Skip to main content

Cloud Resource Scanning

Cloud Resource Scanning inspects connected AWS, GCP, and Azure accounts for resource metadata, risky configuration, and evidence used by compliance frameworks.

What it produces​

  • Findings with severity, affected resource, account, region, description, and remediation guidance.
  • Resource metadata for Risk Inventory.
  • Compliance evidence used by Security > Compliance.
  • Scan history used by dashboard and trend views.

Requirements​

  • At least one connected cloud account.
  • Read-oriented cloud access.
  • DevOps Genie Admin access to add or repair accounts.

No DevOps Genie Agent is required.

How to use it​

  1. Connect a cloud account from Cloud Accounts > Add Cloud Account.
  2. Wait for the automatic first scan.
  3. Open Security > All Findings.
  4. Use Security > High Risk for urgent triage.
  5. Use Risk Inventory to investigate resource context.

Troubleshooting​

See Cloud Account Validation and Scan Troubleshooting.