Supported providers and resource types
CloudYali's Resource Inventory collects resources from AWS, Google Cloud, Microsoft Azure, Databricks and Anthropic. It covers 135 AWS resource types, 108 Google Cloud asset types, every Azure resource type in Azure Resource Graph, 8 Databricks types and 5 Anthropic types. OpenAI, Cursor and Fastly appear in cost only.
By provider
| AWS | Google Cloud | Azure | Databricks | Anthropic | |
|---|---|---|---|---|---|
| How CloudYali collects | Each service's API, through the IAM role | Cloud Asset Inventory | Azure Resource Graph | System tables, through a SQL warehouse | The Admin API |
| Resource types | 135 | 108 | Every type in Resource Graph | 8 | 5 |
| Where it looks | Every enabled region, plus global types once | The organization, or one project | Every subscription you connect | The workspaces in your system tables | Your Anthropic organization |
| Tags | Resource tags | Labels | Resource tags | Custom tags on clusters, SQL warehouses, jobs and pipelines | None |
| Configuration history | Current only | From 35 days before connecting, then each change | 90 days | Current only | Current only |
| Daily cost per resource | Yes | Yes | Yes | SQL warehouses; clusters and jobs often not | No |
| Refresh | On a schedule; the first scan starts when you connect | Once a day, about 11:30 UTC | Once a day, about 14:20 UTC | Once a day, about 14:50 UTC | Once a day, with Anthropic's cost collection |
- Deleted resources stay in the list with the state Deleted, for every provider.
- AWS regions. CloudYali scans every region enabled in your account. An opt-in region is scanned once you opt in to it. Global types, such as S3 buckets and CloudFront distributions, are collected once and show the region Global. AWS GovCloud and China regions are not supported.
- Google Cloud scope. CloudYali reads the whole organization when the service account has Cloud Asset Viewer on it, and the one project otherwise. See Connect Google Cloud.
- Google Cloud tags. CloudYali reads labels on resources, not Resource Manager tags.
The details are on Change history, Resource cost and Data freshness.
AWS resource types
Shown as is the name in the Resource type column of Resource Inventory.
| AWS type | Shown as | Collected |
|---|---|---|
AWS::ACMPCA::CertificateAuthority | ACM PCA Certificate Authority | Each region |
AWS::APIGateway::RestApi | API Gateway REST API | Each region |
AWS::APS::Workspace | APS Workspace | Each region |
AWS::AmazonMQ::Broker | AmazonMQ Broker | Each region |
AWS::Amplify::App | Amplify App | Each region |
AWS::ApiGatewayV2::Api | API Gateway v2 API | Each region |
AWS::AppRunner::Service | AppRunner Service | Each region |
AWS::AppStream::Fleet | AppStream Fleet | Each region |
AWS::AppStream::ImageBuilder | AppStream Image Builder | Each region |
AWS::AppSync::GraphQLApi | AppSync Graph QLApi | Each region |
AWS::Athena::WorkGroup | Athena Workgroup | Each region |
AWS::Backup::BackupVault | Backup Vault | Each region |
AWS::Bedrock::ProvisionedModelThroughput | Bedrock Provisioned Model Throughput | Each region |
AWS::CloudFront::Distribution | CloudFront Distribution | Global |
AWS::CloudHSM::Cluster | CloudHSM Cluster | Each region |
AWS::CloudTrail::Trail | CloudTrail Trail | Each region |
AWS::CloudWatch::Alarm | CloudWatch Alarm | Each region |
AWS::CloudWatch::Dashboard | CloudWatch Dashboard | Global |
AWS::CloudWatchLogs::LogGroup | CloudWatch Log Group | Each region |
AWS::CodeBuild::Project | CodeBuild Project | Each region |
AWS::CodePipeline::Pipeline | CodePipeline Pipeline | Each region |
AWS::CognitoIdentityProvider::UserPool | Cognito User Pool | Each region |
AWS::Comprehend::Endpoint | Comprehend Endpoint | Each region |
AWS::Config::ConfigurationRecorder | Config Configuration Recorder | Each region |
AWS::DAX::Cluster | DAX Cluster | Each region |
AWS::DMS::ReplicationInstance | DMS Replication Instance | Each region |
AWS::DRS::SourceServer | DRS Source Server | Each region |
AWS::DataSync::Task | DataSync Task | Each region |
AWS::DirectConnect::Connection | Direct Connect Connection | Each region |
AWS::DirectoryService::Directory | Directory Service Directory | Each region |
AWS::DocDB::DBCluster | DocumentDB Cluster | Each region |
AWS::DocDB::DBInstance | DocumentDB Instance | Each region |
AWS::DynamoDB::Backup | DynamoDB Backup | Each region |
AWS::DynamoDB::GlobalTable | DynamoDB Global Table | Each region |
AWS::DynamoDB::Table | DynamoDB Table | Each region |
AWS::EC2::Address | Elastic IP Address | Each region |
AWS::EC2::CapacityReservation | EC2 Capacity Reservation | Each region |
AWS::EC2::ClientVpnEndpoint | Client VPN Endpoint | Each region |
AWS::EC2::Fleet | EC2 Fleet | Each region |
AWS::EC2::Host | Dedicated Host | Each region |
AWS::EC2::Image | AMI | Each region |
AWS::EC2::Instance | EC2 Instance | Each region |
AWS::EC2::InternetGateway | Internet Gateway | Each region |
AWS::EC2::NatGateway | NAT Gateway | Each region |
AWS::EC2::ReservedInstance | Reserved Instance | Each region |
AWS::EC2::Snapshot | EBS Snapshot | Each region |
AWS::EC2::TransitGateway | Transit Gateway | Each region |
AWS::EC2::TransitGatewayPeeringAttachment | Transit Gateway Peering Attachment | Each region |
AWS::EC2::TransitGatewayVpcAttachment | Transit Gateway VPC Attachment | Each region |
AWS::EC2::VerifiedAccessEndpoint | EC2 Verified Access Endpoint | Each region |
AWS::EC2::Volume | EBS Volume | Each region |
AWS::EC2::VpcEndpoint | VPC Endpoint | Each region |
AWS::EC2::VpnConnection | VPN Connection | Each region |
AWS::EC2::VpnGateway | VPN Gateway | Each region |
AWS::ECR::Repository | ECR Repository | Each region |
AWS::ECRPublic::Repository | ECR Public Repository | Each region |
AWS::ECS::Cluster | ECS Cluster | Each region |
AWS::ECS::Service | ECS Service | Each region |
AWS::EFS::AccessPoint | EFS Access Point | Each region |
AWS::EFS::FileSystem | EFS File System | Each region |
AWS::EKS::Cluster | EKS Cluster | Each region |
AWS::ELB::LoadBalancer | Classic Load Balancer | Each region |
AWS::ELBV2::Listener | ALB/NLB Listener | Each region |
AWS::ELBV2::LoadBalancer | Application/Network Load Balancer | Each region |
AWS::ELBV2::TargetGroup | ALB/NLB Target Group | Each region |
AWS::EMR::Cluster | EMR Cluster | Each region |
AWS::EMRServerless::Application | EMRServerless Application | Each region |
AWS::ElastiCache::CacheCluster | ElastiCache Cluster | Each region |
AWS::ElastiCache::GlobalReplicationGroup | ElastiCache Global Replication Group | Each region |
AWS::ElastiCache::ReplicationGroup | ElastiCache Replication Group | Each region |
AWS::ElastiCache::ReservedCacheNode | ElastiCache Reserved Node | Each region |
AWS::ElastiCache::ServerlessCache | ElastiCache Serverless Cache | Each region |
AWS::ElastiCache::Snapshot | ElastiCache Snapshot | Each region |
AWS::FMS::Policy | FMS Policy | Each region |
AWS::FSx::FileSystem | FSx File System | Each region |
AWS::Glacier::Vault | Glacier Vault | Each region |
AWS::GlobalAccelerator::Accelerator | Global Accelerator | Global |
AWS::Glue::Crawler | Glue Crawler | Each region |
AWS::Glue::Job | Glue Job | Each region |
AWS::Grafana::Workspace | Grafana Workspace | Each region |
AWS::GuardDuty::Detector | GuardDuty Detector | Each region |
AWS::KMS::CustomKeyStore | KMS Custom Key Store | Each region |
AWS::KMS::Key | KMS Key | Each region |
AWS::KafkaConnect::Connector | KafkaConnect Connector | Each region |
AWS::Kendra::Index | Kendra Index | Each region |
AWS::Kinesis::Stream | Kinesis Data Stream | Each region |
AWS::KinesisAnalyticsV2::Application | KinesisAnalyticsV2 Application | Each region |
AWS::KinesisFirehose::DeliveryStream | Kinesis Firehose Delivery Stream | Each region |
AWS::Lambda::Function | Lambda Function | Each region |
AWS::Lightsail::Instance | Lightsail Instance | Each region |
AWS::MSK::Cluster | MSK Cluster | Each region |
AWS::MWAA::Environment | MWAA Environment | Each region |
AWS::MemoryDB::Cluster | MemoryDB Cluster | Each region |
AWS::Neptune::DBCluster | Neptune DB Cluster | Each region |
AWS::NetworkFirewall::Firewall | NetworkFirewall Firewall | Each region |
AWS::OSIS::Pipeline | OSIS Pipeline | Each region |
AWS::OpenSearchServerless::Collection | OpenSearchServerless Collection | Each region |
AWS::OpenSearchService::Domain | OpenSearch Domain | Each region |
AWS::Personalize::Campaign | Personalize Campaign | Each region |
AWS::RDS::DBCluster | RDS DB Cluster | Each region |
AWS::RDS::DBClusterSnapshot | RDS Cluster Snapshot | Each region |
AWS::RDS::DBInstance | RDS DB Instance | Each region |
AWS::RDS::DBInstanceAutomatedBackup | RDS Automated Backup | Each region |
AWS::RDS::DBProxy | RDS Proxy | Each region |
AWS::RDS::DBSnapshot | RDS Snapshot | Each region |
AWS::RDS::GlobalCluster | RDS Global Cluster | Each region |
AWS::RDS::ReservedDBInstance | RDS Reserved Instance | Each region |
AWS::Redshift::Cluster | Redshift Cluster | Each region |
AWS::Redshift::ClusterSnapshot | Redshift Snapshot | Each region |
AWS::Redshift::ReservedNode | Redshift Reserved Node | Each region |
AWS::RedshiftServerless::Workgroup | Redshift Serverless Workgroup | Each region |
AWS::Route53::HealthCheck | Route 53 Health Check | Each region |
AWS::Route53::HostedZone | Route 53 Hosted Zone | Global |
AWS::Route53RecoveryControl::Cluster | Route53RecoveryControl Cluster | Global |
AWS::Route53Resolver::ResolverEndpoint | Route 53 Resolver Endpoint | Each region |
AWS::S3::Bucket | S3 Bucket | Global |
AWS::SES::DedicatedIpPool | SES Dedicated Ip Pool | Each region |
AWS::SFN::Activity | Step Functions Activity | Each region |
AWS::SFN::StateMachine | Step Functions State Machine | Each region |
AWS::SNS::Topic | SNS Topic | Each region |
AWS::SQS::Queue | SQS Queue | Each region |
AWS::SageMaker::App | SageMaker App | Each region |
AWS::SageMaker::Domain | SageMaker Domain | Each region |
AWS::SageMaker::Endpoint | SageMaker Endpoint | Each region |
AWS::SageMaker::NotebookInstance | SageMaker Notebook Instance | Each region |
AWS::SavingsPlans::SavingsPlan | SavingsPlans Savings Plan | Global |
AWS::SecretsManager::Secret | Secrets Manager Secret | Each region |
AWS::Shield::Protection | Shield Protection | Global |
AWS::StorageGateway::Gateway | StorageGateway Gateway | Each region |
AWS::Synthetics::Canary | Synthetics Canary | Each region |
AWS::Timestream::InfluxDBInstance | Timestream Influx DBInstance | Each region |
AWS::Transfer::Server | Transfer Family Server | Each region |
AWS::WAF::WebACL | WAF Web ACL | Each region |
AWS::WAFv2::WebACL | WAFv2 Web ACL | Each region |
AWS::WorkSpaces::Workspace | WorkSpaces Workspace | Each region |
Google Cloud asset types
Some types show only the last part of their name, such as Instance; the asset type tells them apart.
| Asset type | Shown as |
|---|---|
aiplatform.googleapis.com/CustomJob | Vertex AI Custom Job |
aiplatform.googleapis.com/DeploymentResourcePool | Vertex AI Deployment Pool |
aiplatform.googleapis.com/Endpoint | Vertex AI Endpoint |
aiplatform.googleapis.com/Index | Vertex AI Vector Index |
aiplatform.googleapis.com/IndexEndpoint | Vertex AI Index Endpoint |
aiplatform.googleapis.com/Model | Vertex AI Model |
aiplatform.googleapis.com/PipelineJob | Vertex AI Pipeline Job |
aiplatform.googleapis.com/Tensorboard | Vertex AI Tensorboard |
aiplatform.googleapis.com/TrainingPipeline | Vertex AI Training Pipeline |
alloydb.googleapis.com/Backup | AlloyDB Backup |
alloydb.googleapis.com/Cluster | AlloyDB Cluster |
alloydb.googleapis.com/Instance | AlloyDB Instance |
apigee.googleapis.com/Environment | Environment |
apigee.googleapis.com/Instance | Instance |
apigee.googleapis.com/Organization | Organization |
appengine.googleapis.com/Application | App Engine Application |
appengine.googleapis.com/Service | App Engine Service |
appengine.googleapis.com/Version | App Engine Version |
artifactregistry.googleapis.com/Repository | Artifact Registry Repository |
backupdr.googleapis.com/BackupVault | Backup Vault |
backupdr.googleapis.com/ManagementServer | Management Server |
batch.googleapis.com/Job | Job |
bigquery.googleapis.com/Dataset | BigQuery Dataset |
bigquery.googleapis.com/Table | BigQuery Table |
bigqueryreservation.googleapis.com/CapacityCommitment | Capacity Commitment |
bigqueryreservation.googleapis.com/Reservation | Reservation |
bigtableadmin.googleapis.com/Cluster | Bigtable Cluster |
bigtableadmin.googleapis.com/Instance | Bigtable Instance |
bigtableadmin.googleapis.com/Table | Bigtable Table |
certificatemanager.googleapis.com/Certificate | Certificate |
cloudbuild.googleapis.com/BuildTrigger | Cloud Build Trigger |
cloudfunctions.googleapis.com/CloudFunction | Cloud Function (v1) |
cloudfunctions.googleapis.com/Function | Cloud Function (v2) |
cloudkms.googleapis.com/CryptoKey | KMS Crypto Key |
composer.googleapis.com/Environment | Cloud Composer Environment |
compute.googleapis.com/Address | External IP Address |
compute.googleapis.com/BackendService | Backend Service |
compute.googleapis.com/Commitment | Committed Use Discount |
compute.googleapis.com/Disk | Persistent Disk |
compute.googleapis.com/ExternalVpnGateway | External VPN Gateway |
compute.googleapis.com/ForwardingRule | Forwarding Rule |
compute.googleapis.com/GlobalAddress | Global IP Address |
compute.googleapis.com/GlobalForwardingRule | Global Forwarding Rule |
compute.googleapis.com/Image | Image |
compute.googleapis.com/Instance | VM Instance |
compute.googleapis.com/InstanceGroupManager | Managed Instance Group |
compute.googleapis.com/Interconnect | Dedicated Interconnect |
compute.googleapis.com/InterconnectAttachment | VLAN Attachment |
compute.googleapis.com/MachineImage | Machine Image |
compute.googleapis.com/Node | Node |
compute.googleapis.com/NodeGroup | Node Group |
compute.googleapis.com/NodeTemplate | Node Template |
compute.googleapis.com/PacketMirroring | Packet Mirroring |
compute.googleapis.com/RegionBackendService | Regional Backend Service |
compute.googleapis.com/Reservation | Compute Reservation |
compute.googleapis.com/Router | Cloud Router |
compute.googleapis.com/SecurityPolicy | Cloud Armor Policy |
compute.googleapis.com/Snapshot | Disk Snapshot |
compute.googleapis.com/SslCertificate | SSL Certificate |
compute.googleapis.com/TargetGrpcProxy | gRPC Proxy |
compute.googleapis.com/TargetHttpProxy | HTTP Proxy |
compute.googleapis.com/TargetHttpsProxy | HTTPS Proxy |
compute.googleapis.com/TargetPool | Target Pool |
compute.googleapis.com/TargetSslProxy | SSL Proxy |
compute.googleapis.com/TargetTcpProxy | TCP Proxy |
compute.googleapis.com/UrlMap | URL Map |
compute.googleapis.com/VpnGateway | VPN Gateway |
compute.googleapis.com/VpnTunnel | VPN Tunnel |
container.googleapis.com/Cluster | GKE Cluster |
container.googleapis.com/NodePool | GKE Node Pool |
dataflow.googleapis.com/Job | Dataflow Job |
datafusion.googleapis.com/Instance | Instance |
dataplex.googleapis.com/Asset | Dataplex Asset |
dataplex.googleapis.com/Lake | Dataplex Lake |
dataplex.googleapis.com/Zone | Dataplex Zone |
dataproc.googleapis.com/Cluster | Dataproc Cluster |
datastream.googleapis.com/ConnectionProfile | Datastream Connection Profile |
datastream.googleapis.com/Stream | Datastream Stream |
dns.googleapis.com/ManagedZone | DNS Managed Zone |
eventarc.googleapis.com/Trigger | Eventarc Trigger |
file.googleapis.com/Backup | Filestore Backup |
file.googleapis.com/Instance | Filestore Instance |
firestore.googleapis.com/Database | Firestore Database |
gkebackup.googleapis.com/BackupPlan | Backup Plan |
logging.googleapis.com/LogBucket | Log Bucket |
logging.googleapis.com/LogSink | Log Sink |
looker.googleapis.com/Instance | Instance |
memcache.googleapis.com/Instance | Memorystore Memcached |
metastore.googleapis.com/Service | Service |
netapp.googleapis.com/StoragePool | Storage Pool |
netapp.googleapis.com/Volume | Volume |
networkconnectivity.googleapis.com/Hub | Hub |
networkconnectivity.googleapis.com/Spoke | Spoke |
pubsub.googleapis.com/Subscription | Pub/Sub Subscription |
pubsub.googleapis.com/Topic | Pub/Sub Topic |
redis.googleapis.com/Instance | Memorystore Redis |
run.googleapis.com/Job | Cloud Run Job |
run.googleapis.com/Service | Cloud Run Service |
secretmanager.googleapis.com/Secret | Secret |
spanner.googleapis.com/Database | Spanner Database |
spanner.googleapis.com/Instance | Spanner Instance |
sqladmin.googleapis.com/Instance | Cloud SQL Instance |
storage.googleapis.com/Bucket | Cloud Storage Bucket |
tpu.googleapis.com/Node | Cloud TPU Node |
vmwareengine.googleapis.com/PrivateCloud | Private Cloud |
vpcaccess.googleapis.com/Connector | VPC Access Connector |
workstations.googleapis.com/Workstation | Workstation |
workstations.googleapis.com/WorkstationConfig | Workstation Config |
Azure resource types
CloudYali reads every resource in the Resources table of Azure Resource Graph, in each subscription
you connect. The Resource type column shows a friendly name, such as Managed Disk for
microsoft.compute/disks.
Databricks resource types
The console shows these types as they are written here.
| Type | What it is | Read from |
|---|---|---|
databricks_workspace | The workspace | system.access.workspaces_latest |
databricks_cluster | All-purpose and job clusters | system.compute.clusters |
databricks_sql_warehouse | SQL warehouses | system.compute.warehouses |
databricks_job | Jobs | system.lakeflow.jobs |
databricks_job_task | Tasks within jobs | system.lakeflow.job_tasks |
databricks_pipeline | Pipelines | system.lakeflow.pipelines |
databricks_served_entity | Models and endpoints served by Model Serving | system.serving.served_entities |
databricks_mlflow_experiment | MLflow experiments | system.mlflow.experiments_latest |
Anthropic resource types
The console shows these types as they are written here. Anthropic bills by workspace, so these resources have no daily cost of their own.
| Type | What it is |
|---|---|
anthropic_organization | Your Anthropic organization |
anthropic_workspace | Workspaces |
anthropic_api_key | API keys |
anthropic_user | Members of the organization |
anthropic_workspace_member | Who belongs to each workspace |
Not in Resource Inventory
OpenAI, Cursor and Fastly do not add resources. Their spend appears in Cost Explorer.