01 A normalized multicloud inventory
Discover provider hierarchies across AWS, Azure, Google Cloud and OCI. Accounts, subscriptions or projects, regions and resources retain their provider identity while joining the same governed entity model used by the rest of the estate.
02 Ephemeral resources with useful history
Reconcile resources as they appear, change and disappear so short-lived instances and workloads do not produce a disconnected trail. Keep lifecycle and time context available when reviewing an incident after the resource has changed.
03 Cloud network paths and dependencies
Connect VPCs/VNets, subnets, route tables, routes, NICs and security policies with NAT gateways, transit or interconnect resources, private endpoints and cloud load balancers where applicable. Follow reachability through the dependencies that control the path.
04 Compute, quotas and scaling pressure
Bring workload resource use together with relevant quota and autoscaling evidence. Distinguish saturation inside an instance from a scaling or provider-limit condition that prevents the service from adding capacity.
05 Storage and managed database context
Relate cloud storage and database entities to their region, network and consuming service. Compare availability, performance and capacity signals with application symptoms to identify a shared dependency or localized resource problem.
06 Provider service-health correlation
Place provider health and incident information beside observed resource and synthetic evidence. A provider event helps focus the investigation while independent service checks show how your own environment is actually affected.
07 Cloud audit and change evidence
Bring material route, security, load-balancer, infrastructure and control-plane changes into the unified timeline. Link actor or service identity, affected resources and revision references where provided to test the most relevant change hypothesis.
08 Cloud flow-log context
Use supported provider flow logs when enabled in your environment to enrich network and service investigations. Preserve source, direction, coverage and collection quality, with volume, privacy and retention controls aligned to the provider and your policy.
09 Service and Kubernetes relationships
Follow cloud load balancers into their targets, Kubernetes services and workloads, then on to databases, queues or external APIs where evidence exists. The same graph connects cloud resources to on-premises paths and business services.
10 API collection health and budgets
Expose authentication failures, throttling, provider quotas, stale data and connector health separately from resource health. Controlled polling, rate budgets and bounded collection let operators assess the evidence without mistaking an API-access issue for an outage.