DivvyCloud

Welcome to the DivvyCloud Docs!

DivvyCloud is a Cloud Security Posture Management (CSPM) platform that provides real-time analysis and automated remediation across leading cloud and container technologies.

For questions about documentation reach out to us [email protected]

Take Me to the Docs!    Release Notes

Resources

Overview

In DivvyCloud, all services, utilities, or functions that make up your cloud are managed as Resources. Regardless of the Cloud Service Provider (CSP), e.g. AWS, Azure, GCP, etc., DivvyCloud uses normalized terminology in providing a single unified display of all of your cloud resources. For example, a "Storage Container" in DivvyCloud includes: AWS’ S3 Bucket, GCP’s Cloud Storage, Azure’s Blob Storage Container, or Alibaba’s Object Storage Bucket. Read more about our normalized Resource Terminology.

Resources are fundamental to every element of DivvyCloud's operations. After deploying our platform and connecting your cloud accounts, the Resources page becomes a single location from which to view resources across all of your cloud accounts.

Resources Landing Page

With the correct access and permissions, every resource in your cloud is available in DivvyCloud. This visibility is the key building block for creating meaningful reporting, management, and automation.

Starting with your Resources, DivvyCloud capabilities allow you to build on the data. Using Resources, you can apply Filters to create Insights or Insight Packs, and then take action using Bots.

The image below is a high level overview of the relationship between features. The connection between these features allows you to customize your configuration for a clearer understanding of the impact, security, and compliance of what exists in your cloud environments.

DivvyCloud Features

Before Getting Started

Before getting started with Resources, you will need to have a functioning DivvyCloud installation that includes at least one connected cloud account. If you haven't connected any cloud accounts, there won't be any resources to view.

Take a look at Production Deployments to review details for installation. Otherwise, if you have an installation but haven't connected any cloud accounts, visit the Cloud Account Setup page to review the steps for connecting your cloud account(s).

Viewing & Accessing Resources

The Resource option on the left panel navigation in DivvyCloud expands to display access to:

  • Resources (the section we are reviewing here)
    This page is going to walk through the details around the information available in the main "Resources" section of the DivvyCloud platform (or the first option under the Resource menu).

  • Resource Groups
    Resource Groups offer a way to more efficiently manage resources, enabling users to apply functionality to groups of resources.

  • Tag Explorer
    DivvyCloud's Tag Explorer allows users to create tagging configurations to view breakdowns of tagged (or untagged) resources.

Resources Landing Page

Selecting "Resources" from the main navigation menu displays the main Resources landing page.

DivvyCloud includes 5 categories of resources: Compute, Containers, Storage, Network, and Identity & Management.

  • These categories display at the top of the main Resources landing page.
  • Individual resource types can be selected under their applicable resource category.

Resource Categories

Navigating Resources

Resources under each category are organized alphabetically. You can modify the view of your resources using search, scope, or filters. Navigation tools (from left to right) include:

  • Resource Type Search Click the arrow to expand the full list, otherwise begin typing to narrow the selection with suggestions. This search box supports provider-specific terminology. For example, searching for and selecting 'S3 Bucket' will navigate you to the Storage Container Resource Type.
  • Scopes (the cloud icon to the right of the search box) Displays resources associated with selected clouds or selected resource groups. You can scope clouds using Badges, or searching for specific cloud types. You can scope resource groups by searching for specific names (or portions of names) of the resource group.
  • To reset this list, select X Clear All next to Actions (upper left-hand side of window).
  • To remove specific clouds from the scope, select the X next to the cloud name beside Scopes (upper left-hand side of window).
  • Filters (the filter menu option between Scopes and My Resources) Displays resources scoped by filters. You can search for specific filters by name or partial name. You can also search for filters by category: Tags, Compliance, Security, Policies, Encryption, Networking, Operations, Monitor, or Locate.
  • To reset this list, select X Clear All next to Actions (upper left-hand side of window).
  • My Resources (the person-shaped icon to the right of "Filters") Shows only the resources belonging to you, the current owner. To reset the list of resources, click My Resources again.

All resources matching your scopes and selected filters will be displayed as a list beneath the resource categories. This list will show different resource characteristics, depending on the resource type selected.

For example, characteristics describing a Database Snapshot---a Storage resource type---may include Snapshot type, Size, and State (Availability). Characteristics describing a Storage Container---also a Storage resource type---may include Total Objects, Size, and Logging Bucket.

📘

A Note About Resources & Insights

Resources are also the building blocks of Insights (and automation, e.g. Bots). While this page is intended as a high-level overview of navigating the Resources landing page within the DivvyCloud platform, it's important to note that Scoping (via Cloud Accounts, Badges, and Resource Groups), as well as Filtering, are also accessible through this page, and both of these capabilities are tied to creating Insights.

This page will not cover the specific details on configuring these additional capabilities, but if you are looking for information, refer to the following pages:

Resource Properties

For visibility into each resource, click on the box-with-arrow icon just to the left of the resource name.

Resource Properties

In the newly opened pane, the following additional information about the selected resource is available (each of these is a tab at the top of the window):

  • Properties - All resource attributes that are directly accessible, e.g., name, cloud, account ID.
  • Actions - All actions you can take for this resource directly from the DivvyCloud console, e.g., Delete Resource, Remove Public Permission.
  • Dependencies - Dependencies, if any, associated with the resource. You can click on the box-with-arrow icon for a displayed dependency to view additional information about the linked resource. NOTE: Not all resources/resource types will have dependencies.
  • Activity - Scheduled events (if any) and the cloud history for the resource. NOTE: Cloud history is currently only available for AWS resources.
  • Insight Violations - Specific insights where bots have found violations or noncompliance, if any, for this resource.
  • Tags - Existing tags for this resource with options to edit these as well as add new tags.
  • Additional Items - Depending on the resource, additional information will display, e.g., Permissions for Storage Container resources.

🚧

Other Important Properties

Under Storage --> Container Images the resource properties contains a "Vulnerabilities" tab

Under Compute --> Instances the resource properties contains "Threat Findings" tab.

We wanted to call attention to these additional resource properties, as they are particularly useful when working on configuration around security and compliance for these specific resources.

Additional Resource Details

Some helpful additional Resource details are provided below. This is not an exhaustive list of browsing, filtering, or automation capabilities, but simply a high-level overview to help build your familiarity with what details are available in this section of the DivvyCloud platform.

Direct Linking for Resources

As part of your Resource, under Properties, DivvyCloud includes capabilities to build dynamic links that connect to many resources within the Amazon Web Services (AWS) and Google Cloud Platform (GCP) consoles.

Resource Direct Link

To display direct link information for any supported resource, select the resource type from your target category, and click on the ‘Open Resource Properties’ dialog (next to the checkbox for individual resources).

  • The last line of the resource properties panel, ‘Direct Link’, will show the link associated with the applicable resource.

🚧

Important Details on Direct Linking

Direct Link Permissions
AWS Required permissions (already in the AWS policy): iam:ListAccountAliases
GCP For GCP resources, "view" permissions will be required to properly display and access any direct links.

Supported Resources
Direct link capabilities are currently available for AWS and GCP. Direct links are not applicable to all resources - we are working to expand coverage with each release. For resources that are not supported, links may be improperly formatted or redirect to general console locations rather than resource-specific locations.

Smartlink with Jinja2
You can also use direct link with Jinja2 to create notifications in Slack that link to the resource. The Jinja2 call is {{resource.get_provider_link()}}.

Additional Resource Navigation

Six navigation functions are available for viewing individual resources within your selected resource type.

Additional Navigation Options

These navigation functions include:

  • Include Tags - Allows you to specify up to 5 tags to include in the listing; then displays the values of those tags for each of the listed resources. Learn more about tagging in our page on Tag Explorer.
  • Create a new resource - Opens the Provisioning screen, from which a new resource can be created. Admin permissions are required.
  • Refresh Resources in Table - Refreshes the current resources table.
  • Download CSV - Downloads the resource data from the current view as a CSV file. Note: All resource attributes are downloaded, not just ones toggled 'on' for display in the on-screen table. (See also Toggle Column Visibility.)
  • Toggle Column Visibility - Allows you to select the resource attributes to display as columns in the table. The drop-down list shows only attributes relevant to this resource.
  • Deselect Resource Type - This clears the table and returns you to the Resources main page.

Managing Resources

To manage a resource, select the checkbox next to the desired resource. The navigation buttons will be replaced by action buttons, which allow you to take actions based on the resource type.

Actions to Manage Resources

Example actions for a resource include:

📘

Action Buttons are Contextual

Action buttons vary by resource type and change dynamically based on the resource selected.

  • Add to a resource group - Adds the selected resources to a resource group.
  • Assign Owner - Opens the Associate Resource Owner dialog window with a drop-down list of names from which you can select and assign an owner.
  • Permanently delete selected resources - Deletes selected resources after confirmation.
  • Start selected resources - Starts the selected resource. (Note: This action only applies to Compute resources.)
  • Stop selected resources - Stops the selected resource. (Note: This action only applies to Compute resources.)
  • Reboot - Restarts the selected resource (Note: This action only applies to Instances).

What's Next?

After familiarizing yourself with Resources, and viewing the information available here, we recommend learning more about:

  • Resource Groups - Collections of resources that can be used to apply granular permissions to a subset of a cloud footprint, to improve visibility or to apply custom policy.
  • Filters - In DivvyCloud, filters specify conditions to identifying matching resources. An example filter: ‘Resource is not encrypted’. Filters are used in Insights and Bots to assist with scoping, reporting, and actions.
  • Insights - An Insight describes a specific behavior, condition, or characteristic of a cloud resource. Insights are the checks—built on a combination of one or more filters and scopes—that are run on your infrastructure. They can be used to report on resources, or to instruct Bots as to which resources require actions.

Updated 2 months ago


Resources


Suggested Edits are limited on API Reference Pages

You can only suggest edits to Markdown body content, but not to the API spec.