Skip to content

Supported resource types

Aletheia discovers a fixed registry of resource types. A type outside the registry is not scanned, does not appear in the inventory, and is not mapped to code.

Types use the CloudFormation naming convention, so AWS::EC2::Instance here is the same identifier you would see in a CloudFormation template.

Type
AWS::EC2::Instance Virtual machines
AWS::Lambda::Function Serverless functions
AWS::AutoScaling::AutoScalingGroup Auto scaling groups
AWS::ECS::Cluster Container clusters
AWS::ECS::Service Container services
Type
AWS::EC2::VPC Virtual private clouds
AWS::EC2::Subnet Subnets
AWS::EC2::SecurityGroup Security groups
AWS::EC2::RouteTable Route tables
AWS::EC2::InternetGateway Internet gateways
AWS::EC2::NatGateway NAT gateways
AWS::ElasticLoadBalancingV2::LoadBalancer Application and network load balancers
AWS::ElasticLoadBalancingV2::TargetGroup Target groups
AWS::CloudFront::Distribution CDN distributions
AWS::Route53::HostedZone DNS hosted zones
Type
AWS::S3::Bucket Object storage buckets
AWS::EC2::Volume Block storage volumes
AWS::RDS::DBInstance Relational database instances
AWS::RDS::DBCluster Relational database clusters
AWS::DynamoDB::Table Key-value tables
AWS::ElastiCache::CacheCluster Cache clusters
AWS::ECR::Repository Container image repositories
Type
AWS::IAM::Role Roles
AWS::IAM::User Users
AWS::IAM::Policy Customer-managed policies
AWS::KMS::Key Encryption keys
Type
AWS::SNS::Topic Notification topics
AWS::SQS::Queue Message queues
AWS::CloudWatch::Alarm Alarms

A resource of a type not listed above is invisible to Aletheia. It will not appear in the inventory, and — importantly — it will not be reported as unmanaged. Aletheia does not claim a resource is unmanaged when it simply never looked at it.

This also means a Terraform state entry for an unsupported type may surface as managed_missing: state claims a resource that discovery does not know how to find. That is expected, not a fault in your code.