This topic describes the server assets and cloud services that can be integrated with Security Center for protection.
Server assets
Alibaba Cloud: Elastic Compute Service (ECS) instances and Simple Application Servers.
Non-Alibaba Cloud: on-premises servers, IDC servers, or servers from third-party cloud providers.
Security Center provides different protection capabilities for different types of servers. For more information, see Security Center features supported by different servers.
Cloud services
The following table lists the cloud services of cloud providers that can be connected to Security Center.
The scope of supported assets is dynamic and subject to change with product iterations, including the addition or removal of asset types. The list provided here is for reference only. For the definitive list of scannable assets, always refer to the real-time results in the console.
Alibaba Cloud
Service | Service Subtype |
Elastic Compute Service (ECS) | Instance |
Disk (storage) | |
Security group | |
Snapshot | |
Image | |
Automatic snapshot policy | |
Server Load Balancer (SLB) | Server Load Balancer (SLB) |
Application load balancer | |
Network load balancer | |
ApsaraDB RDS | Instance |
ApsaraDB for MongoDB | Instance |
ApsaraDB for Redis | Instance |
Container Registry | Enterprise repository |
Personal repository | |
Enterprise instance | |
Container Service for Kubernetes (ACK) | Cluster |
Virtual Private Cloud (VPC) | NAT Gateway |
EIP | |
VPN | |
Flow log | |
VPC | |
Physical connection | |
Shared bandwidth package | |
VPC peering connection | |
Route table | |
ActionTrail | Trail |
CDN | Instance |
SSL Certificates Service | Certificate |
Order | |
Uploaded certificate | |
Yunxiao DevOps | Organization |
Code repository | |
Resource Access Management (RAM) | Account alias |
User | |
Permission policy | |
Group | |
Role | |
Anti-DDoS | Instance |
Web Application Firewall (WAF) 2.0 | Instance 2.0 |
Domain name 2.0 | |
Web Application Firewall (WAF) 3.0 | Instance 3.0 |
Domain name 3.0 | |
Object Storage Service (OSS) | Bucket |
PolarDB for MySQL | Cluster |
AnalyticDB for PostgreSQL | Instance |
Microservices Engine (MSE) | Cluster |
Gateway | |
Network Attached Storage (NAS) | File system |
Log analysis | |
Sensitive Data Discovery and Sizing (SDDP) | Instance |
User status | |
Elastic IP Address (EIP) | Anycast EIP |
Identity as a Service (EIAM) | Instance |
PolarDB-X | Instance |
Elasticsearch | Instance |
Security Center | Instance |
Simple Log Service (SLS) | Project |
API Gateway | Instance |
Group | |
Access control policy | |
AnalyticDB for MySQL | Instance |
MaxCompute | Project |
Data Management (DMS) | Instance |
User tenant | |
Cloud Firewall | Asset |
Access control policy | |
Access control policy group | |
Cloud Enterprise Network (Enterprise Edition) | |
UserBuyVersion | |
Express Connect | |
Cloud Enterprise Network (Basic Edition) | |
OceanBase | Database |
Database instance | |
Bastionhost | Instance |
DataWorks | Workspace |
Elastic Container Instance (ECI) | Container group |
Key Management Service (KMS) | Key |
Secret | |
Instance | |
Function Compute | Domain |
Function 3.0 | |
Custom domain 3.0 | |
Trigger 3.0 | |
ApsaraDB for HBase | Instance |
Auto Scaling (ESS) | Scaling group |
ECS-type scaling group configuration | |
ECI-type scaling group configuration | |
Global Accelerator (GA) | Domain |
Instance | |
Listener | |
WUYING Cloud Computer | Cloud desktop |
NAS file system | |
Lindorm | Instance |
Message Queue for Apache Kafka | Instance |
ApsaraDB for ClickHouse | Instance |
SelectDB | Instance |
Hologres | Instance |
Domain | Domain |
Cloud Monitor | Host monitoring |
Platform for AI (PAI) | Model |
Workspace | |
Development instance | |
EAS service | |
EAS gateway | |
Dataset | |
Resource group | |
ApsaraVideo Live | Domain |
EventBridge | Event bus |
CloudFlow | Flow |
Simple Application Server | Instance |
E-MapReduce (EMR) | Cluster |
Realtime Compute for Apache Flink | Workspace |
Alibaba Cloud DNS | Instance |
Domain | |
DNS record | |
Intelligent Computing Lingjun | Cluster |
Block Storage | Dedicated cluster |
Data Transmission Service (DTS) | Task |
DataHub | Project |
Cloud Backup | Repository |
Lightweight Message Queue (formerly MNS) | Message topic |
Access point attribute | |
ApsaraVideo VOD | Domain |
Enterprise Distributed Application Service (EDAS) | Cluster |
ApsaraDB for Memcache | Instance |
Database Backup (DBS) | Backup plan |
OpenSearch | Application |
PrivateZone | Private zone |
Cloud SSO | Directory |
SCIM credential | |
Application Real-Time Monitoring Service (ARMS) | Application monitoring |
Dynamic Route for CDN (DCDN) | Domain |
Operation Orchestration Service (OOS) | Application |
PrivateLink | VPC endpoint |
VPC endpoint service | |
Resource Orchestration Service (ROS) | Resource stack |
Resource Management | Member account |
Message Queue for Apache RocketMQ 4.0 | Instance |
Cloud Enterprise Network (CEN) | Instance |
AI Security Guardrails | Instance |
Message Queue for RabbitMQ | Instance |
Message Queue for Apache RocketMQ | Instance 4.0 |
Instance 5.0 | |
Server Load Balancer (SLB) | ALB server group |
E-MapReduce (EMR) | Node |
Network Attached Storage (NAS) | Access point |
Platform for AI (PAI) | Application |
Connection | |
Knowledge base | |
Tool | |
Application Real-Time Monitoring Service (ARMS) | Prometheus instance |
Grafana workspace |
Tencent Cloud
Service | Service Subtype |
Cloud Virtual Machine (CVM) | Instance |
Security group | |
Cloud Load Balancer (CLB) | Instance |
TencentDB for MySQL | Instance |
Account | |
Redis | Instance |
Tencent Container Registry (TCR) | Image repository information |
Instance | |
Virtual Private Cloud (VPC) | Instance |
SSL Certificate Service | Instance |
Cloud Access Management (CAM) | Collaborator |
Collaborator AccessKey | |
Collaborator policy | |
Role | |
Role policy | |
Sub-user | |
Sub-user AccessKey | |
Sub-user policy | |
Cloud Object Storage (COS) | Instance |
TDSQL for MySQL | Instance |
TencentDB for PostgreSQL | Instance |
Elasticsearch Service | Instance |
TencentDB for MariaDB | Instance |
Account | |
Cloud Block Storage (CBS) | Instance |
TI-ONE Training Platform | Online service |
Development machine | |
Task-based modeling | |
Cloud Virtual Machine (CVM) | Public IP |
Content Delivery Network (CDN) | Domain |
TencentDB for SQL Server | Instance |
TDSQL-C for MySQL | Cluster |
Gateway Load Balancer | Instance |
Web Application Firewall (WAF) | Domain |
Instance |
Huawei Cloud
Service | Service Subtype |
Elastic Cloud Server (ECS) | Instance |
Elastic Load Balance (ELB) | Instance |
Object Storage Service (OBS) | Bucket |
Relational Database Service (RDS) | Instance |
GaussDB | Instance |
GeminiDB | Instance |
Auto Scaling (AS) | Scaling group |
Elastic Volume Service (EVS) | Disk |
VPC | Virtual Private Cloud (VPC) |
Elastic IP (EIP) | |
Security group | |
Identity and Access Management (IAM) | Account |
User | |
Agency | |
Cloud Trace Service (CTS) | Tracker |
Web Application Firewall (WAF) | Cloud-mode protected website |
Dedicated-mode protected website | |
Host Security Service (HSS) | Host |
Weak password | |
Cloud Search Service (CSS) | Cluster |
Distributed Cache Service for Redis | Instance |
Document Database Service (DDS) | Instance |
ModelArts | Notebook |
Algorithm | |
Permission | |
Image | |
Online service | |
Content Delivery Network (CDN) | Domain |
AWS
Service | Service Subtype |
Elastic Compute Cloud (EC2) | Instance |
Security group | |
Snapshot | |
Subnet | |
Volume | |
VPC | |
Transit gateway | |
VPN | |
Elastic Load Balancing (ELB) | Elastic Load Balancer (ELB) |
Amazon RDS | Instance |
Cluster | |
Cluster snapshot | |
Amazon ElastiCache | Cluster |
Replication group | |
Amazon CloudFront | Distribution |
AWS Auto Scaling | Group |
Launch configuration | |
Amazon Redshift | Cluster |
Amazon ECS | Cluster |
Service | |
Scheduled task | |
AWS Security Hub | Settings |
AWS Identity and Access Management (IAM) | Policy |
Role | |
Credential report | |
User | |
Account password policy | |
Account statistics | |
MFA device | |
Key | |
Service certificate | |
AWS Key Management Service (KMS) | Key |
Amazon Simple Storage Service (S3) | Bucket |
Bucket lifecycle configuration | |
Elastic Load Balancing (ELB) | Classic Load Balancer (CLB) |
Application Load Balancer (ALB) | |
Listener | |
AWS Identity and Access Management (IAM) | Bucket access policy |
AWS Config | Configuration recorder status |
AWS CloudTrail | Trail |
Amazon SageMaker AI | Model |
Endpoint configuration | |
Notebook instance | |
Amazon OpenSearch Service | Domain |
Amazon GuardDuty | Detector |
Amazon Neptune | Cluster |
Snapshot | |
Amazon MQ | Agent |
Amazon Elastic File System (EFS) | File system |
Access point | |
Amazon EMR | Cluster |
Security configuration | |
Amazon EKS | Cluster |
Amazon Elastic Container Registry (ECR) | Repository |
Amazon Simple Queue Service (SQS) | Queue |
AWS Transfer Family | Server |
Connector | |
Amazon RDS | Event subscription |
AWS Database Migration Service (DMS) | Endpoint |
Provisioned instance | |
AWS App Runner | Environment |
AWS Network Firewall | Firewall |
Firewall policy | |
Rule group | |
Amazon API Gateway | API |
REST API | |
Amazon DynamoDB | Cluster |
Table | |
Amazon FSx | File system |
AWS AppSync | API |
GraphQL API | |
AWS CodeBuild | Report group |
Build project | |
Amazon DocumentDB | Cluster |
Snapshot | |
AWS KMS | Key |
Amazon EventBridge | Event bus |
Global endpoint | |
Amazon Kinesis | Data stream |
Amazon MSK | Cluster |
Connector | |
AWS Private Certificate Authority | Private Certificate Authority |
Amazon Route 53 | Hosted zone |
AWS Backup | Vault |
Backup plan | |
Amazon Cognito | User pool |
Amazon Data Firehose | Firehose stream |
AWS DataSync | Task |
AWS Certificate Manager (ACM) | Certificate |
AWS Identity and Access Management (IAM) | Account |
Elastic Compute Cloud (EC2) | Network access control |
EBS encryption | |
Amazon EMR | Block public access |
AWS Identity and Access Management (IAM) | Multi-region access point |
AWS WAF | Web access control |
Rule group | |
Elastic Compute Cloud (EC2) | Elastic IP |
Network interface | |
AWS Organizations | Management account |
Account | |
AWS Identity and Access Management (IAM) | Identity Center |
Access Analyzer |
Azure
Service | Service Subtype |
Azure SQL (SQL Server) | Instance |
Azure Database for MySQL | Instance |
Azure Database for MariaDB | Instance |
Azure Cosmos DB | Account |
Azure Blob Storage | Account |
Azure Kubernetes Service (AKS) | Managed cluster |
Azure Container Registry | Azure Container Registry |
Azure Virtual Machines | Instance |
Azure Virtual Network | Instance |
Azure App Configuration | Instance |
Azure Bastion | Bastion Host |
Azure Key Vault | Vault |
Azure Network Security Group | Azure Network Security Group |
Azure Database for PostgreSQL Flexible Server | Service |
Microsoft Defender for Cloud | Auto-provisioning settings |
Pricing | |
Security contact | |
Azure Monitor | Activity log alert |
Azure Resource Management | Subscription |
Azure Monitor | Diagnostic settings |
Azure App Service | Web app |
Azure AI Services | Account |
Service | |
Azure Machine Learning | Workspace |
Azure Virtual Network | Public IP address |
Azure Front Door | Azure Front Door |
Azure Web Application Firewall | Policy |
Azure Load Balancer | Load balancing |
Azure Role-Based Access Control | Custom role |
Azure Application Insights | Component |
Azure Network Watcher | Network Watcher |
Azure Virtual Network Gateway | Virtual network gateway |
Azure Application Gateway | Application gateway |
Azure IoT Hub | IoT Hub |
Azure Databricks | Workspace |
Azure Compute | Disk |
SQL Server on Azure VMs | SQL virtual machine |
Azure SQL Managed Instance | Managed instance |
Azure Cache for Redis | Redis Enterprise cluster |
Azure Virtual Machine Scale Sets | VM scale set |
Azure App Service | Function app |
Azure API Management | Instance |
Volcengine
Service | Service Subtype |
Elastic Compute Service (ECS) | Disk |
Snapshot | |
Instance | |
Load Balancer | Classic load balancer instance |
Classic load balancer listener | |
Classic load balancer access control | |
Classic load balancer certificate | |
Network load balancer server group | |
Network load balancer instance | |
Cloud Database for SQL Server | Instance |
Whitelist | |
MongoDB | Instance |
Whitelist | |
Redis | Instance |
Whitelist | |
Container Registry | Standard instance |
Container Service | Cluster |
VPC | Public IP |
Network ACL | |
Security group | |
Content Delivery Network (CDN) | Domain |
Identity and Access Management (IAM) | User |
Anti-DDoS | Instance |
Web Application Firewall (WAF) | Domain |
Object Storage (TOS) | Bucket |
Cloud Database for PostgreSQL | Instance |
Whitelist | |
Security Center | Host |
Agent | |
Cloud Firewall | Internet border asset |
Internet border access control | |
Bastion Host | Instance |
Key Management Service (KMS) | Customer master key (CMK) |
Cloud Database for HBase | Instance |
Whitelist | |
Cloud Identity Center | User |
veDB for MySQL | Instance |
Cloud Database for MySQL | Instance |
Application load balancer | Instance |
Server group | |
NAT Gateway | DNAT rule |
Edge Computing Node | Instance |
Machine Learning Platform | Development machine |
Custom task | |
Volcano Ark | Inference endpoint |
Model tuning task | |
Web Application Firewall (WAF) | Access control |
API Gateway | Service |
Gateway | |
Plugin | |
Upstream | |
Custom domain | |
Route | |
File Storage NAS | File system |
Cloud Enterprise Network (CEN) | Instance |
Network instance | |
Cross-account instance | |
Log Service (TLS) | Project |
Collection configuration | |
Topic | |
VPC | VPN gateway |
Flow log | |
IPsec connection | |
Identity and Access Management (IAM) | Policy |
Identity provider | |
Role | |
Load Balancer | TLS security policy |
VPC | VPC |
Google Cloud
Service | Service Subtype |
Compute Engine | Virtual machine |
Cloud SQL | Instance |
IAM | Service account |
Cloud Storage | Bucket |
BigQuery | Dataset |
Table | |
VPC | Network |
Load Balancing | Backend service |
IAM | Project |
Cloud DNS | Zone |
Key Management | Key ring |
VPC | Firewall |
IAM | Role |
Key Management | Key |
Vertex AI | Dataset |
Model registry | |
Training pipeline | |
Cloud Logging | Log bucket |
Baidu Cloud
Service | Service Subtype |
Baidu Cloud Compute (BCC) | Instance |
Baidu Load Balance (BLB) | Standard instance |
Application-type instance | |
Standard IPv6 instance | |
Application-type IPv6 instance | |
Relational Database Service (RDS) | Instance |
Document Database | Instance |
Redis | Instance |
Virtual Private Cloud (VPC) | NAT gateway |
VPN gateway | |
VPC | |
Identity and Access Management (IAM) | Sub-user |
Baidu Object Storage (BOS) | Bucket |
Elastic IP (EIP) | IPv4 instance |
IPv6 instance | |
Baidu Log Service (BLS) | Log group |
Kafka Service | Cluster |
Baidu Cloud Compute (BCC) | Snapshot |
Cloud disk | |
Elasticsearch | Cluster |
Key Management Service (KMS) | Secret |
Cloud Container Engine (CCE) | Cluster |
Content Delivery Network (CDN) | Domain |
GaiaDB | Cluster |
HBase | Instance |
Qianfan | Dedicated inference service |
e-Surfing Cloud
Service | Service Subtype |
Elastic Cloud Host | Cloud host |
Elastic Load Balance (ELB) | Instance |
Relational Database for MySQL | Instance |
Relational Database for PostgreSQL | Instance |
Document Database | Instance |
Distributed Cache Service for Redis | Instance |
Virtual Private Cloud (VPC) | VPC |
CDN | Domain |
Unified Identity Authentication (CTIAM) | User |
Object Storage (ZOS) | Bucket |
Elastic IP | Elastic IP |
Cloud Log Service | Project |
Distributed Message Service for Kafka | Instance |
Distributed Message Service for RocketMQ | Instance |
Cloud Disk | Instance |
Snapshot | |
Automatic snapshot policy | |
Elastic Cloud Host | Cloud host group |
Unified Identity Authentication (CTIAM) | User group |
Training and Inference Service | Task |
Kingsoft Cloud
Service | Service Subtype |
Identity and Access Management (IAM) | Sub-user |
Kingsoft Cloud Elastic Compute (KEC) | Instance |
Relational Database Service (RDS) | Instance |
MongoDB | Instance |
Redis | Instance |
Elastic IP (EIP) | Elastic IP |
Ucloud
Service | Service Subtype |
UHost | Instance |
UDB MongoDB | Instance |
UDB MySQL | Instance |
UDB PostgreSQL | Instance |
UKafka | Cluster |
UMem Memcache | Instance |
URocketMQ | Instance |
US3 | Bucket |
IAM | User |
UVPC | VPC |
ULB | Application load balancer |
Network load balancer | |
Classic load balancer (formerly ULB) | |
UCDN | Domain |
EIP | Elastic IP |
ULB | Certificate management |