ElastiCache clusters",
"description": "Every ElastiCache cluster node with engine, node type, status and cache version.",
"category": "inventory",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "elasticache_clusters",
"attributes": [
"name",
"cluster_id",
"engine",
"engine_version",
"node_type",
"status",
"num_nodes"
],
"optional_attributes": [
"preferred_az",
"subnet_group",
"created"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-elasticache-clusters/"
},
{
"slug": "sd-elasticache-replication-groups",
"label": "ElastiCache replication groups",
"description": "Every ElastiCache replication group with engine, primary / replicas and shard count.",
"category": "inventory",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "elasticache_replication_groups",
"attributes": [
"name",
"replication_group_id",
"description",
"status",
"node_type",
"automatic_failover"
],
"optional_attributes": [
"engine",
"multi_az",
"member_clusters",
"cluster_enabled"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-elasticache-replication-groups/"
},
{
"slug": "sd-elb-load-balancers",
"label": "Load balancers",
"description": "Every load balancer (ALB / NLB / GLB) with scheme, listeners and target groups.",
"category": "network",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "elb_load_balancers",
"attributes": [
"name",
"type",
"scheme",
"state",
"vpc_id",
"dns_name",
"availability_zones",
"target_groups"
],
"optional_attributes": [
"load_balancer_arn",
"created",
"ip_address_type"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-elb-load-balancers/"
},
{
"slug": "sd-emr-clusters",
"label": "EMR clusters",
"description": "Every EMR cluster with state, instance fleet, release label and runtime.",
"category": "inventory",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "emr_clusters",
"attributes": [
"name",
"status",
"release",
"app_count",
"instance_collection"
],
"optional_attributes": [
"cluster_id",
"availability_zone",
"subnet",
"master_dns",
"auto_terminate",
"termination_protected",
"normalized_instance_hours",
"created",
"ready"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-emr-clusters/"
},
{
"slug": "sd-eventbridge-rules",
"label": "EventBridge rules",
"description": "Every EventBridge rule with schedule / event pattern, bus and target count.",
"category": "inventory",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "eventbridge_rules",
"attributes": [
"name",
"arn",
"state",
"description",
"schedule",
"event_bus"
],
"optional_attributes": [
"rule_name",
"event_pattern"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-eventbridge-rules/"
},
{
"slug": "sd-freetier-usage",
"label": "Free Tier usage",
"description": "AWS Free Tier usage with service, allowance, actual usage and projected month-end consumption.",
"category": "cost",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "freetier_usage",
"attributes": [
"service",
"description",
"actual_usage",
"forecasted_usage",
"limit",
"unit",
"free_tier_type"
],
"optional_attributes": [
"operation",
"usage_type",
"period"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-freetier-usage/"
},
{
"slug": "sd-glue-databases",
"label": "Glue databases",
"description": "Every Glue catalog database with table count, location URI and description.",
"category": "inventory",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "glue_databases",
"attributes": [
"name",
"description",
"create_time"
],
"optional_attributes": [
"database_name",
"location_uri"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-glue-databases/"
},
{
"slug": "sd-guardduty-detectors",
"label": "GuardDuty detectors",
"description": "Every GuardDuty detector with status, data sources, finding-publishing frequency.",
"category": "security",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "guardduty_detectors",
"attributes": [
"name",
"detector_id"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-guardduty-detectors/"
},
{
"slug": "sd-iam-policies",
"label": "IAM policies",
"description": "Every IAM managed policy with attachment count, default version and document size.",
"category": "security",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "iam_policies",
"attributes": [
"name",
"path",
"attachment_count",
"default_version",
"updated",
"policy_document"
],
"optional_attributes": [
"arn",
"created"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-iam-policies/"
},
{
"slug": "sd-iam-roles",
"label": "IAM roles",
"description": "Every IAM role with trust policy, attached policies, last-used date and creation.",
"category": "security",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "iam_roles",
"attributes": [
"name",
"path",
"description",
"principal_service",
"principal_account",
"max_session",
"created"
],
"optional_attributes": [
"role_id",
"arn",
"attached_policies",
"assume_policy"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-iam-roles/"
},
{
"slug": "sd-iam-users",
"label": "IAM users",
"description": "Every IAM user with creation date, MFA status, access-key count and attached policies.",
"category": "security",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "iam_users",
"attributes": [
"name",
"path",
"access_keys",
"password_last_used",
"created"
],
"optional_attributes": [
"user_id",
"arn",
"groups_count",
"attached_policies"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-iam-users/"
},
{
"slug": "sd-internet-gateways",
"label": "Internet gateways",
"description": "Every Internet Gateway with attached VPC and current state.",
"category": "network",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "internet_gateways",
"attributes": [
"name",
"igw_id",
"vpc_id",
"state",
"owner_id"
],
"optional_attributes": [
"tags"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-internet-gateways/"
},
{
"slug": "sd-key-pairs",
"label": "Key pairs",
"description": "Every EC2 key pair with name, fingerprint, type and creation date.",
"category": "inventory",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "key_pairs",
"attributes": [
"name",
"key_pair_id",
"key_name",
"key_type",
"create_time"
],
"optional_attributes": [
"key_fingerprint",
"tags"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-key-pairs/"
},
{
"slug": "sd-kinesis-streams",
"label": "Kinesis Streams",
"description": "Every Kinesis stream with shard count, retention period and encryption state.",
"category": "inventory",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "kinesis_streams",
"attributes": [
"name",
"status",
"mode",
"shards",
"encryption"
],
"optional_attributes": [
"stream_name",
"retention_hours",
"consumers",
"created"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-kinesis-streams/"
},
{
"slug": "sd-kms-keys",
"label": "KMS keys",
"description": "Every KMS key with key type, manager (AWS / customer), rotation state and aliases.",
"category": "security",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "kms_keys",
"attributes": [
"name",
"key_id",
"key_state",
"key_manager",
"key_spec",
"rotation_enabled",
"creation_date",
"key_arn",
"key_policy"
],
"optional_attributes": [
"key_usage"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-kms-keys/"
},
{
"slug": "sd-lambda-functions",
"label": "Lambda functions",
"description": "Every Lambda function with runtime, memory, last-modified and reserved concurrency.",
"category": "inventory",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "lambda_functions",
"attributes": [
"name",
"runtime",
"memory",
"timeout",
"description",
"last_modified"
],
"optional_attributes": [
"function_arn",
"handler",
"code_size",
"role",
"package_type",
"architectures",
"version",
"ephemeral_storage",
"function_policy"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-lambda-functions/"
},
{
"slug": "sd-nat-gateways",
"label": "NAT gateways",
"description": "Every NAT Gateway with VPC, subnet, connectivity type and Elastic IP.",
"category": "network",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "nat_gateways",
"attributes": [
"name",
"nat_gw_id",
"state",
"connectivity_type",
"vpc_id",
"subnet_id"
],
"optional_attributes": [
"public_ip",
"private_ip",
"allocation_id",
"create_time",
"tags"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-nat-gateways/"
},
{
"slug": "sd-network-acls",
"label": "Network ACLs",
"description": "Every Network ACL with VPC, ingress / egress rules and associated subnets.",
"category": "network",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "network_acls",
"attributes": [
"name",
"network_acl_id",
"vpc_id",
"is_default",
"rules"
],
"optional_attributes": [
"tags"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-network-acls/"
},
{
"slug": "sd-rds-clusters",
"label": "RDS clusters",
"description": "Every Aurora cluster with engine, version, writer / readers and storage.",
"category": "inventory",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "rds_clusters",
"attributes": [
"name",
"cluster_id",
"engine",
"engine_version",
"status",
"multi_az",
"endpoint",
"reader_endpoint",
"created"
],
"optional_attributes": [
"port",
"members",
"vpc_id",
"backup_retention",
"encrypted",
"tags"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-rds-clusters/"
},
{
"slug": "sd-rds-instances",
"label": "RDS instances",
"description": "Every RDS instance with engine, version, instance class, Multi-AZ and storage.",
"category": "inventory",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "rds_instances",
"attributes": [
"name",
"db_instance_id",
"engine",
"engine_version",
"instance_class",
"status",
"multi_az",
"endpoint",
"created"
],
"optional_attributes": [
"storage_type",
"allocated_storage",
"port",
"vpc_id",
"availability_zone",
"backup_retention",
"encrypted",
"publicly_accessible",
"tags"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-rds-instances/"
},
{
"slug": "sd-redshift-clusters",
"label": "Redshift clusters",
"description": "Every Redshift cluster with node type, count, version and encryption state.",
"category": "inventory",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "redshift_clusters",
"attributes": [
"name",
"cluster_id",
"status",
"node_type",
"number_of_nodes",
"db_name",
"endpoint",
"created"
],
"optional_attributes": [
"port",
"vpc_id",
"encrypted",
"availability_zone",
"tags"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-redshift-clusters/"
},
{
"slug": "sd-route-tables",
"label": "Route tables",
"description": "Every route table with VPC, route entries and associated subnets.",
"category": "network",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "route_tables",
"attributes": [
"name",
"route_table_id",
"vpc_id",
"main",
"details"
],
"optional_attributes": [
"tags"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-route-tables/"
},
{
"slug": "sd-route53-hosted-zones",
"label": "Route 53 hosted zones",
"description": "Every Route 53 hosted zone with public / private flag, record count and name servers.",
"category": "network",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "route53_hosted_zones",
"attributes": [
"name",
"zone_id",
"record_count",
"comment",
"private_zone"
],
"optional_attributes": [
"zone_name",
"caller_reference"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-route53-hosted-zones/"
},
{
"slug": "sd-s3",
"label": "S3 buckets",
"description": "Every S3 bucket with region, size, versioning, encryption and public-access-block state.",
"category": "data",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "s3",
"attributes": [
"name",
"creation_date",
"region",
"versioning",
"encryption",
"bucket_policy"
],
"optional_attributes": [
"block_public_acls",
"ignore_public_acls",
"block_public_policy",
"restrict_public_buckets",
"logging_target",
"tags"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-s3/"
},
{
"slug": "sd-secrets-manager",
"label": "Secrets Manager",
"description": "Every Secrets Manager secret with last-rotated date, rotation enabled flag and KMS key.",
"category": "security",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "secrets_manager",
"attributes": [
"name",
"description",
"rotation_enabled",
"last_changed",
"last_accessed",
"created_date"
],
"optional_attributes": [
"arn",
"kms_key",
"rotation_lambda",
"last_rotated",
"next_rotation",
"tags"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-secrets-manager/"
},
{
"slug": "sd-security-groups",
"label": "Security groups",
"description": "Every security group with VPC, ingress / egress rule counts and attached resources.",
"category": "network",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "security_groups",
"attributes": [
"name",
"group_id",
"group_name",
"description",
"vpc_id",
"rules"
],
"optional_attributes": [
"ingress_rules",
"egress_rules",
"tags"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-security-groups/"
},
{
"slug": "sd-security-hub-findings",
"label": "Security Hub findings",
"description": "Active Security Hub findings with severity, standard, resource and workflow status.",
"category": "security",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "security_hub_findings",
"attributes": [
"name",
"severity_label",
"resource_type",
"product_name",
"compliance_status",
"last_observed"
],
"optional_attributes": [
"finding_id",
"title",
"description",
"severity_norm",
"security_control_id",
"standard_id",
"standard_ids",
"workflow_status",
"record_state",
"resource_id",
"company_name",
"first_observed",
"remediation_text",
"remediation_url"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-security-hub-findings/"
},
{
"slug": "sd-shield-protections",
"label": "Shield protections",
"description": "Every AWS Shield protection with resource, protection group and current state.",
"category": "security",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "shield_protections",
"attributes": [
"name",
"resource_arn",
"health_check_count",
"protection_id"
],
"optional_attributes": [
"protection_arn"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-shield-protections/"
},
{
"slug": "sd-sns-topics",
"label": "SNS topics",
"description": "Every SNS topic with subscription count, owner and encryption (KMS) status.",
"category": "inventory",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "sns_topics",
"attributes": [
"name",
"topic_arn"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-sns-topics/"
},
{
"slug": "sd-sqs",
"label": "SQS queues",
"description": "Every SQS queue with type (standard / FIFO), message count and visibility timeout.",
"category": "inventory",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "sqs",
"attributes": [
"name",
"messages_available",
"messages_in_flight",
"fifo",
"visibility_timeout",
"retention_period"
],
"optional_attributes": [
"queue_url",
"queue_arn",
"messages_delayed",
"max_message_size",
"delay_seconds",
"created",
"last_modified",
"queue_policy"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-sqs/"
},
{
"slug": "sd-ssm-parameters",
"label": "SSM parameters",
"description": "Every SSM Parameter Store entry with type (String / SecureString) and last-modified date.",
"category": "operations",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "ssm_parameters",
"attributes": [
"name",
"type",
"description",
"version",
"last_modified",
"tier"
],
"optional_attributes": [
"parameter_name",
"data_type"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-ssm-parameters/"
},
{
"slug": "sd-step-functions",
"label": "Step Functions",
"description": "Every Step Functions state machine with type (Standard / Express), status and role.",
"category": "inventory",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "step_functions",
"attributes": [
"name",
"state_machine_arn",
"type",
"creation_date"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-step-functions/"
},
{
"slug": "sd-subnets",
"label": "Subnets",
"description": "Every subnet with VPC, AZ, CIDR, available IPs and public-IP-on-launch flag.",
"category": "network",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "subnets",
"attributes": [
"name",
"subnet_id",
"vpc_id",
"cidr_block",
"availability_zone",
"state"
],
"optional_attributes": [
"availability_zone_id",
"available_ips",
"map_public_ip",
"default_for_az",
"owner_id",
"tags"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-subnets/"
},
{
"slug": "sd-transit-gateways",
"label": "Transit gateways",
"description": "Every Transit Gateway with state, owner, attachments and routing tables.",
"category": "network",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "transit_gateways",
"attributes": [
"name",
"tgw_id",
"state",
"description",
"amazon_side_asn",
"dns_support",
"created"
],
"optional_attributes": [
"owner_id",
"vpn_ecmp_support",
"default_route_table_assoc",
"default_route_table_prop",
"auto_accept_shared",
"tags"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-transit-gateways/"
},
{
"slug": "sd-vpc-endpoints",
"label": "VPC endpoints",
"description": "Every VPC endpoint with service name, type (Gateway / Interface) and subnets.",
"category": "network",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "vpc_endpoints",
"attributes": [
"name",
"endpoint_id",
"service_name",
"vpc_id",
"type",
"state"
],
"optional_attributes": [
"subnet_ids",
"route_table_ids",
"private_dns",
"owner_id",
"creation_timestamp",
"tags"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-vpc-endpoints/"
},
{
"slug": "sd-vpc-peering",
"label": "VPC peering",
"description": "Every VPC peering connection with requester, accepter, region and current status.",
"category": "network",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "vpc_peering",
"attributes": [
"name",
"peering_id",
"status",
"requester_vpc",
"requester_cidr",
"accepter_vpc"
],
"optional_attributes": [
"status_message",
"requester_owner",
"requester_region",
"accepter_cidr",
"accepter_owner",
"accepter_region",
"expiration",
"tags"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-vpc-peering/"
},
{
"slug": "sd-vpcs",
"label": "VPCs",
"description": "Every VPC with CIDR, default flag, DNS settings and tenancy.",
"category": "network",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "vpcs",
"attributes": [
"name",
"vpc_id",
"cidr_block",
"state",
"is_default",
"tenancy"
],
"optional_attributes": [
"dhcp_options",
"owner_id",
"tags"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-vpcs/"
},
{
"slug": "sd-waf",
"label": "WAF (regional)",
"description": "Every regional WAFv2 ACL with rule count, default action and associated resources.",
"category": "security",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "waf",
"attributes": [
"name",
"acl_id",
"description",
"arn"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-waf/"
},
{
"slug": "sd-waf-cloudfront",
"label": "WAF (CloudFront)",
"description": "Every CloudFront-scoped WAFv2 ACL with rule count, default action and associated distributions.",
"category": "security",
"provider": "aws",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "waf_cloudfront",
"attributes": [
"name",
"acl_id",
"description",
"arn"
],
"catalog_url": "https://lightpane.io/catalog/aws/sd-waf-cloudfront/"
},
{
"slug": "secrets-browser",
"label": "Secrets Browser",
"description": "Every Secrets Manager secret with metadata, version count and last-changed date (no values).",
"category": "security",
"provider": "aws",
"tier": "explorer",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-secrets-browser-panel",
"catalog_url": "https://lightpane.io/catalog/aws/secrets-browser/"
},
{
"slug": "security-findings",
"label": "Security Findings",
"description": "Consolidated Security Hub findings from Inspector, GuardDuty, Macie, IAM Access Analyzer and Config, prioritised by severity and filterable by source product.",
"category": "security",
"provider": "aws",
"tier": "builder",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-security-findings-panel",
"catalog_url": "https://lightpane.io/catalog/aws/security-findings/"
},
{
"slug": "security-hub",
"label": "Security Compliance",
"description": "AWS Security Hub CSPM control compliance against AWS Foundational Security Best Practices and any other enabled standard, per region \u2014 the pass / fail score mirrors the AWS console's Security Score.",
"category": "security",
"provider": "aws",
"tier": "builder",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-security-hub-panel",
"catalog_url": "https://lightpane.io/catalog/aws/security-hub/"
},
{
"slug": "security-posture",
"label": "Security Posture",
"description": "A 0\u2013100 score for the account's security configuration, broken down by rule category.",
"category": "security",
"provider": "aws",
"tier": "builder",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-security-posture-panel",
"catalog_url": "https://lightpane.io/catalog/aws/security-posture/"
},
{
"slug": "service-quota",
"label": "Service Quotas",
"description": "AWS service quotas with current usage vs limit \u2014 the ones most likely to bite at scale.",
"category": "quota",
"provider": "aws",
"tier": "explorer",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-service-quota-panel",
"catalog_url": "https://lightpane.io/catalog/aws/service-quota/"
},
{
"slug": "step-functions",
"label": "Step Functions",
"description": "Every Step Functions state machine with success/failure rate, duration and 24-hour throughput.",
"category": "inventory",
"provider": "aws",
"tier": "explorer",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-step-functions-panel",
"catalog_url": "https://lightpane.io/catalog/aws/step-functions/"
},
{
"slug": "tag-coverage",
"label": "Tag Coverage Scorecard",
"description": "Which AWS resources carry the required tags and which don't, scored by service type.",
"category": "compliance",
"provider": "aws",
"tier": "explorer",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-tag-coverage-panel",
"catalog_url": "https://lightpane.io/catalog/aws/tag-coverage/"
},
{
"slug": "vpc-topology",
"label": "VPC Topology",
"description": "Per-VPC topology: subnets, route tables, IGWs, NATs, peering and transit-gateway attachments.",
"category": "network",
"provider": "aws",
"tier": "builder",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-vpc-topology-panel",
"catalog_url": "https://lightpane.io/catalog/aws/vpc-topology/"
},
{
"slug": "xray-map",
"label": "Xray Map",
"description": "AWS X-Ray service map of how requests flow between services, with per-edge latency and errors.",
"category": "operations",
"provider": "aws",
"tier": "builder",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-xray-map-panel",
"catalog_url": "https://lightpane.io/catalog/aws/xray-map/"
},
{
"slug": "change-feed",
"label": "Change Feed (24h)",
"description": "24-hour stream of changes from the Activity Log, mixed across services into one timeline.",
"category": "change",
"provider": "azure",
"tier": "team",
"kind": "compound",
"region_scope": "subscription-wide",
"mount": "lp-azure-change-feed-panel",
"catalog_url": "https://lightpane.io/catalog/azure/change-feed/"
},
{
"slug": "cost-by-label-tag",
"label": "Cost by Tag",
"description": "Azure spend grouped by a tag (Environment, Team, CostCenter) \u2014 what each slice costs.",
"category": "cost",
"provider": "azure",
"tier": "builder",
"kind": "compound",
"region_scope": "subscription-wide",
"mount": "lp-azure-cost-by-label-tag-panel",
"catalog_url": "https://lightpane.io/catalog/azure/cost-by-label-tag/"
},
{
"slug": "cost-forecast",
"label": "Cost Forecast (next 30 days)",
"description": "30 days of daily Azure cost plus a 30-day forecast \u2014 track end-of-month spend before the bill.",
"category": "cost",
"provider": "azure",
"tier": "builder",
"kind": "compound",
"region_scope": "project-wide",
"mount": "lp-azure-cost-forecast-panel",
"catalog_url": "https://lightpane.io/catalog/azure/cost-forecast/"
},
{
"slug": "cost-summary",
"label": "Cost Summary",
"description": "Month-to-date Azure spend by service, region and subscription, with top movers since last month.",
"category": "cost",
"provider": "azure",
"tier": "builder",
"kind": "compound",
"region_scope": "subscription-wide",
"mount": "lp-azure-cost-summary-panel",
"catalog_url": "https://lightpane.io/catalog/azure/cost-summary/"
},
{
"slug": "daily-briefing",
"label": "Daily Briefing \u00b7 ",
"description": "Newspaper-style 24h summary across alerts, security findings, activity and cost \u2014 Azure-wide.",
"category": "operations",
"provider": "azure",
"tier": "builder",
"kind": "compound",
"region_scope": "subscription-wide",
"mount": "lp-azure-daily-briefing-panel",
"catalog_url": "https://lightpane.io/catalog/azure/daily-briefing/"
},
{
"slug": "db-inventory",
"label": "Database Inventory",
"description": "Every Azure SQL, Cosmos DB, PostgreSQL and MySQL database with version, HA and backups.",
"category": "inventory",
"provider": "azure",
"tier": "explorer",
"kind": "compound",
"region_scope": "subscription-wide",
"mount": "lp-azure-db-inventory-panel",
"catalog_url": "https://lightpane.io/catalog/azure/db-inventory/"
},
{
"slug": "function-radar",
"label": "Function Radar",
"description": "Every Azure Function App with invocations, error rate, duration and last-deploy timestamp.",
"category": "inventory",
"provider": "azure",
"tier": "explorer",
"kind": "compound",
"region_scope": "subscription-wide",
"mount": "lp-azure-function-radar-panel",
"catalog_url": "https://lightpane.io/catalog/azure/function-radar/"
},
{
"slug": "global-search",
"label": "Global Resource Search",
"description": "Free-text search across every discovered Azure resource \u2014 VMs, storage, functions, databases.",
"category": "inventory",
"provider": "azure",
"tier": "builder",
"kind": "compound",
"region_scope": "all regions",
"mount": "lp-azure-global-search-panel",
"catalog_url": "https://lightpane.io/catalog/azure/global-search/"
},
{
"slug": "iam-sa-audit",
"label": "Service Principal Audit",
"description": "Every Azure service principal with its credentials, role assignments and last-used dates.",
"category": "security",
"provider": "azure",
"tier": "explorer",
"kind": "compound",
"region_scope": "subscription-wide",
"mount": "lp-azure-iam-sa-audit-panel",
"catalog_url": "https://lightpane.io/catalog/azure/iam-sa-audit/"
},
{
"slug": "idle-finder",
"label": "Idle Resource Finder",
"description": "Azure resources sitting idle and costing money \u2014 low-CPU VMs, idle SQL, unattached disks.",
"category": "operations",
"provider": "azure",
"tier": "explorer",
"kind": "compound",
"region_scope": "subscription-wide",
"mount": "lp-azure-idle-finder-panel",
"catalog_url": "https://lightpane.io/catalog/azure/idle-finder/"
},
{
"slug": "incident-timeline",
"label": "Activity Timeline (24h)",
"description": "Activity timeline from the Azure Activity Log \u2014 who changed what, when, filterable by service.",
"category": "operations",
"provider": "azure",
"tier": "builder",
"kind": "compound",
"region_scope": "subscription-wide",
"mount": "lp-azure-incident-timeline-panel",
"catalog_url": "https://lightpane.io/catalog/azure/incident-timeline/"
},
{
"slug": "kms-rotation",
"label": "Key Vault Rotation Audit",
"description": "Azure Key Vault keys with rotation policy, last-rotated date and overdue flag.",
"category": "security",
"provider": "azure",
"tier": "explorer",
"kind": "compound",
"region_scope": "subscription-wide",
"mount": "lp-azure-kms-rotation-panel",
"catalog_url": "https://lightpane.io/catalog/azure/kms-rotation/"
},
{
"slug": "network-exposure",
"label": "Network Exposure",
"description": "NSG rules allowing inbound from the internet \u2014 what's open, which ports and which targets.",
"category": "security",
"provider": "azure",
"tier": "explorer",
"kind": "compound",
"region_scope": "subscription-wide",
"mount": "lp-azure-network-exposure-panel",
"catalog_url": "https://lightpane.io/catalog/azure/network-exposure/"
},
{
"slug": "public-exposure",
"label": "Public Exposure Audit",
"description": "Every publicly-reachable Azure resource \u2014 storage, SQL, VMs, App Gateways \u2014 critical vs expected.",
"category": "security",
"provider": "azure",
"tier": "explorer",
"kind": "compound",
"region_scope": "subscription-wide",
"mount": "lp-azure-public-exposure-panel",
"catalog_url": "https://lightpane.io/catalog/azure/public-exposure/"
},
{
"slug": "quota-radar",
"label": "Quota Radar",
"description": "Azure subscription quotas with current usage vs limit \u2014 the ones most likely to bite at scale.",
"category": "quota",
"provider": "azure",
"tier": "explorer",
"kind": "compound",
"region_scope": "subscription-wide",
"mount": "lp-azure-quota-radar-panel",
"catalog_url": "https://lightpane.io/catalog/azure/quota-radar/"
},
{
"slug": "region-map",
"label": "Multi-Region Footprint",
"description": "World map of which Azure regions this subscription uses, sized by resource count.",
"category": "inventory",
"provider": "azure",
"tier": "builder",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-azure-region-map-panel",
"catalog_url": "https://lightpane.io/catalog/azure/region-map/"
},
{
"slug": "rightsize",
"label": "Compute Right-Sizing",
"description": "Virtual Machines Azure Advisor thinks are over-provisioned, with projected monthly savings.",
"category": "cost",
"provider": "azure",
"tier": "builder",
"kind": "compound",
"region_scope": "subscription-wide",
"mount": "lp-azure-rightsize-panel",
"catalog_url": "https://lightpane.io/catalog/azure/rightsize/"
},
{
"slug": "sd-azure-aks-clusters",
"label": "AKS clusters",
"description": "Every AKS cluster with Kubernetes version, node pool count, FQDN and power state.",
"category": "inventory",
"provider": "azure",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "azure_aks_clusters",
"attributes": [
"name",
"location",
"kubernetes_version",
"provisioning_state",
"node_count",
"node_size",
"fqdn"
],
"optional_attributes": [
"cluster_id",
"power_state",
"dns_prefix",
"network_plugin",
"resource_group",
"tags"
],
"catalog_url": "https://lightpane.io/catalog/azure/sd-azure-aks-clusters/"
},
{
"slug": "sd-azure-app-services",
"label": "App Services",
"description": "Every Azure App Service with kind, SKU, state, runtime stack and default host name.",
"category": "inventory",
"provider": "azure",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "azure_app_services",
"attributes": [
"name",
"state",
"default_host_name",
"kind",
"location",
"https_only",
"runtime_stack"
],
"optional_attributes": [
"app_id",
"resource_group",
"tags"
],
"catalog_url": "https://lightpane.io/catalog/azure/sd-azure-app-services/"
},
{
"slug": "sd-azure-container-registries",
"label": "Container Registries",
"description": "Every Azure Container Registry with SKU, admin-user setting and login server.",
"category": "inventory",
"provider": "azure",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "azure_container_registries",
"attributes": [
"name",
"location",
"sku_name",
"login_server",
"admin_enabled",
"provisioning_state",
"public_network_access"
],
"optional_attributes": [
"registry_id",
"creation_date",
"resource_group",
"tags"
],
"catalog_url": "https://lightpane.io/catalog/azure/sd-azure-container-registries/"
},
{
"slug": "sd-azure-cosmos-accounts",
"label": "Cosmos DB accounts",
"description": "Every Cosmos DB account with API kind, multi-region writes and default consistency.",
"category": "inventory",
"provider": "azure",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "azure_cosmos_accounts",
"attributes": [
"name",
"location",
"kind",
"consistency_level",
"enable_automatic_failover",
"document_endpoint",
"provisioning_state"
],
"optional_attributes": [
"account_id",
"database_account_offer_type",
"enable_multiple_write_locations",
"resource_group",
"tags"
],
"catalog_url": "https://lightpane.io/catalog/azure/sd-azure-cosmos-accounts/"
},
{
"slug": "sd-azure-dns-zones",
"label": "DNS zones",
"description": "Every Azure DNS zone with public / private flag, record count and resource group.",
"category": "network",
"provider": "azure",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "azure_dns_zones",
"attributes": [
"name",
"zone_type",
"number_of_record_sets",
"name_servers",
"resource_group"
],
"optional_attributes": [
"zone_id",
"location",
"max_number_of_record_sets",
"tags"
],
"catalog_url": "https://lightpane.io/catalog/azure/sd-azure-dns-zones/"
},
{
"slug": "sd-azure-event-hubs",
"label": "Event Hubs",
"description": "Every Event Hub namespace with SKU, throughput units and configured event hubs.",
"category": "inventory",
"provider": "azure",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "azure_event_hubs",
"attributes": [
"name",
"location",
"sku_name",
"sku_tier",
"sku_capacity",
"provisioning_state",
"kafka_enabled"
],
"optional_attributes": [
"namespace_id",
"status",
"created_at",
"resource_group",
"tags"
],
"catalog_url": "https://lightpane.io/catalog/azure/sd-azure-event-hubs/"
},
{
"slug": "sd-azure-functions",
"label": "Functions",
"description": "Every Azure Function App with hosting plan, runtime, OS and last-modified date.",
"category": "inventory",
"provider": "azure",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "azure_functions",
"attributes": [
"name",
"state",
"default_host_name",
"kind",
"location",
"runtime"
],
"optional_attributes": [
"function_id",
"resource_group",
"tags"
],
"catalog_url": "https://lightpane.io/catalog/azure/sd-azure-functions/"
},
{
"slug": "sd-azure-key-vaults",
"label": "Key Vaults",
"description": "Every Azure Key Vault with SKU, soft-delete setting, network ACLs and access model.",
"category": "security",
"provider": "azure",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "azure_key_vaults",
"attributes": [
"name",
"location",
"vault_uri",
"sku_name",
"soft_delete",
"purge_protection",
"rbac_authorization",
"keys"
],
"optional_attributes": [
"vault_id",
"provisioning_state",
"resource_group",
"tags"
],
"catalog_url": "https://lightpane.io/catalog/azure/sd-azure-key-vaults/"
},
{
"slug": "sd-azure-load-balancers",
"label": "Load balancers",
"description": "Every Azure Load Balancer with SKU (Basic / Standard), tier and front-end IP configurations.",
"category": "network",
"provider": "azure",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "azure_load_balancers",
"attributes": [
"name",
"lb_id",
"location",
"sku",
"provisioning_state",
"frontend_count",
"backend_count"
],
"optional_attributes": [
"rules_count",
"resource_group",
"tags"
],
"catalog_url": "https://lightpane.io/catalog/azure/sd-azure-load-balancers/"
},
{
"slug": "sd-azure-managed-disks",
"label": "Managed disks",
"description": "Every Azure managed disk with size, SKU, encryption type and the VM it's attached to.",
"category": "data",
"provider": "azure",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "azure_managed_disks",
"attributes": [
"name",
"disk_id",
"location",
"disk_size_gb",
"disk_state",
"sku_name",
"managed_by"
],
"optional_attributes": [
"os_type",
"time_created",
"resource_group",
"tags"
],
"catalog_url": "https://lightpane.io/catalog/azure/sd-azure-managed-disks/"
},
{
"slug": "sd-azure-monitor-alerts",
"label": "Monitor alerts",
"description": "Every Azure Monitor alert rule with state, severity, scope and trigger condition.",
"category": "operations",
"provider": "azure",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "azure_monitor_alerts",
"attributes": [
"name",
"location",
"severity",
"enabled",
"description",
"scopes_count"
],
"optional_attributes": [
"alert_id",
"criteria_count",
"resource_group",
"tags"
],
"catalog_url": "https://lightpane.io/catalog/azure/sd-azure-monitor-alerts/"
},
{
"slug": "sd-azure-nsgs",
"label": "Network security groups",
"description": "Every Network Security Group with inbound / outbound rule counts and associations.",
"category": "network",
"provider": "azure",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "azure_nsgs",
"attributes": [
"name",
"nsg_id",
"location",
"provisioning_state",
"resource_group",
"rules",
"subnets_count"
],
"optional_attributes": [
"tags"
],
"catalog_url": "https://lightpane.io/catalog/azure/sd-azure-nsgs/"
},
{
"slug": "sd-azure-public-ips",
"label": "Public IPs",
"description": "Every Azure Public IP with SKU, allocation method, IP version and attached resource.",
"category": "network",
"provider": "azure",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "azure_public_ips",
"attributes": [
"name",
"ip_address",
"allocation_method",
"sku",
"version",
"dns_label",
"fqdn"
],
"optional_attributes": [
"ip_id",
"location",
"provisioning_state",
"resource_group",
"tags"
],
"catalog_url": "https://lightpane.io/catalog/azure/sd-azure-public-ips/"
},
{
"slug": "sd-azure-service-bus",
"label": "Service Bus",
"description": "Every Service Bus namespace with SKU, queue / topic count and managed identity.",
"category": "inventory",
"provider": "azure",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "azure_service_bus",
"attributes": [
"name",
"location",
"sku_name",
"sku_tier",
"provisioning_state",
"status",
"service_bus_endpoint"
],
"optional_attributes": [
"namespace_id",
"created_at",
"resource_group",
"tags"
],
"catalog_url": "https://lightpane.io/catalog/azure/sd-azure-service-bus/"
},
{
"slug": "sd-azure-sql-databases",
"label": "SQL databases",
"description": "Every Azure SQL Database with edition, service tier, max-size and elastic-pool membership.",
"category": "inventory",
"provider": "azure",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "azure_sql_databases",
"attributes": [
"name",
"location",
"status",
"sku_name",
"sku_tier",
"max_size_gb",
"server_name"
],
"optional_attributes": [
"database_id",
"collation",
"creation_date",
"resource_group",
"tags"
],
"catalog_url": "https://lightpane.io/catalog/azure/sd-azure-sql-databases/"
},
{
"slug": "sd-azure-sql-servers",
"label": "SQL servers",
"description": "Every Azure SQL Server with version, public-network-access flag and admin login.",
"category": "inventory",
"provider": "azure",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "azure_sql_servers",
"attributes": [
"name",
"location",
"state",
"version",
"fqdn",
"admin_login",
"public_network_access"
],
"optional_attributes": [
"server_id",
"resource_group",
"tags"
],
"catalog_url": "https://lightpane.io/catalog/azure/sd-azure-sql-servers/"
},
{
"slug": "sd-azure-storage-accounts",
"label": "Storage accounts",
"description": "Every Azure Storage account with kind, SKU, access tier, encryption and public-access state.",
"category": "data",
"provider": "azure",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "azure_storage_accounts",
"attributes": [
"name",
"location",
"kind",
"sku_name",
"access_tier",
"provisioning_state",
"https_only",
"allow_blob_public_access"
],
"optional_attributes": [
"account_id",
"blob_endpoint",
"resource_group",
"tags"
],
"catalog_url": "https://lightpane.io/catalog/azure/sd-azure-storage-accounts/"
},
{
"slug": "sd-azure-subnets",
"label": "Subnets",
"description": "Every subnet with VNet, address prefix, NSG and the resources currently using it.",
"category": "network",
"provider": "azure",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "azure_subnets",
"attributes": [
"name",
"subnet_id",
"address_prefix",
"vnet_name",
"nsg",
"route_table"
],
"optional_attributes": [
"provisioning_state",
"private_endpoint_policy",
"delegation"
],
"catalog_url": "https://lightpane.io/catalog/azure/sd-azure-subnets/"
},
{
"slug": "sd-azure-virtual-machines",
"label": "Virtual Machines",
"description": "Every Azure Virtual Machine with size, OS, power state, region and resource group.",
"category": "inventory",
"provider": "azure",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "azure_virtual_machines",
"attributes": [
"name",
"vm_id",
"location",
"vm_size",
"os_type",
"provisioning_state",
"private_ip",
"resource_group"
],
"optional_attributes": [
"power_state",
"os_disk_size",
"public_ip",
"tags"
],
"catalog_url": "https://lightpane.io/catalog/azure/sd-azure-virtual-machines/"
},
{
"slug": "sd-azure-vnets",
"label": "Virtual networks",
"description": "Every Azure Virtual Network with address space, subnets and DNS server configuration.",
"category": "network",
"provider": "azure",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "azure_vnets",
"attributes": [
"name",
"vnet_id",
"location",
"address_space",
"provisioning_state",
"subnets_count",
"resource_group"
],
"optional_attributes": [
"enable_ddos_protection",
"tags"
],
"catalog_url": "https://lightpane.io/catalog/azure/sd-azure-vnets/"
},
{
"slug": "security-findings",
"label": "Security Recommendations",
"description": "Microsoft Defender for Cloud findings: misconfigurations, vulnerabilities and threats.",
"category": "security",
"provider": "azure",
"tier": "builder",
"kind": "compound",
"region_scope": "subscription-wide",
"mount": "lp-azure-security-findings-panel",
"catalog_url": "https://lightpane.io/catalog/azure/security-findings/"
},
{
"slug": "storage-inventory",
"label": "Storage Inventory",
"description": "Every Azure Storage account with size, access tier, encryption and public-access setting.",
"category": "data",
"provider": "azure",
"tier": "explorer",
"kind": "compound",
"region_scope": "subscription-wide",
"mount": "lp-azure-storage-inventory-panel",
"catalog_url": "https://lightpane.io/catalog/azure/storage-inventory/"
},
{
"slug": "tag-coverage",
"label": "Tag Coverage",
"description": "Which Azure resources carry the required tags and which don't, scored by service type.",
"category": "compliance",
"provider": "azure",
"tier": "explorer",
"kind": "compound",
"region_scope": "subscription-wide",
"mount": "lp-azure-tag-coverage-panel",
"catalog_url": "https://lightpane.io/catalog/azure/tag-coverage/"
},
{
"slug": "change-feed",
"label": "Change Feed (24h)",
"description": "24-hour stream of changes from Cloud Audit Logs, mixed across services into one timeline.",
"category": "change",
"provider": "gcp",
"tier": "team",
"kind": "compound",
"region_scope": "project-wide",
"mount": "lp-gcp-change-feed-panel",
"catalog_url": "https://lightpane.io/catalog/gcp/change-feed/"
},
{
"slug": "cost-by-label-tag",
"label": "Cost by Label",
"description": "GCP spend grouped by a label (environment, team, application) \u2014 what each slice costs.",
"category": "cost",
"provider": "gcp",
"tier": "builder",
"kind": "compound",
"region_scope": "project-wide",
"mount": "lp-gcp-cost-by-label-tag-panel",
"catalog_url": "https://lightpane.io/catalog/gcp/cost-by-label-tag/"
},
{
"slug": "cost-forecast",
"label": "Cost Forecast (next 30 days)",
"description": "30 days of daily GCP cost plus a 30-day forecast \u2014 track end-of-month spend before the bill.",
"category": "cost",
"provider": "gcp",
"tier": "builder",
"kind": "compound",
"region_scope": "project-wide",
"mount": "lp-gcp-cost-forecast-panel",
"catalog_url": "https://lightpane.io/catalog/gcp/cost-forecast/"
},
{
"slug": "cost-summary",
"label": "Cost Summary",
"description": "Month-to-date GCP spend by service, region and project, with top movers since last month.",
"category": "cost",
"provider": "gcp",
"tier": "builder",
"kind": "compound",
"region_scope": "project-wide",
"mount": "lp-gcp-cost-summary-panel",
"catalog_url": "https://lightpane.io/catalog/gcp/cost-summary/"
},
{
"slug": "daily-briefing",
"label": "Daily Briefing \u00b7 ",
"description": "Newspaper-style 24h summary across alerts, security findings, activity and cost \u2014 GCP-wide.",
"category": "operations",
"provider": "gcp",
"tier": "builder",
"kind": "compound",
"region_scope": "project-wide",
"mount": "lp-gcp-daily-briefing-panel",
"catalog_url": "https://lightpane.io/catalog/gcp/daily-briefing/"
},
{
"slug": "db-inventory",
"label": "Database Inventory",
"description": "Every Cloud SQL, AlloyDB, Firestore and Bigtable database with version, HA mode and backups.",
"category": "inventory",
"provider": "gcp",
"tier": "explorer",
"kind": "compound",
"region_scope": "project-wide",
"mount": "lp-gcp-db-inventory-panel",
"catalog_url": "https://lightpane.io/catalog/gcp/db-inventory/"
},
{
"slug": "function-radar",
"label": "Function Radar",
"description": "Every Cloud Function with invocations, error rate, duration and last-deploy timestamp.",
"category": "inventory",
"provider": "gcp",
"tier": "explorer",
"kind": "compound",
"region_scope": "project-wide",
"mount": "lp-gcp-function-radar-panel",
"catalog_url": "https://lightpane.io/catalog/gcp/function-radar/"
},
{
"slug": "global-search",
"label": "Global Resource Search",
"description": "Free-text search across every discovered GCP resource \u2014 VMs, buckets, functions, databases.",
"category": "inventory",
"provider": "gcp",
"tier": "builder",
"kind": "compound",
"region_scope": "all regions",
"mount": "lp-gcp-global-search-panel",
"catalog_url": "https://lightpane.io/catalog/gcp/global-search/"
},
{
"slug": "iam-sa-audit",
"label": "Service Account Audit",
"description": "Every GCP service account with its keys, roles and how recently each key was used.",
"category": "security",
"provider": "gcp",
"tier": "explorer",
"kind": "compound",
"region_scope": "project-wide",
"mount": "lp-gcp-iam-sa-audit-panel",
"catalog_url": "https://lightpane.io/catalog/gcp/iam-sa-audit/"
},
{
"slug": "idle-finder",
"label": "Idle Resource Finder",
"description": "GCP resources sitting idle and costing money \u2014 low-CPU VMs, idle SQL, unattached disks.",
"category": "operations",
"provider": "gcp",
"tier": "explorer",
"kind": "compound",
"region_scope": "project-wide",
"mount": "lp-gcp-idle-finder-panel",
"catalog_url": "https://lightpane.io/catalog/gcp/idle-finder/"
},
{
"slug": "incident-timeline",
"label": "Activity Timeline (24h)",
"description": "Activity timeline from Cloud Audit Logs \u2014 who changed what, when, filterable by service.",
"category": "operations",
"provider": "gcp",
"tier": "builder",
"kind": "compound",
"region_scope": "project-wide",
"mount": "lp-gcp-incident-timeline-panel",
"catalog_url": "https://lightpane.io/catalog/gcp/incident-timeline/"
},
{
"slug": "kms-rotation",
"label": "KMS Rotation Audit",
"description": "Cloud KMS keys with rotation period, last-rotated date and overdue flag.",
"category": "security",
"provider": "gcp",
"tier": "explorer",
"kind": "compound",
"region_scope": "project-wide",
"mount": "lp-gcp-kms-rotation-panel",
"catalog_url": "https://lightpane.io/catalog/gcp/kms-rotation/"
},
{
"slug": "network-exposure",
"label": "Network Exposure",
"description": "GCP firewall rules allowing inbound from the internet \u2014 what's open and to which targets.",
"category": "security",
"provider": "gcp",
"tier": "explorer",
"kind": "compound",
"region_scope": "project-wide",
"mount": "lp-gcp-network-exposure-panel",
"catalog_url": "https://lightpane.io/catalog/gcp/network-exposure/"
},
{
"slug": "public-exposure",
"label": "Public Exposure Audit",
"description": "Every publicly-reachable GCP resource \u2014 buckets, SQL, VMs, load balancers \u2014 critical vs expected.",
"category": "security",
"provider": "gcp",
"tier": "explorer",
"kind": "compound",
"region_scope": "project-wide",
"mount": "lp-gcp-public-exposure-panel",
"catalog_url": "https://lightpane.io/catalog/gcp/public-exposure/"
},
{
"slug": "quota-radar",
"label": "Quota Radar",
"description": "GCP quotas with current usage vs limit \u2014 the ones most likely to bite at scale.",
"category": "quota",
"provider": "gcp",
"tier": "explorer",
"kind": "compound",
"region_scope": "project-wide",
"mount": "lp-gcp-quota-radar-panel",
"catalog_url": "https://lightpane.io/catalog/gcp/quota-radar/"
},
{
"slug": "region-map",
"label": "Multi-Region Footprint",
"description": "World map of which GCP regions this project uses, sized by resource count.",
"category": "inventory",
"provider": "gcp",
"tier": "builder",
"kind": "compound",
"region_scope": "regional",
"mount": "lp-gcp-region-map-panel",
"catalog_url": "https://lightpane.io/catalog/gcp/region-map/"
},
{
"slug": "rightsize",
"label": "Compute Right-Sizing",
"description": "Compute Engine instances GCP Recommender thinks are over-provisioned \u2014 current vs recommended machine type and projected monthly saving.",
"category": "cost",
"provider": "gcp",
"tier": "builder",
"kind": "compound",
"region_scope": "project-wide",
"mount": "lp-gcp-rightsize-panel",
"catalog_url": "https://lightpane.io/catalog/gcp/rightsize/"
},
{
"slug": "sd-gcp-artifact-registry",
"label": "Artifact Registry",
"description": "Every Artifact Registry repository with format, location and last-updated time.",
"category": "inventory",
"provider": "gcp",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "gcp_artifact_registry",
"attributes": [
"project",
"name",
"format",
"mode",
"size_bytes",
"description",
"create_time"
],
"optional_attributes": [
"update_time",
"labels"
],
"catalog_url": "https://lightpane.io/catalog/gcp/sd-gcp-artifact-registry/"
},
{
"slug": "sd-gcp-bigquery-datasets",
"label": "BigQuery datasets",
"description": "Every BigQuery dataset with location, default table expiration and access controls.",
"category": "inventory",
"provider": "gcp",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "gcp_bigquery_datasets",
"attributes": [
"project",
"name",
"dataset_id",
"friendly_name",
"location",
"creation_time",
"description"
],
"optional_attributes": [
"last_modified_time",
"labels"
],
"catalog_url": "https://lightpane.io/catalog/gcp/sd-gcp-bigquery-datasets/"
},
{
"slug": "sd-gcp-bigtable-instances",
"label": "Bigtable instances",
"description": "Every Bigtable instance with cluster count, storage type and serve nodes.",
"category": "inventory",
"provider": "gcp",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "gcp_bigtable_instances",
"attributes": [
"name",
"display_name",
"state",
"type",
"create_time"
],
"optional_attributes": [
"satisfies_pzs",
"labels"
],
"catalog_url": "https://lightpane.io/catalog/gcp/sd-gcp-bigtable-instances/"
},
{
"slug": "sd-gcp-cloud-dns-zones",
"label": "Cloud DNS zones",
"description": "Every Cloud DNS zone with visibility (public / private), DNS name and record count.",
"category": "network",
"provider": "gcp",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "gcp_cloud_dns_zones",
"attributes": [
"project",
"name",
"zone_id",
"dns_name",
"description",
"visibility",
"creation_time"
],
"optional_attributes": [
"labels"
],
"catalog_url": "https://lightpane.io/catalog/gcp/sd-gcp-cloud-dns-zones/"
},
{
"slug": "sd-gcp-cloud-functions",
"label": "Cloud Functions",
"description": "Every Cloud Function (Gen 1 + Gen 2) with runtime, trigger type, region and status.",
"category": "inventory",
"provider": "gcp",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "gcp_cloud_functions",
"attributes": [
"project",
"name",
"state",
"runtime",
"entry_point",
"environment",
"update_time"
],
"optional_attributes": [
"build_source",
"available_memory",
"labels"
],
"catalog_url": "https://lightpane.io/catalog/gcp/sd-gcp-cloud-functions/"
},
{
"slug": "sd-gcp-cloud-nat",
"label": "Cloud NAT",
"description": "Every Cloud NAT gateway with router, region, NAT IP allocation and minimum ports per VM.",
"category": "network",
"provider": "gcp",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "gcp_cloud_nat",
"attributes": [
"router_name",
"region",
"network",
"nat_name",
"ip_allocation",
"subnet_scope",
"enable_logging"
],
"optional_attributes": [
"nat_ips",
"min_ports_per_vm",
"endpoint_types",
"nat_count"
],
"catalog_url": "https://lightpane.io/catalog/gcp/sd-gcp-cloud-nat/"
},
{
"slug": "sd-gcp-cloud-run-services",
"label": "Cloud Run services",
"description": "Every Cloud Run service with traffic split, latest revision, region and ingress setting.",
"category": "inventory",
"provider": "gcp",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "gcp_cloud_run_services",
"attributes": [
"project",
"name",
"uri",
"ingress",
"launch_stage",
"create_time",
"update_time"
],
"optional_attributes": [
"reconciling",
"creator",
"last_modifier",
"labels"
],
"catalog_url": "https://lightpane.io/catalog/gcp/sd-gcp-cloud-run-services/"
},
{
"slug": "sd-gcp-cloud-scheduler-jobs",
"label": "Cloud Scheduler jobs",
"description": "Every Cloud Scheduler job with schedule, target type, last attempt and current state.",
"category": "operations",
"provider": "gcp",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "gcp_cloud_scheduler_jobs",
"attributes": [
"name",
"state",
"schedule",
"timezone",
"target_type",
"last_attempt",
"next_schedule"
],
"optional_attributes": [
"description",
"http_method",
"http_uri",
"pubsub_topic",
"last_status_code",
"last_status_msg"
],
"catalog_url": "https://lightpane.io/catalog/gcp/sd-gcp-cloud-scheduler-jobs/"
},
{
"slug": "sd-gcp-cloud-spanner",
"label": "Cloud Spanner",
"description": "Every Cloud Spanner instance with configuration, processing units and node count.",
"category": "inventory",
"provider": "gcp",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "gcp_cloud_spanner",
"attributes": [
"project",
"name",
"display_name",
"config",
"node_count",
"state",
"create_time"
],
"optional_attributes": [
"processing_units",
"update_time",
"labels"
],
"catalog_url": "https://lightpane.io/catalog/gcp/sd-gcp-cloud-spanner/"
},
{
"slug": "sd-gcp-cloud-sql",
"label": "Cloud SQL",
"description": "Every Cloud SQL instance with engine, version, tier, HA mode and backup setting.",
"category": "inventory",
"provider": "gcp",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "gcp_cloud_sql",
"attributes": [
"project",
"name",
"database_version",
"state",
"region",
"tier",
"availability_type",
"disk_size_gb",
"connection_name",
"create_time"
],
"optional_attributes": [
"gce_zone",
"disk_type",
"instance_type",
"ipv4_enabled",
"ip_addresses",
"backup_enabled",
"storage_auto_resize",
"labels"
],
"catalog_url": "https://lightpane.io/catalog/gcp/sd-gcp-cloud-sql/"
},
{
"slug": "sd-gcp-cloud-storage",
"label": "Cloud Storage buckets",
"description": "Every Cloud Storage bucket with location, storage class, encryption and uniform-IAM state.",
"category": "data",
"provider": "gcp",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "gcp_cloud_storage",
"attributes": [
"project",
"name",
"storage_class",
"location",
"location_type",
"versioning_enabled",
"time_created",
"iam_bindings"
],
"optional_attributes": [
"updated",
"default_event_based_hold",
"labels"
],
"catalog_url": "https://lightpane.io/catalog/gcp/sd-gcp-cloud-storage/"
},
{
"slug": "sd-gcp-cloud-tasks-queues",
"label": "Cloud Tasks queues",
"description": "Every Cloud Tasks queue with state, rate limits, retry config and stackdriver logging setting.",
"category": "inventory",
"provider": "gcp",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "gcp_cloud_tasks_queues",
"attributes": [
"name",
"state",
"type",
"max_dispatches",
"max_concurrent",
"max_attempts"
],
"optional_attributes": [
"max_retry_duration",
"min_backoff",
"max_backoff",
"max_doublings",
"purge_time"
],
"catalog_url": "https://lightpane.io/catalog/gcp/sd-gcp-cloud-tasks-queues/"
},
{
"slug": "sd-gcp-compute-instances",
"label": "Compute Engine VMs",
"description": "Every Compute Engine VM with machine type, status, zone, network and service account.",
"category": "inventory",
"provider": "gcp",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "gcp_compute_instances",
"attributes": [
"project",
"name",
"instance_id",
"machine_type",
"status",
"zone",
"internal_ip",
"external_ip",
"network",
"creation_time"
],
"optional_attributes": [
"labels"
],
"catalog_url": "https://lightpane.io/catalog/gcp/sd-gcp-compute-instances/"
},
{
"slug": "sd-gcp-filestore-instances",
"label": "Filestore instances",
"description": "Every Filestore instance with tier, capacity, network and current state.",
"category": "data",
"provider": "gcp",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "gcp_filestore_instances",
"attributes": [
"name",
"state",
"tier",
"protocol",
"capacity_gb",
"ip_address",
"location",
"create_time"
],
"optional_attributes": [
"share_name",
"network",
"labels"
],
"catalog_url": "https://lightpane.io/catalog/gcp/sd-gcp-filestore-instances/"
},
{
"slug": "sd-gcp-firestore-databases",
"label": "Firestore databases",
"description": "Every Firestore database with type (Native / Datastore mode), location and concurrency mode.",
"category": "inventory",
"provider": "gcp",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "gcp_firestore_databases",
"attributes": [
"name",
"type",
"location",
"concurrency_mode",
"delete_protection",
"point_in_time_recovery",
"create_time"
],
"optional_attributes": [
"app_engine_int",
"uid",
"update_time",
"version_retention",
"labels"
],
"catalog_url": "https://lightpane.io/catalog/gcp/sd-gcp-firestore-databases/"
},
{
"slug": "sd-gcp-firewall-rules",
"label": "Firewall rules",
"description": "Every firewall rule with direction, action, protocol / ports and source / target tags.",
"category": "network",
"provider": "gcp",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "gcp_firewall_rules",
"attributes": [
"project",
"name",
"direction",
"priority",
"network",
"disabled",
"source_ranges",
"target_tags",
"allowed"
],
"optional_attributes": [
"firewall_id",
"denied",
"description",
"creation_time"
],
"catalog_url": "https://lightpane.io/catalog/gcp/sd-gcp-firewall-rules/"
},
{
"slug": "sd-gcp-gke-clusters",
"label": "GKE clusters",
"description": "Every GKE cluster with Kubernetes version, node-pool count, location and endpoint.",
"category": "inventory",
"provider": "gcp",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "gcp_gke_clusters",
"attributes": [
"project",
"name",
"status",
"location",
"current_master_version",
"node_count",
"network",
"endpoint",
"create_time"
],
"optional_attributes": [
"current_node_version",
"subnetwork",
"labels"
],
"catalog_url": "https://lightpane.io/catalog/gcp/sd-gcp-gke-clusters/"
},
{
"slug": "sd-gcp-iam-service-accounts",
"label": "IAM service accounts",
"description": "Every GCP service account with email, disabled flag, owned keys and last-used dates.",
"category": "security",
"provider": "gcp",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "gcp_iam_service_accounts",
"attributes": [
"project",
"name",
"unique_id",
"display_name",
"email",
"disabled",
"keys"
],
"optional_attributes": [
"description"
],
"catalog_url": "https://lightpane.io/catalog/gcp/sd-gcp-iam-service-accounts/"
},
{
"slug": "sd-gcp-kms-keyrings",
"label": "KMS keyrings",
"description": "Every Cloud KMS key ring with location, key count and parent project.",
"category": "security",
"provider": "gcp",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "gcp_kms_keyrings",
"attributes": [
"project",
"name",
"keyring_id",
"create_time",
"crypto_keys"
],
"catalog_url": "https://lightpane.io/catalog/gcp/sd-gcp-kms-keyrings/"
},
{
"slug": "sd-gcp-load-balancers",
"label": "Load balancers",
"description": "Every Cloud Load Balancer with scheme (external / internal), protocol and backend services.",
"category": "network",
"provider": "gcp",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "gcp_load_balancers",
"attributes": [
"project",
"name",
"url_map_id",
"default_service",
"description",
"host_rules_count",
"creation_time"
],
"optional_attributes": [
"path_matchers_count"
],
"catalog_url": "https://lightpane.io/catalog/gcp/sd-gcp-load-balancers/"
},
{
"slug": "sd-gcp-managed-instance-groups",
"label": "Managed instance groups",
"description": "Every Managed Instance Group with target size, autoscaler and current versions.",
"category": "inventory",
"provider": "gcp",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "gcp_managed_instance_groups",
"attributes": [
"name",
"zone",
"target_size",
"stable",
"creating",
"deleting",
"instance_template"
],
"optional_attributes": [
"region",
"restarting",
"base_instance_name",
"description",
"autoscaling"
],
"catalog_url": "https://lightpane.io/catalog/gcp/sd-gcp-managed-instance-groups/"
},
{
"slug": "sd-gcp-memorystore-instances",
"label": "Memorystore instances",
"description": "Every Memorystore (Redis / Memcached) instance with tier, capacity, version and HA mode.",
"category": "inventory",
"provider": "gcp",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "gcp_memorystore_instances",
"attributes": [
"name",
"state",
"tier",
"redis_version",
"memory_size_gb",
"host",
"auth_enabled",
"location"
],
"optional_attributes": [
"display_name",
"port",
"connect_mode",
"transit_encryption",
"persistence",
"maintenance_policy",
"created",
"labels"
],
"catalog_url": "https://lightpane.io/catalog/gcp/sd-gcp-memorystore-instances/"
},
{
"slug": "sd-gcp-monitoring-alerts",
"label": "Monitoring alerts",
"description": "Every Cloud Monitoring alert policy with state, severity, conditions and notification channels.",
"category": "operations",
"provider": "gcp",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "gcp_monitoring_alerts",
"attributes": [
"project",
"name",
"policy_id",
"enabled",
"combiner",
"notification_channels_count",
"conditions_count"
],
"optional_attributes": [
"creation_record_time",
"labels"
],
"catalog_url": "https://lightpane.io/catalog/gcp/sd-gcp-monitoring-alerts/"
},
{
"slug": "sd-gcp-persistent-disks",
"label": "Persistent disks",
"description": "Every persistent disk with size, type, status and the instance it's attached to.",
"category": "data",
"provider": "gcp",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "gcp_persistent_disks",
"attributes": [
"project",
"name",
"disk_id",
"size_gb",
"status",
"type",
"zone",
"source_image",
"creation_time"
],
"optional_attributes": [
"labels"
],
"catalog_url": "https://lightpane.io/catalog/gcp/sd-gcp-persistent-disks/"
},
{
"slug": "sd-gcp-pubsub-subscriptions",
"label": "Pub/Sub subscriptions",
"description": "Every Pub/Sub subscription with ack deadline, delivery type and dead-letter topic.",
"category": "inventory",
"provider": "gcp",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "gcp_pubsub_subscriptions",
"attributes": [
"project",
"name",
"topic",
"ack_deadline_seconds",
"push_endpoint",
"retain_acked_messages"
],
"optional_attributes": [
"message_retention_duration",
"expiration_ttl",
"labels"
],
"catalog_url": "https://lightpane.io/catalog/gcp/sd-gcp-pubsub-subscriptions/"
},
{
"slug": "sd-gcp-pubsub-topics",
"label": "Pub/Sub topics",
"description": "Every Pub/Sub topic with message retention, encryption and subscription count.",
"category": "inventory",
"provider": "gcp",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "gcp_pubsub_topics",
"attributes": [
"project",
"name",
"topic_id",
"kms_key_name",
"message_retention_duration"
],
"optional_attributes": [
"labels"
],
"catalog_url": "https://lightpane.io/catalog/gcp/sd-gcp-pubsub-topics/"
},
{
"slug": "sd-gcp-secret-manager-secrets",
"label": "Secret Manager",
"description": "Every Secret Manager secret with replication policy, rotation period and last-rotated date.",
"category": "security",
"provider": "gcp",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "gcp_secret_manager_secrets",
"attributes": [
"name",
"replication_type",
"rotation_period",
"expire_time",
"create_time"
],
"optional_attributes": [
"replication",
"next_rotation",
"version_aliases",
"annotations",
"labels"
],
"catalog_url": "https://lightpane.io/catalog/gcp/sd-gcp-secret-manager-secrets/"
},
{
"slug": "sd-gcp-subnets",
"label": "Subnets",
"description": "Every subnet with region, primary CIDR, secondary ranges and private-Google-access flag.",
"category": "network",
"provider": "gcp",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "gcp_subnets",
"attributes": [
"project",
"name",
"subnet_id",
"ip_cidr_range",
"region",
"network",
"purpose",
"private_ip_google_access"
],
"optional_attributes": [
"creation_time",
"labels"
],
"catalog_url": "https://lightpane.io/catalog/gcp/sd-gcp-subnets/"
},
{
"slug": "sd-gcp-vpc-networks",
"label": "VPC networks",
"description": "Every VPC network with subnet mode (auto / custom), MTU and routing mode.",
"category": "network",
"provider": "gcp",
"tier": "explorer",
"kind": "service",
"region_scope": "regional",
"service_id": "gcp_vpc_networks",
"attributes": [
"project",
"name",
"network_id",
"auto_create_subnetworks",
"routing_mode",
"mtu",
"description"
],
"optional_attributes": [
"creation_time",
"labels"
],
"catalog_url": "https://lightpane.io/catalog/gcp/sd-gcp-vpc-networks/"
},
{
"slug": "security-findings",
"label": "Security Recommendations",
"description": "Project-scoped GCP security posture: IAM least-privilege recommendations (Recommender API) plus service-account key hygiene \u2014 user-managed keys and disabled accounts.",
"category": "security",
"provider": "gcp",
"tier": "builder",
"kind": "compound",
"region_scope": "project-wide",
"mount": "lp-gcp-security-findings-panel",
"catalog_url": "https://lightpane.io/catalog/gcp/security-findings/"
},
{
"slug": "storage-inventory",
"label": "Storage Inventory",
"description": "Every Cloud Storage bucket with size, class, location, encryption and public-access setting.",
"category": "data",
"provider": "gcp",
"tier": "explorer",
"kind": "compound",
"region_scope": "project-wide",
"mount": "lp-gcp-storage-inventory-panel",
"catalog_url": "https://lightpane.io/catalog/gcp/storage-inventory/"
},
{
"slug": "tag-coverage",
"label": "Label Coverage",
"description": "Which GCP resources carry the required labels and which don't, scored by service type.",
"category": "compliance",
"provider": "gcp",
"tier": "explorer",
"kind": "compound",
"region_scope": "project-wide",
"mount": "lp-gcp-tag-coverage-panel",
"catalog_url": "https://lightpane.io/catalog/gcp/tag-coverage/"
}
]
}