Cloud Map Supported Resources
The Cloud Map displays the following resources. For information on the resources for which Illumio CloudSecure supports policies, see Resources that Support Policy
AWS
Resource | Category | Attached Resources on Details Panel | Map Display Notes | Flow Support |
---|---|---|---|---|
VPC | Network Management | Elastic Network Interface (ENI), Subnet, Virtual Private Cloud (VPC) peering, peered VPC | Displays at Region level | No |
Subnet | Network Management | Subnet | Displays at VPC level | No |
EC2 Instance | Compute | ENI, Subnet, VPC, Security Group (SG), Elastic IP, Elastic Block Storage (EBS) Volume, Target Group | Displays at Subnet level | Yes |
EKS Cluster | Containers | ENI, Subnet, VPC, SG, Node Group | Displays at Region level | Yes |
EKS Nodegroup | Containers | Cluster | Displays at Region level | No |
VPC Endpoint | Network Routing | S3, S3 Bucket Policy, VPC, ENI, SG, Subnet | Displays at VPC level | Yes |
RDS DB Cluster | Databases | ENI, Subnet, VPC, SG | Displays at VPC level | Yes |
RDS DB Instance | Databases | ENI, Subnet, VPC, SG | Displays at VPC level | Yes |
ECS Cluster | Containers | N/A | Displays at Region level | No |
ECS Container Instance | Containers | N/A | Displays at Region level | No |
Glacier Vault | Storage | N/A | Displays at Region level | Yes |
ElastiCache CacheCluster | Databases | N/A | Displays at Region level | Yes |
MemoryDB Cluster | Databases | N/A | Displays at Region level | Yes |
Spot Fleet Request | Compute | EC2 Instance, SpotInstanceRequest | Displays at VPC level | No |
Spot Fleet Instance Request | Compute | EC2 Instance | Displays at VPC level | No |
S3 Bucket | Storage | Bucket Policy, VPC Endpoint, VPC, ENI, SG, Subnet | Displays at Region level | No |
ElasticLoadBalancingV2 Load Balancer | Network Routing | ENI, Subnet, VPC, SG, Target Group | Displays at VPC level | No |
VPC Peering | Network Management | VPC | Does not display as a resource node, but does display as a relationship | No |
DynamoDB Table | Databases | N/A | Displays at Region level | No |
Redshift Cluster | Data Warehouse | ENI, Subnet, VPC, VPC Endpoint, SG, Network Interface Controller (NIC) | Displays at VPC level | No |
Lambda Function | Serverless | Subnet, VPC, SG, Key Management Services (KMS) key | Displays at VPC level | No |
DocumentDB DB Cluster | Databases | Document DB Instance, Security Groups, KMS key | Displays at Region level | No |
DocumentDB Instance | Databases | Document DB Cluster, Security Groups, KMS key, VPC, Subnet | Does not display as a resource node, but does display as a relationship | No |
Transit Gateway | Network Routing | Transit Gateway Attachment, Transit Gateway Multicast Domain, Transit Gateway, VPC, Subnet, RAM Resource Share | Displays at VPC level | No |
Azure
Resource | Category | Attached Resources on Details Panel | Map Display Notes | Flow Support |
---|---|---|---|---|
Virtual Network | Network Management | NIC, IP Config, Subnet | Displays at Region level | No |
Subnet | Network Management | VNet, IP Config, NIC, Network Security Group (NSG) | Displays at VNet level | No |
Storage Account | Storage | Private Endpoint, NIC, Subnet, VNet, NSG | Displays at Region level | No |
Virtual Machine | Compute | NIC, NSG , IP Config, Subnet, VNet, VM ScaleSet | Displays at Subnet level | Yes |
SQL Server | Databases | Private Endpoint, NIC, Subnet, VNet, NSG, SQL Server Database | Displays at Region level | No |
Virtual Machine ScaleSet | Compute | VM Scaleset | Displays at Region level | No |
Load Balancer | Compute | N/A | Displays at Region level | No |
Private Endpoint | Network Management | NIC, Subnet, VNet, Azure PaaS resources | Displays at Subnet level | No |
DocumentDB Database Account | Databases |
Private Endpoint, NIC, Subnet, VNet, NSG, SQL Database, DocumentDB Table, Document DB Gremlin Database, DocumentDB Cassandra Keyspace, DocumentDB Mongo Database |
Displays at Region level | No |
DocumentDB Cassandra Cluster | Databases | N/A | Displays at Region level | No |
DocumentDB Mongo Cluster | Databases | Private Endpoint, NIC, Subnet, VNet, NSG | Displays at Region level | No |
DBforPostgreSQL ServerGroup V2 | Databases | Private Endpoint, NIC, Subnet, VNet, NSG | Displays at Region level | No |
DBforPostgreSQL Flexible Server | Databases | Private Endpoint, NIC, Subnet, VNet, NSG, DBforPostgreSQL Flexible Server Database |
Displays at Region level | No |
DBforPostgreSQL Server | Databases | Private Endpoint, NIC, Subnet, VNet, NSG, DBforPostgreSQL Server Database | Displays at Region level | No |
Web Site | Serverless | Subnet, Web Site Function | Displays at Region level | No |
Web Site Function | Serverless | Web Site | Displays at Region level | No |
Virtual Network Peering | Network Management | VNet | Does not display as a resource node, but does display as a relationship | No |
NAT Gateway | Network Management | Subnet, Public IP, Public IP Prefix | Displays at Region level | No |
Redis Cache | Databases | VNet, Subnet, Private Endpoint | Displays at Region level | No |
Because CloudSecure may not always discover elastic network interfaces (ENIs), a flow search based on resource IDs will not work for the following supported resources if their Details page does not display the ENI. The workaround is to search using the IP address of the associated ENI, if known:
- AWS RDS DBInstances
- AWS RDS DBClusters
- ElasticLoadBalancingV2 load balancers
- AWS MemoryDB clusters
- AWS ElastiCache for Redis clusters
- AWS Redshift clusters