This section documents a set of preconfigured entities that are created for AWS based on AWS resources. All entity types are prefixed with AWS_*.
All AWS entities have at least the following fields:
Automatic capacity scaling for EC2 and other resources
AWS Backup
Centralized backup across AWS services
Amazon Bedrock
Foundation models and generative AI
Amazon Keyspaces
Managed Apache Cassandra-compatible database
AWS Certificate Manager
SSL/TLS certificate management (ACM)
Amazon CloudFront
Content delivery network
AWS CloudHSM
Hardware security module
AWS CloudTrail
API activity logging and auditing
AWS CodeBuild
Managed build service
Amazon Cognito
User identity and authentication
Amazon Connect
Cloud contact center
AWS DataSync
Automated data transfer service
Amazon DynamoDB Accelerator
In-memory cache for DynamoDB (DAX)
AWS Direct Connect
Dedicated network connection to AWS
AWS Database Migration Service
Database migration (DMS)
Amazon DynamoDB
Managed NoSQL database
Amazon EC2
Virtual machines, networking, and storage
Amazon Elastic Container Registry
Container image registry (ECR)
Amazon Elastic Container Service
Container orchestration (ECS)
Amazon Elastic File System
Managed NFS file storage (EFS)
Amazon Elastic Kubernetes Service
Managed Kubernetes (EKS)
Amazon ElastiCache
In-memory caching (Redis, Memcached)
AWS Elastic Beanstalk
Platform-as-a-service for web applications
Elastic Load Balancing
Classic, Application, Network, and Gateway load balancers
Amazon EMR
Big data processing (EMR Containers and Serverless)
Amazon EventBridge
Serverless event bus
Amazon FSx
Managed file systems (Lustre, Windows, OpenZFS, NetApp ONTAP)
AWS Global Accelerator
Global network performance optimization
AWS Glue
Serverless ETL and data integration
AWS Identity and Access Management
Users, roles, and policies (IAM)
Amazon MSK Connect
Managed Kafka Connect connectors
Amazon Kinesis
Streaming data (Streams, Firehose, Analytics)
AWS Key Management Service
Cryptographic key management (KMS)
AWS Lambda
Serverless function execution
Amazon CloudWatch Logs
Log storage and analysis
Amazon Managed Streaming for Apache Kafka
Managed Kafka clusters (MSK)
Amazon Managed Workflows for Apache Airflow
Managed Apache Airflow (MWAA)
AWS Network Firewall
Managed network firewall
Amazon OpenSearch Service
Search and analytics (including Serverless)
Amazon Relational Database Service
Managed relational databases (RDS)
Amazon Redshift
Data warehousing (including Serverless)
Amazon Route 53
DNS and traffic routing (including Resolver)
Amazon S3
Object storage
Amazon SageMaker
Machine learning platform
Amazon Simple Notification Service
Pub/sub messaging (SNS)
Amazon Simple Queue Service
Message queuing (SQS)
AWS Step Functions
Serverless workflow orchestration
AWS Storage Gateway
Hybrid cloud storage
AWS WAFv2
Web application firewall (v2)
AWS resource fields
Attribute
Type
Description
Examples
aws.account.id
string
resourcestable Display name: AWS account ID The 12-digit number, such as 123456789012, that uniquely identifies an AWS account. Tags: permissionprimary-field
123456789012
aws.arn
string
resourcestable Display name: AWS ARN Amazon Resource Name (ARN).
stable Display name: AWS object The full JSON content of any aws object: {"configuration":{ <describe_resource_output> }, "supplementary_configuration": { <supplementary_resource_configuration> }}
aws.properties.version
string
experimental Display name: AWS properties version The aws.object json content version
1.0
aws.region
string
resourcestable Display name: AWS region A specific geographical AWS Cloud location. Tags: primary-field
us-east-1
aws.resource.id
string
resourcestable Display name: AWS resource ID Unique, immutable identifier assigned to the AWS cloud resource.
i-0922cda4579db3a45
aws.resource.name
string
resourcestable Display name: AWS resource name Name of the resource for named resources, value of the "Name" tag in AWS for non-named resources (if unavailable, same as aws.resource.id).
my-ec2-instance
aws.resource.type
string
resourceexperimental Display name: AWS resource type The name of a resource type in CloudFormation format.
resourceexperimental Display name: AWS service The service that identifies the AWS product.
s3
cloud.provider
string
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
ID giving fields
The Smartscape ID for a given entity is calculated based on aws.arn of the AWS resource.
AWS object
The aws.object field contains the configuration of the resource as JSON string.
AWS tags
All AWS tags of an entity are captured automatically and available via the tags:aws and additionally via the tags field. E.g. to access the CREATED_BY tag you can use tags[CREATED_BY].
Permission fields
All AWS entities support the following fields to set up permissions:
aws.account.id
dt.security_context
AWS Account
Smartscape node name: aws.resource.name
Smartscape node type: AWS_ACCOUNT
This entity represents an AWS Account.
Query
Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AWS_ACCOUNT"
smartscapeNodes"AWS_ACCOUNT"
ID input
The ID is calculated based on the following fields in the defined order: aws.arn
Base entity fields
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
OK; DELETED; ERROR; INCOMPLETE
AWS Account fields
Attribute
Type
Description
Examples
aws.account.id
string
resourcestable Display name: AWS account ID The 12-digit number, such as 123456789012, that uniquely identifies an AWS account. Tags: permissionprimary-field
123456789012
aws.resource.id
string
resourcestable Display name: AWS resource ID Unique, immutable identifier assigned to the AWS cloud resource.
i-0922cda4579db3a45
aws.resource.name
string
resourcestable Display name: AWS resource name Name of the resource for named resources, value of the "Name" tag in AWS for non-named resources (if unavailable, same as aws.resource.id).
my-ec2-instance
aws.arn
string
resourcestable Display name: AWS ARN Amazon Resource Name (ARN).
This entity represents a physical AWS Availability Zone (e.g. use1-az1).
Query
Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AWS_AVAILABILITY_ZONE"
smartscapeNodes"AWS_AVAILABILITY_ZONE"
ID input
The ID is calculated based on the following fields in the defined order: aws.arn
Base entity fields
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
OK; DELETED; ERROR; INCOMPLETE
AWS Availability Zone fields
Attribute
Type
Description
Examples
aws.region
string
resourcestable Display name: AWS region A specific geographical AWS Cloud location. Tags: primary-field
us-east-1
aws.resource.id
string
resourcestable Display name: AWS resource ID Unique, immutable identifier assigned to the AWS cloud resource.
i-0922cda4579db3a45
aws.resource.name
string
resourcestable Display name: AWS resource name Name of the resource for named resources, value of the "Name" tag in AWS for non-named resources (if unavailable, same as aws.resource.id).
my-ec2-instance
aws.arn
string
resourcestable Display name: AWS ARN Amazon Resource Name (ARN).
stable Defines if the instance is part of a cluster, similar to a composition in UML. The source (child) cannot exist without the destination (parent).
AWS Region
Smartscape node name: aws.resource.name
Smartscape node type: AWS_REGION
This entity represents an AWS Region.
Query
Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AWS_REGION"
smartscapeNodes"AWS_REGION"
ID input
The ID is calculated based on the following fields in the defined order: aws.arn
Base entity fields
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
OK; DELETED; ERROR; INCOMPLETE
AWS Region fields
Attribute
Type
Description
Examples
aws.region
string
resourcestable Display name: AWS region A specific geographical AWS Cloud location. Tags: primary-field
us-east-1
aws.resource.id
string
resourcestable Display name: AWS resource ID Unique, immutable identifier assigned to the AWS cloud resource.
i-0922cda4579db3a45
aws.resource.name
string
resourcestable Display name: AWS resource name Name of the resource for named resources, value of the "Name" tag in AWS for non-named resources (if unavailable, same as aws.resource.id).
my-ec2-instance
aws.arn
string
resourcestable Display name: AWS ARN Amazon Resource Name (ARN).