Turbot Guardrails Hub 
Hub
  • Mods
  • Policy Packs
  • Docs
  • Home
ModsPolicy PacksDocsHome
Mods
Azure
  • Azure/Owner
  • Azure/Admin
  • Azure/Operator
  • Azure/Metadata
  • Azure/AI Foundry/admin
  • Azure/AI Foundry/metadata
  • Azure/AKS/admin
  • Azure/AKS/metadata
  • Azure/Alerts Management/admin
  • Azure/Alerts Management/operator
  • Azure/Alerts Management/metadata
  • Azure/API Management/admin
  • Azure/API Management/operator
  • Azure/API Management/metadata
  • Azure/Application Gateway/admin
  • Azure/Application Gateway/operator
  • Azure/Application Gateway/readonly
  • Azure/Application Gateway/metadata
  • Azure/Application Insights/admin
  • Azure/Application Insights/metadata
  • Azure/App Service/admin
  • Azure/App Service/metadata
  • Azure/Automation/admin
  • Azure/Automation/operator
  • Azure/Automation/metadata
  • Azure/Bot Service/Admin
  • Azure/Bot Service/Operator
  • Azure/Bot Service/Metadata
  • Azure/Cognitive Services/admin
  • Azure/Cognitive Services/operator
  • Azure/Cognitive Services/metadata
  • Azure/Compute/admin
  • Azure/Compute/operator
  • Azure/Compute/metadata
  • Azure/Container Registry/admin
  • Azure/Container Registry/metadata
  • Azure/Cosmos DB/admin
  • Azure/Cosmos DB/operator
  • Azure/Cosmos DB/metadata
  • Azure/Databricks/admin
  • Azure/Databricks/metadata
  • Azure/Data Factory/admin
  • Azure/Data Factory/metadata
  • Azure/DNS/admin
  • Azure/DNS/metadata
  • Azure/Firewall/admin
  • Azure/Firewall/metadata
  • Azure/Front Door/admin
  • Azure/Front Door/operator
  • Azure/Front Door/metadata
  • Azure/IAM/Owner
  • Azure/IAM/Metadata
  • Azure/Key Vault/admin
  • Azure/Key Vault/operator
  • Azure/Key Vault/metadata
  • Azure/Load Balancer/admin
  • Azure/Load Balancer/metadata
  • Azure/Log Analytics/admin
  • Azure/Log Analytics/metadata
  • Azure/Managed Identity/admin
  • Azure/Managed Identity/metadata
  • Azure/Monitor/Admin
  • Azure/Monitor/Operator
  • Azure/Monitor/Metadata
  • Azure/MySQL/admin
  • Azure/MySQL/metadata
  • Azure/Network/Admin
  • Azure/Network/Operator
  • Azure/Network/ReadOnly
  • Azure/Network/Metadata
  • Azure/Network Watcher/admin
  • Azure/Network Watcher/operator
  • Azure/Network Watcher/readonly
  • Azure/Network Watcher/metadata
  • Azure/PostgreSQL/admin
  • Azure/PostgreSQL/operator
  • Azure/PostgreSQL/metadata
  • Azure/Recovery Service/admin
  • Azure/Recovery Service/operator
  • Azure/Recovery Service/metadata
  • Azure/Redis/Admin
  • Azure/Redis/Operator
  • Azure/Redis/Metadata
  • Azure/Relay/Admin
  • Azure/Relay/ReadOnly
  • Azure/Relay/Metadata
  • Azure/Search Management/admin
  • Azure/Search Management/metadata
  • Azure/Security Center/admin
  • Azure/Security Center/operator
  • Azure/Security Center/metadata
  • Azure/Service Bus/admin
  • Azure/Service Bus/operator
  • Azure/Service Bus/metadata
  • Azure/SignalR Service/Admin
  • Azure/SignalR Service/Operator
  • Azure/SignalR Service/Metadata
  • Azure/SQL/admin
  • Azure/SQL/operator
  • Azure/SQL/readonly
  • Azure/SQL/metadata
  • Azure/SQL Virtual Machine Service/admin
  • Azure/SQL Virtual Machine Service/operator
  • Azure/SQL Virtual Machine Service/metadata
  • Azure/Storage/Admin
  • Azure/Storage/Operator
  • Azure/Storage/Metadata
  • Azure/Synapse Analytics/admin
  • Azure/Synapse Analytics/operator
  • Azure/Synapse Analytics/metadata

IAM Role: Azure/Application Insights/metadata

PermissionGrant
microsoft.insights/alertrules/incidents/readmetadata
microsoft.insights/alertrules/readmetadata
microsoft.insights/autoscalesettings/providers/microsoft.insights/diagnosticsettings/readmetadata
microsoft.insights/autoscalesettings/providers/microsoft.insights/logdefinitions/readmetadata
microsoft.insights/autoscalesettings/providers/microsoft.insights/metricdefinitions/readmetadata
microsoft.insights/autoscalesettings/readmetadata
microsoft.insights/baseline/readmetadata
microsoft.insights/calculatebaseline/readmetadata
microsoft.insights/components/analyticsitems/readmetadata
microsoft.insights/components/analyticstables/readmetadata
microsoft.insights/components/annotations/readmetadata
microsoft.insights/components/api/readmetadata
microsoft.insights/components/apikeys/readmetadata
microsoft.insights/components/billingplanforcomponent/readmetadata
microsoft.insights/components/currentbillingfeatures/readmetadata
microsoft.insights/components/defaultworkitemconfig/readmetadata
microsoft.insights/components/events/readmetadata
microsoft.insights/components/exportconfiguration/readmetadata
microsoft.insights/components/extendqueries/readmetadata
microsoft.insights/components/favorites/readmetadata
microsoft.insights/components/featurecapabilities/readmetadata
microsoft.insights/components/getavailablebillingfeatures/readmetadata
microsoft.insights/components/gettoken/readmetadata
microsoft.insights/components/metricdefinitions/readmetadata
microsoft.insights/components/metrics/readmetadata
microsoft.insights/components/myanalyticsitems/readmetadata
microsoft.insights/components/myfavorites/readmetadata
microsoft.insights/components/operations/readmetadata
microsoft.insights/components/pricingplans/readmetadata
microsoft.insights/components/proactivedetectionconfigs/readmetadata
microsoft.insights/components/providers/microsoft.insights/metricdefinitions/readmetadata
microsoft.insights/components/query/readmetadata
microsoft.insights/components/quotastatus/readmetadata
microsoft.insights/components/readmetadata
microsoft.insights/components/syntheticmonitorlocations/readmetadata
microsoft.insights/components/webtests/readmetadata
microsoft.insights/components/workitemconfigs/readmetadata
microsoft.insights/diagnosticsettings/readmetadata
microsoft.insights/eventcategories/readmetadata
microsoft.insights/eventtypes/digestevents/readmetadata
microsoft.insights/eventtypes/values/readmetadata
microsoft.insights/extendeddiagnosticsettings/readmetadata
microsoft.insights/listmigrationdate/readmetadata
microsoft.insights/logdefinitions/readmetadata
microsoft.insights/logs/adassessmentrecommendation/readmetadata
microsoft.insights/logs/adreplicationresult/readmetadata
microsoft.insights/logs/adsecurityassessmentrecommendation/readmetadata
microsoft.insights/logs/alert/readmetadata
microsoft.insights/logs/alerthistory/readmetadata
microsoft.insights/logs/applicationinsights/readmetadata
microsoft.insights/logs/azureactivity/readmetadata
microsoft.insights/logs/azuremetrics/readmetadata
microsoft.insights/logs/boundport/readmetadata
microsoft.insights/logs/commonsecuritylog/readmetadata
microsoft.insights/logs/computergroup/readmetadata
microsoft.insights/logs/configurationchange/readmetadata
microsoft.insights/logs/configurationdata/readmetadata
microsoft.insights/logs/containerimageinventory/readmetadata
microsoft.insights/logs/containerinventory/readmetadata
microsoft.insights/logs/containerlog/readmetadata
microsoft.insights/logs/containerservicelog/readmetadata
microsoft.insights/logs/deviceappcrash/readmetadata
microsoft.insights/logs/deviceapplaunch/readmetadata
microsoft.insights/logs/devicecalendar/readmetadata
microsoft.insights/logs/devicecleanup/readmetadata
microsoft.insights/logs/deviceconnectsession/readmetadata
microsoft.insights/logs/deviceetw/readmetadata
microsoft.insights/logs/devicehardwarehealth/readmetadata
microsoft.insights/logs/devicehealth/readmetadata
microsoft.insights/logs/deviceheartbeat/readmetadata
microsoft.insights/logs/deviceskypeheartbeat/readmetadata
microsoft.insights/logs/deviceskypesignin/readmetadata
microsoft.insights/logs/devicesleepstate/readmetadata
microsoft.insights/logs/dhappfailure/readmetadata
microsoft.insights/logs/dhappreliability/readmetadata
microsoft.insights/logs/dhdriverreliability/readmetadata
microsoft.insights/logs/dhlogonfailures/readmetadata
microsoft.insights/logs/dhlogonmetrics/readmetadata
microsoft.insights/logs/dhoscrashdata/readmetadata
microsoft.insights/logs/dhosreliability/readmetadata
microsoft.insights/logs/dhwipapplearning/readmetadata
microsoft.insights/logs/dnsevents/readmetadata
microsoft.insights/logs/dnsinventory/readmetadata
microsoft.insights/logs/etwevent/readmetadata
microsoft.insights/logs/event/readmetadata
microsoft.insights/logs/exchangeassessmentrecommendation/readmetadata
microsoft.insights/logs/exchangeonlineassessmentrecommendation/readmetadata
microsoft.insights/logs/heartbeat/readmetadata
microsoft.insights/logs/iisassessmentrecommendation/readmetadata
microsoft.insights/logs/inboundconnection/readmetadata
microsoft.insights/logs/kubenodeinventory/readmetadata
microsoft.insights/logs/kubepodinventory/readmetadata
microsoft.insights/logs/linuxauditlog/readmetadata
microsoft.insights/logs/maapplication/readmetadata
microsoft.insights/logs/maapplicationhealth/readmetadata
microsoft.insights/logs/maapplicationhealthalternativeversions/readmetadata
microsoft.insights/logs/maapplicationhealthissues/readmetadata
microsoft.insights/logs/maapplicationinstance/readmetadata
microsoft.insights/logs/maapplicationinstancereadiness/readmetadata
microsoft.insights/logs/maapplicationreadiness/readmetadata
microsoft.insights/logs/madeploymentplan/readmetadata
microsoft.insights/logs/madevice/readmetadata
microsoft.insights/logs/madevicepnphealth/readmetadata
microsoft.insights/logs/madevicepnphealthalternativeversions/readmetadata
microsoft.insights/logs/madevicepnphealthissues/readmetadata
microsoft.insights/logs/madevicereadiness/readmetadata
microsoft.insights/logs/madriverinstancereadiness/readmetadata
microsoft.insights/logs/madriverreadiness/readmetadata
microsoft.insights/logs/maofficeaddin/readmetadata
microsoft.insights/logs/maofficeaddinhealth/readmetadata
microsoft.insights/logs/maofficeaddinhealthissues/readmetadata
microsoft.insights/logs/maofficeaddininstance/readmetadata
microsoft.insights/logs/maofficeaddininstancereadiness/readmetadata
microsoft.insights/logs/maofficeaddinreadiness/readmetadata
microsoft.insights/logs/maofficeapp/readmetadata
microsoft.insights/logs/maofficeapphealth/readmetadata
microsoft.insights/logs/maofficeappinstance/readmetadata
microsoft.insights/logs/maofficeappreadiness/readmetadata
microsoft.insights/logs/maofficebuildinfo/readmetadata
microsoft.insights/logs/maofficecurrencyassessment/readmetadata
microsoft.insights/logs/maofficecurrencyassessmentdailycounts/readmetadata
microsoft.insights/logs/maofficedeploymentstatus/readmetadata
microsoft.insights/logs/maofficemacrohealth/readmetadata
microsoft.insights/logs/maofficemacrohealthissues/readmetadata
microsoft.insights/logs/maofficemacroissueinstancereadiness/readmetadata
microsoft.insights/logs/maofficemacroissuereadiness/readmetadata
microsoft.insights/logs/maofficemacrosummary/readmetadata
microsoft.insights/logs/maofficesuite/readmetadata
microsoft.insights/logs/maofficesuiteinstance/readmetadata
microsoft.insights/logs/maproposedpilotdevices/readmetadata
microsoft.insights/logs/mawindowsbuildinfo/readmetadata
microsoft.insights/logs/mawindowscurrencyassessment/readmetadata
microsoft.insights/logs/mawindowscurrencyassessmentdailycounts/readmetadata
microsoft.insights/logs/mawindowsdeploymentstatus/readmetadata
microsoft.insights/logs/mawindowssysreqinstancereadiness/readmetadata
microsoft.insights/logs/networkmonitoring/readmetadata
microsoft.insights/logs/officeactivity/readmetadata
microsoft.insights/logs/operation/readmetadata
microsoft.insights/logs/outboundconnection/readmetadata
microsoft.insights/logs/perf/readmetadata
microsoft.insights/logs/protectionstatus/readmetadata
microsoft.insights/logs/readmetadata
microsoft.insights/logs/reservedazurecommonfields/readmetadata
microsoft.insights/logs/reservedcommonfields/readmetadata
microsoft.insights/logs/sccmassessmentrecommendation/readmetadata
microsoft.insights/logs/scomassessmentrecommendation/readmetadata
microsoft.insights/logs/securityalert/readmetadata
microsoft.insights/logs/securitybaseline/readmetadata
microsoft.insights/logs/securitybaselinesummary/readmetadata
microsoft.insights/logs/securitydetection/readmetadata
microsoft.insights/logs/securityevent/readmetadata
microsoft.insights/logs/servicefabricoperationalevent/readmetadata
microsoft.insights/logs/servicefabricreliableactorevent/readmetadata
microsoft.insights/logs/servicefabricreliableserviceevent/readmetadata
microsoft.insights/logs/sfbassessmentrecommendation/readmetadata
microsoft.insights/logs/sfbonlineassessmentrecommendation/readmetadata
microsoft.insights/logs/sharepointonlineassessmentrecommendation/readmetadata
microsoft.insights/logs/spassessmentrecommendation/readmetadata
microsoft.insights/logs/sqlassessmentrecommendation/readmetadata
microsoft.insights/logs/sqlqueryperformance/readmetadata
microsoft.insights/logs/syslog/readmetadata
microsoft.insights/logs/sysmonevent/readmetadata
microsoft.insights/logs/tables.custom/readmetadata
microsoft.insights/logs/uaapp/readmetadata
microsoft.insights/logs/uacomputer/readmetadata
microsoft.insights/logs/uacomputerrank/readmetadata
microsoft.insights/logs/uadriver/readmetadata
microsoft.insights/logs/uadriverproblemcodes/readmetadata
microsoft.insights/logs/uafeedback/readmetadata
microsoft.insights/logs/uahardwaresecurity/readmetadata
microsoft.insights/logs/uaiesitediscovery/readmetadata
microsoft.insights/logs/uaofficeaddin/readmetadata
microsoft.insights/logs/uaproposedactionplan/readmetadata
microsoft.insights/logs/uasysreqissue/readmetadata
microsoft.insights/logs/uaupgradedcomputer/readmetadata
microsoft.insights/logs/update/readmetadata
microsoft.insights/logs/updaterunprogress/readmetadata
microsoft.insights/logs/updatesummary/readmetadata
microsoft.insights/logs/usage/readmetadata
microsoft.insights/logs/w3ciislog/readmetadata
microsoft.insights/logs/waasdeploymentstatus/readmetadata
microsoft.insights/logs/waasinsiderstatus/readmetadata
microsoft.insights/logs/waasupdatestatus/readmetadata
microsoft.insights/logs/wdavstatus/readmetadata
microsoft.insights/logs/wdavthreat/readmetadata
microsoft.insights/logs/windowsclientassessmentrecommendation/readmetadata
microsoft.insights/logs/windowsfirewall/readmetadata
microsoft.insights/logs/windowsserverassessmentrecommendation/readmetadata
microsoft.insights/logs/wiredata/readmetadata
microsoft.insights/logs/wudoaggregatedstatus/readmetadata
microsoft.insights/logs/wudostatus/readmetadata
microsoft.insights/metricalerts/readmetadata
microsoft.insights/metricalerts/status/readmetadata
microsoft.insights/metricbaselines/readmetadata
microsoft.insights/metricdefinitions/microsoft.insights/readmetadata
microsoft.insights/metricdefinitions/providers/microsoft.insights/readmetadata
microsoft.insights/metricdefinitions/readmetadata
microsoft.insights/metricnamespaces/readmetadata
microsoft.insights/metrics/microsoft.insights/readmetadata
microsoft.insights/metrics/providers/metrics/readmetadata
microsoft.insights/metrics/readmetadata
microsoft.insights/operations/readmetadata
microsoft.insights/scheduledqueryrules/readmetadata
microsoft.insights/webtests/gettoken/readmetadata
microsoft.insights/webtests/metricdefinitions/readmetadata
microsoft.insights/webtests/metrics/readmetadata
microsoft.insights/webtests/readmetadata
microsoft.insights/workbooks/readmetadata
Guardrails
Guardrails Hub
  • Hub
  • Docs
  • Blog
  • Changelog
Products
  • GuardrailsGuardrails
  • PipesPipes
  • SteampipeSteampipe
  • PowerpipePowerpipe
  • FlowpipeFlowpipe
  • TailpipeTailpipe
Turbot
  • Home
  • About us
  • We're hiring!
  • Contact us
Community

Our community of practitioners love to discuss cloud governance & security.

Slack logoJoin us on Slack →

System StatusLegalSecurity
Terms of UseSecurityPrivacy
50
Mods
204
Resource Types
3,575
Policies
1,941
Controls
103
Quick Actions
111
IAM