LogoLogo
Documentation and Guides
Documentation and Guides
  • ABOUT APONO
    • Why Choose Apono
    • Security and Architecture
    • Glossary
  • GETTING STARTED
    • How Apono Works
    • Getting started
    • Access Discovery
    • Integrating with Apono
  • CONNECTORS AND SECRETS
    • Apono Integration Secret
    • High Availability for Connectors
    • Installing a connector with Docker
    • Manage integrations
    • Manage connectors
  • AWS ENVIRONMENT
    • AWS Overview
    • Apono Connector for AWS
      • Installing a connector on EKS Using Terraform
      • Updating a connector in AWS
      • Installing a connector on AWS ECS using Terraform
    • AWS Integrations
      • Integrate an AWS account or organization
        • Auto Discover AWS RDS Instances
        • AWS Best Practices
      • Amazon Redshift
      • RDS PostgreSQL
      • AWS RDS MySQL
      • Integrate with EKS
      • AWS Lambda Custom Integration
      • EC2 via Systems Manager Agent (SSM)
  • AZURE ENVIRONMENT
    • Apono Connector for Azure
      • Install an Azure connector on ACI using Azure CLI
      • Install an Azure connector on ACI using PowerShell
      • Install an Azure connector on ACI using Terraform
      • Updating a connector in Azure
    • Azure Integrations
      • Integrate with Azure Management Group or Subscription
        • Auto Discover Azure SQL Databases
      • Azure MySQL
      • Azure PostgreSQL
      • Integrate with AKS
  • GCP ENVIRONMENT
    • Apono Connector for GCP
      • Installing a GCP connector on Cloud Run using CLI
      • Installing a GCP connector on GKE using CLI (Helm)
      • Installing a GCP connector on GKE using Terraform
      • Updating a connector in Google Cloud
    • GCP Integrations
      • Integrate a GCP organization or project
      • CloudSQL - MySQL
      • CloudSQL - PostgreSQL
      • Google Cloud Functions
      • Integrate with GKE
      • AlloyDB
  • KUBERNETES ENVIRONMENT
    • Apono Connector for Kubernetes
      • Installing a connector on Kubernetes with AWS permissions
      • Updating a Kubernetes connector
    • Kubernetes Integrations
      • Integrate with Self-Managed Kubernetes
  • ADDITIONAL INTEGRATIONS
    • Databases and Data Repositories
      • Microsoft SQL Server
      • MongoDB
      • MongoDB Atlas
      • MongoDB Atlas Portal
      • MySQL
      • Oracle Database
      • PostgreSQL
      • Redis Cloud (Redislabs)
      • Snowflake
      • Vertica
      • MariaDB
    • Network Management
      • SSH Servers
      • RDP Servers
      • Windows Domain Controller
      • AWS EC2 SSH Servers
      • Azure VM SSH Servers
      • Installing the Apono HTTP Proxy
    • Development Tools
      • GitHub
      • Rancher
    • Identity Providers
      • Okta SCIM
      • Okta Groups
      • Okta SSO for Apono logins
      • Google Workspace (Gsuite)
      • Google Workspace (GSuite) Groups
      • Azure Active Directory (Microsoft Entra ID)
      • Azure Active Directory (Entra ID) Groups
      • Jumpcloud
      • JumpCloud Groups
      • OneLogin
      • OneLogin Group
      • LDAP Groups
      • The Manager Attribute in Access Flows
      • HiBob
      • Ping Identity SSO
    • Incident Response Integrations
      • Opsgenie
      • PagerDuty
      • VictorOps (Splunk On-Call)
      • Zenduty
    • ChatOps Integrations
      • Slack integration
      • Teams integration
      • Backstage Integration
  • WEBHOOK INTEGRATIONS
    • Webhooks Overview
    • Anomaly Webhook
    • Audit Log Webhook
    • Request Webhook
      • Custom Webhooks
      • Communications and Notifications
        • Slack Outbound Webhooks
        • Teams
        • Outlook and Gmail (Using Azure Logic App)
      • ITSM
        • Freshdesk
        • Jira
        • ServiceNow
        • Zendesk
        • Freshservice
        • ServiceDesk Plus
      • Logs and SIEMs
        • Coralogix
        • Datadog
        • Logz.io
        • Grafana
        • New Relic
        • SolarWinds
        • Sumo Logic
        • Cortex
        • Logpoint
        • Splunk
        • Microsoft Sentinel
      • Orchestration and workflow builders
        • Okta Workflows
        • Torq
    • Integration Webhook
    • Webhook Payload References
      • Audit Log Webhook Payload Schema Reference
      • Webhook Payload Schema Reference
    • Manage webhooks
    • Troubleshoot a webhook
    • Manual Webhook
      • ITSM
        • PagerDuty
  • ACCESS FLOWS
    • Access Flows
      • What are Access Flows?
    • Create Access Flows
      • Self Serve Access Flows
      • Automatic Access Flows
      • Access Duration
    • Manage Access Flows
      • Right Sizing
    • Revoke Access
    • Dynamic Access Management
      • Resource and Integration Owners
    • Common Use Cases
      • Ensuring SLA
      • Protecting PII and Customer Data
      • Production Stability and Management
      • Break Glass Protocol
    • Create Bundles
    • Manage Bundles
  • ACCESS REQUESTS AND APPROVALS
    • Slack
      • Requesting Access with Slack
      • Approving Access with Slack
    • Teams
      • Requesting Access with Teams
      • Approving Access with Teams
    • CLI
      • Install and manage the Apono CLI
      • Requesting Access with CLI
    • Web Portal
      • Requesting Access with the Web Portal
      • Approving Access with the Web Portal
      • Reviewing historical requests with the Web Portal
    • Freshservice
    • Favorites
  • Inventory
    • Inventory Overview
    • Inventory
    • Access Scopes
    • Risk Scores
    • Apono Query Language
  • AUDITS AND REPORTS
    • Activity Overview
      • Activity
      • Create Reports
      • Manage Reports
    • Compliance: Audit and Reporting
    • Auditing Access in Apono
    • Admin Audit Log (Syslog)
  • HELP AND DEBUGGING
    • Integration Status Page
    • Troubleshooting Errors
  • ARCHITECTURE AND SECURITY
    • Anomaly Detection
    • Multi-factor Authentication
    • Credentials Rotation Policy
    • Periodic User Cleanup & Deletion
    • End-user Authentication
    • Personal API Tokens
  • User Administration
    • Role-Based Access Control (RBAC) Reference
    • Create Identities
    • Manage Identities
Powered by GitBook
On this page
  • Filter resources
  • View the permissions and details of a resource
  • Comparative Logic

Was this helpful?

Export as PDF
  1. Inventory

Inventory

Learn how to filter and view the details of your integrations

PreviousInventory OverviewNextAccess Scopes

Last updated 28 days ago

Was this helpful?

If your organization uses a multi-cloud strategy, browsing resources and grouping them to efficiently provide access can be difficult.

The Inventory page consolidates all your discovered resources into a single list. This unified list eliminates switching between integrations to find resources and provides tools to filter, review, and group resources:

  • Advanced Filtering: Quickly locate resources by applying flexible filters, such as integration, resource type, resource status, and permission name

  • Detailed Metadata: Access information about each resource, including path, ownership, entitlements, and cloud-sourced tags

For example, you can easily find all active production resources by filtering for Resource Name contains production and Resource Status is ACTIVE. Then, you can review the details of each resource.

In addition to filtering and viewing the details of your integrations, you can create .


Filter resources

Follow these steps to filter the unified list of resources:

  1. On the Inventory page, click Basic.

  2. Filter the resources by one or several of the following filters.

To create complex queries, click AQL to build a query in the code box.

Integration

Follow these steps to filter by integration:

    • Equals (=)

    • Not Equals (!=)

  1. (Optional) In the Search field, enter a value to filter the list of integrations.

  2. Select one or several integrations. Only the values meeting the criteria will be shown.

  3. Click the top or outside of the dropdown menu to close it.

Resource Type

Follow these steps to filter by resource type:

    • Equals (=)

    • Not Equals (!=)

  1. (Optional) In the Search field, enter a value to filter the list of resource types.

  2. Select one or several resource types. Only the values meeting the criteria will be shown.

  3. Click the top or outside of the dropdown menu to close it.

Resource Status

Follow these steps to filter by resource status:

    • Equals (=)

    • Not Equals (!=)

  1. (Optional) In the Search field, enter a value to filter the list of resource statuses.

  2. Select one or several resource statuses. Only the values meeting the criteria will be shown.

  3. Click the top or outside of the dropdown menu to close it.

Resource Name

Follow these steps to filter by resource name:

  1. Select Resource Name.

    • Equals (=)

    • Not Equals (!=)

    • Contains (a*b)

    • Does not contain (!a*b)

    • Starts with (*b)

    • Ends with (a*)

  2. (Optional) In the Search field, enter a value to filter the list of resource names.

  3. (Equals, Not Equals only) Select one or several resource names. Only the values meeting the criteria will be shown.

  4. Click the top or outside of the dropdown menu to close it.

Resource Path

Follow these steps to filter by resource path:

  1. Select Resource Path.

    • Equals (=)

    • Not Equals (!=)

    • Contains (a*b)

    • Does not contain (!a*b)

    • Starts with (*b)

    • Ends with (a*)

  2. (Optional) In the Search field, enter a value to filter the list of resource paths.

  3. Select one or several resource paths. Only the values meeting the criteria will be shown.

  4. Click the top or outside of the dropdown menu to close it.

Resource Tag

Follow these steps to filter by resource tag:

  1. Select Resource Tag.

  2. (Optional) In the Search field, enter a value to filter the list of resource names.

  3. Click the resource name.

    • Equals (=)

    • Not Equals (!=)

    • Contains (a*b)

    • Does not contain (!a*b)

    • Starts with (*b)

    • Ends with (a*)

  4. (Optional) In the Search field, enter a value to filter the list of resource tags.

  5. (Equals, Not Equals only) Select one or several resource tags. Only the values meeting the criteria will be shown.

  6. Click the top or outside of the dropdown menu to close it.

Permission Name

Follow these steps to filter by permission name:

  1. Select Permission Name.

    • Equals (=)

    • Not Equals (!=)

    • Contains (a*b)

    • Does not contain (!a*b)

    • Starts with (*b)

    • Ends with (a*)

  2. (Optional) In the Search field, enter a value to filter the list of resource names

  3. (Equals, Not Equals only) Select one or several permission names. Only the values meeting the criteria will be shown.

  4. Click the top or outside of the dropdown menu to close it.

Resource Risk Level

Follow these steps to filter by resource risk level:

  1. Select Resource Risk Level.

    • Equals (=)

    • Not Equals (!=)

  2. Select one or several resource risk level. Only the values meeting the criteria will be shown.

  3. Click the top or outside of the dropdown menu to close it.

Permission Risk Level

Follow these steps to filter by permission risk level:

  1. Select Permission Risk Level.

    • Equals (=)

    • Not Equals (!=)

  2. Select one or several pemission risk level. Only the values meeting the criteria will be shown.

  3. Click the top or outside of the dropdown menu to close it.


View the permissions and details of a resource

Follow these steps to learn more about a resource:

  1. Click the name of a resource. The Entitlements Details panel opens.

  2. Click Entitlements to view the available resource permissions. The following table explains the content displayed on the Entitlements tab.

Field
Description

Resource

Name of the resource

Permission

Name of the access level to the resource

If a resource has multiple access levels, each level is listed on a separate line.

  1. Click Resource Details to view information about the resource. The following table explains the content displayed on the Resource Details tab.

Field
Description

Name

Name of the resource and the resource ID

Integration

Name of the integration

Type

Resource type

Risk Level

Path

Path to the resource

Owners

One or multiple people responsible for managing access to the resource

Status

Status of the resource

Tags

Resource tags sourced from the cloud environment

Tags are organized in rows as key-value pairs with Key and Value columns.

  1. Click the X in the top right corner of the panel to close the panel.


Comparative Logic

The following table explains the comparative logic that can be used with the Inventory page filters.

Logic
Description

Equals (=)

Checks if values are the same

Examples:

  • Resource Type equals DynamoDB Table

  • Resource Status equals ACTIVE

After filtering by this value, you can select the exact resources to include in your filtered query.

Not Equals (!=)

Checks if values are different

Examples:

  • Integration does not equal AWS Playground

  • Resource Type does not equal S3 Bucket

After filtering by this value, you can select the exact resources to include in your filtered query.

Contains (a*b)

Checks if a value contains another value as a substring or pattern

Examples:

  • Resource Name contains playground

  • Resource Tag contains true

Does not contain (!a*b)

Checks if a value does NOT contain another value as a substring or pattern

Examples:

  • Resource Name does not contain production

  • Permission Name does not contain admin

Starts with (*b)

Checks if a value begins with a specific value or pattern

Examples:

  • Resource Name starts with aws

  • Resource Tag for a region starts with eu

Ends with (a*)

Checks if a value ends with a specific value or pattern

Examples:

  • Resource Name ends with terraform-state

  • Resource Tag for an env ends with dev

The enables you to extend your query capabilities beyond the standard options available with the UI.

On the page, click the Integration dropdown menu.

From the dropdown menu, select the :

On the page, click the Resource Type dropdown menu.

From the dropdown menu, select the :

On the page, click the Resource Status dropdown menu.

From the dropdown menu, select the :

On the page, click the More Filters dropdown menu.

From the dropdown menu, select the :

On the page, click the More Filters dropdown menu.

From the dropdown menu, select the :

On the page, click the More Filters dropdown menu.

From the dropdown menu, select the :

On the page, click the More Filters dropdown menu.

From the dropdown menu, select the :

On the page, click the More Filters dropdown menu.

From the dropdown menu, select the :

On the page, click the More Filters dropdown menu.

From the dropdown menu, select the :

.

Resource sensitivity Learn more about .

Apono Query Language
Inventory
Inventory
Inventory
Inventory
Inventory
Inventory
Inventory
Inventory
Inventory
comparative logic
comparative logic
comparative logic
comparative logic
comparative logic
comparative logic
comparative logic
comparative logic
comparative logic
Filter the list of resources
Risk Scores
access scopes
Inventory page with filters
Entitlements Details panel