Home > Supported Replication Data Types (Private Preview)
Download this articleSupported Replication Data Types (Private Preview)
Microsoft Azure
Application gateway
| Classification | Properties | Supported |
|---|---|---|
| Access control(IAM) | Access control(IAM) | No |
| Tag | Tag | Yes |
| Configuration | Tier – Standard V2/Basic/WAF V2 | Yes |
| Configuration | Capacity type- Autoscale | Yes |
| Configuration | Capacity type- Manual | Yes |
| Configuration | Minimum instance count | Yes |
| Configuration | Maximum instance count | Yes |
| Configuration | HTTP/2-disbaled | Yes |
| Configuration | HTTP/2-enabled | Yes |
| Configuration | FIPS (Federal Information Processing Standard) mode 140-2(disabled) | Yes |
| Configuration | FIPS (Federal Information Processing Standard) mode 140-2(enabled) | No |
| Web application firewall | WAF Policy(need WAF V2 tier) | Yes |
| Backend pools | check add a pool | Yes |
| Backend settings | check add a setting | Yes |
| Frontend IP configurations | Public type | Yes |
| Frontend IP configurations | Private type | Yes |
| Private link | check add a configuration | Yes |
| JWT validation configurations (Preview) | check add a profile | Yes |
| Listeners | add Listeners | Yes |
| Listeners | add Listener TLS certificates | No |
| Rule | add a routing rule | Yes |
| Rewrites | add a rewrites | Yes |
| Health probes | check add a profile | Yes |
| Lock | No |
Azure Kubernetes service
| Property Category | Properties | Value | Supported |
|---|---|---|---|
| Basic | Subscription | Yes | |
| Basic | Resource group | Yes | |
| Basic | Power state | Running | Yes |
| Basic | Power state | Stopped | No |
| Basic | Cluster preset configuration | Yes | |
| Basic | Kubernetes cluster name | Yes | |
| Basic | Region | Yes | |
| Basic | Fleet Manager | No | |
| Basic | Availability zones | Yes | |
| Basic | AKS pricing tier | Yes | |
| Basic | Enable long-term support | Yes | |
| Basic | Kubernetes version | Yes | |
| Basic | Automatic upgrade | Yes | |
| Basic | Automatic upgrade scheduler | Yes | |
| Basic | Node security channel type | Yes | |
| Basic | Security channel scheduler | Yes | |
| Basic | Authentication and Authorization | Yes | |
| Node pools | Node auto provisioning | Yes | |
| Node pools | Enable virtual nodes | No | |
| Node pools | Encryption type | Yes | |
| Node pools | Node pool name | Yes | |
| Node pools | Mode | Yes | |
| Node pools | OS SKU | Yes | |
| Node pools | Availability zones | Yes | |
| Node pools | Enable Azure Spot instances | Yes | |
| Node pools | Node size | Yes | |
| Node pools | Scale method | Yes | |
| Node pools | Node count | Yes | |
| Node pools | Max pods per node | Yes | |
| Node pools | Enable public IP per node | Yes | |
| Node pools | Labels | Yes | |
| Node pools | Taints | Yes | |
| Networking | Enable private cluster | No | |
| Networking | Set authorized IP ranges | Yes | |
| Networking | Network configuration | Yes | |
| Networking | Bring your own Azure virtual network | Yes | |
| Networking | DNS name prefix | Yes | |
| Networking | Enable Cilium dataplane and network policy | Yes | |
| Networking | Network policy | Yes | |
| Networking | Load balancer | Yes | |
| Integration | Container registry | No | |
| Integration | Service mesh - Istio | Yes | |
| Integration | Azure Policy | No | |
| Monitoring | Enable Container Logs | No | |
| Monitoring | Log Analytics workspace | No | |
| Monitoring | Managed Prometheus | No | |
| Monitoring | Enable Prometheus metrics | No | |
| Monitoring | Azure Monitor workspace | Yes | |
| Monitoring | Enable Grafana | Yes | |
| Monitoring | Grafana workspace | Yes | |
| Monitoring | Enable recommended alert rules | Yes | |
| Monitoring | Alert rules | Yes | |
| Security | Enable OIDC | Yes | |
| Security | Enable Workload Identity | Yes | |
| Security | Enable Image Cleaner | Yes | |
| Security | Enable secret store CSI driver | Yes | |
| Name Space | Name Space | Yes | |
| Storage | Persistent volume claims | Yes | |
| Storage | Persistent volumes | Yes | |
| Storage | Storage classes | Yes | |
| Configuration | Config maps | Yes | |
| Configuration | Secrets | Yes | |
| Advance | Infrastructure resource group | No | |
| Tag | Tag | Yes | |
| Setting | GitOps | No | |
| Setting | Backup | No | |
| Setting | Service Connector | No | |
| Setting | Policy | No | |
| Setting | Application scaling | No | |
| Setting | Extensions + applications | No | |
| Setting | Open Service Mesh | No |
Container registry
| Classification | Properties | Supported |
|---|---|---|
| Tag | Tag | Yes |
| Encryption | Identity | Yes |
| Encryption | Key URL | Yes |
| Encryption | Version | Yes |
| Identity | System assigned | Yes |
| Identity | User assigned | Yes |
| Networking | virtual network | Yes |
| Networking | NAT gateways | Yes |
| Networking | Route tables | Yes |
| Networking | Network security groups | Yes |
| Networking | Application security groups | Yes |
| Networking | Public addresses | Yes |
| Networking | Public IP prefixes | Yes |
| Networking | Private DNS zones | Yes |
| Networking | Private links | Yes |
| Access keys | Admin user Settings | Yes |
| Properties | Admin user Settings | Yes |
| Properties | Pricing plan | Yes |
| Properties | Soft delete | No |
| Properties | Role assignment permissions mode | Yes |
| Services | Geo-replications | Yes |
| Services | Connected registries | Yes |
| Services | Cache | Yes |
| Repository permission | Token | Yes |
| Repository permission | Scope maps | Yes |
| policies | Retention | Yes |
| policies | Content trust | Yes |
MySQL flexible server
| Classification | Properties | Value | Supported |
|---|---|---|---|
| Basic | Subscription | Yes | |
| Basic | Resource group | Yes | |
| Basic | Server name | Yes | |
| Basic | Region | Yes | |
| Basic | Mysql version | Yes | |
| Basic | Compute + storage | Burstable (1-20 vCores) - Best for workloads that don't need the full CPU continuously | No |
| Basic | Compute + storage | General Purpose (2-96 vCores) - Balanced configuration for most common workloads | Yes |
| Basic | Compute + storage | Business Critical (2-96 vCores) - Best for Tier 1 workloads that require optimized performance | Yes |
| Basic | Compute processor | Yes | |
| Basic | Compute size | Yes | |
| Basic | Enable high availability | Yes | |
| Basic | Storage size (GiB) | Yes | |
| Basic | IOPS | Yes | |
| Basic | Accelerated Logs | Yes | |
| Basic | Storage autogrow | Yes | |
| Basic | Backups | Zone redundant | Yes |
| Basic | Backups | Geo-Redundant | Yes |
| Basic | Availability zone | Yes | |
| Basic | Authentication method | Yes | |
| Networking | Public access (allowed IP addresses) and Private endpoint | Yes | |
| Networking | Private access (VNet Integration) | Yes | |
| Networking | Public access | Yes | |
| Networking | Firewall rules | Yes | |
| Networking | Private endpoints | Yes | |
| Security | Service-managed key | Service-managed key | Yes |
| Security | Customer-managed key | Customer-managed key | Yes |
| Security | Microsoft Defender for Cloud | No | |
| Tags | Tags | Yes | |
| Settings | Server parameters | Yes | |
| Settings | Replication | No | |
| Automation | No | ||
| Microsoft Defender for Cloud | No |
PostgreSQL flexible server
| Classification | Properties | Value | Supported |
|---|---|---|---|
| Basic | Same subscription | Yes | |
| Basic | Server name | Yes | |
| Basic | Same region | Yes | |
| Basic | Same resource group | Yes | |
| Basic | PostgreSQL version | Yes | |
| Basic | Cluster options | Server | Yes |
| Basic | Cluster options | Elastic cluster (preview) | No |
| Basic | Compute tier | Burstable (1-20 vCores) - Best for workloads that don't need the full CPU continuously | No |
| Basic | Compute tier | General Purpose (2-96 vCores) - Balanced configuration for most common workloads | Yes |
| Basic | Compute tier | Memory Optimized (2-96 vCores) - Best for workloads that require a high memory to CPU ratio | Yes |
| Basic | Compute processor | Yes | |
| Basic | Compute size | Yes | |
| Basic | Storage type | Yes | |
| Basic | Storage size | Yes | |
| Basic | Performance tier | Yes | |
| Basic | Storage autogrow | Yes | |
| Basic | High availability | Disabled (99.9% SLA) | Yes |
| Basic | High availability | Same zone - a standby server is available within the same zone (99.95% SLA). Provides lower transactional latency than zone-redundant. | Yes |
| Basic | High availability | Zone redundant - a standby server is available in a different zone within the same region. Provides the best availability (99.99% SLA). | Yes |
| Basic | Backups | Zone redundant | Yes |
| Basic | Backups | Geo-Redundant | Yes |
| Basic | Availability zone | Yes | |
| Basic | Authentication method | Yes | |
| Networking | Public access (allowed IP addresses) and Private endpoint | Yes | |
| Networking | Private access (VNet Integration) | Yes | |
| Networking | NAT gateways | Yes | |
| Networking | Route table | Yes | |
| Networking | Public access | Yes | |
| Networking | network security group | Yes | |
| Networking | Application security group | Yes | |
| Networking | Public IP address | Yes | |
| Networking | Public IP prefix | Yes | |
| Networking | Firewall rules | Yes | |
| Networking | Private endpoints | Subscription | Yes |
| Networking | Private endpoints | Resource group | Yes |
| Networking | Private endpoints | Location | Yes |
| Networking | Private endpoints | Name | Yes |
| Networking | Private endpoints | Target sub-resource | Yes |
| Networking | Private endpoints | Virtual network | Yes |
| Networking | Private endpoints | Subnet | Yes |
| Networking | Private endpoints | Integrate with private DNS zone | Yes |
| Networking | Private endpoints | Private DNS Zone | Yes |
| Virtual endpoint | No | ||
| Security | |||
| Service-managed key | |||
| Service-managed key | Yes | ||
| Security | Customer-managed key | Customer-managed key | Yes |
| Security | Microsoft Defender for Cloud | No | |
| Tags | Tags | Yes | |
| Settings | Server parameters | Yes | |
| Settings | Replication | No | |
| Automation | No |
Redis
| Classification | Properties | Supported |
|---|---|---|
| Performance tier | Data tier | Yes |
| Performance tier | Cache size | Yes |
| Performance tier | Performance | Yes |
| Performance tier | Size | Yes |
| Advanced settings | High availability | Yes |
| Advanced settings | Redis version | Yes |
| Advanced settings | Clustering Policy | Yes |
| Advanced settings | Customer-managed key | Yes |
| Active geo-replication | Method | Yes |
| Active geo-replication | Group Name | No |
| Active geo-replication | Linked Database | No |
| Tags | Tags | Yes |
| Networking | Public network access | Yes |
| Networking | Private Endpoint | Yes |
Service Bus
| Classification | Properties | Value | Supported |
|---|---|---|---|
| Access Control(IAM) | Access Control(IAM) | No | |
| Tag | Tag | Yes | |
| Geo-replication | Geo-replication | Yes | |
| Shared access policies | Shared access policies | Yes | |
| Scale | Manual scale | Yes | |
| Scale | Custom autoscale | Yes | |
| Networking | public network acces | Disable | Yes |
| Networking | public network acces | Selected networks | Yes |
| Networking | all networks | Yes | |
| Encryption | Microsoft-managed key | Yes | |
| Encryption | Customer-managed key | Yes | |
| Identity | System assigned Status | On | Yes |
| Identity | System assigned Status | Off | Yes |
| Identity | User assigned | Yes | |
| Configuration | Security | Yes | |
| Locks | Locks | No | |
| Entities | Queues | Yes | |
| Entities | Topic | Yes |
SQL database
| Classification | Properties | Supported |
|---|---|---|
| Basic | Subscription | Yes |
| Basic | Resource group | No |
| Basic | Database name | Yes |
| Basic | Server name | Yes |
| Basic | Location | Yes |
| Basic | SQL Elastic pool | Yes |
| Basic | Pricing tier | Yes |
| Basic | Backup storage redundancy | Yes |
| Basic | Connection string | Yes |
| Basic | Authentication method | Yes |
| Basic | Set Microsoft Entra admin | Yes |
| Network | Firewall rules | Yes |
| Network | Private access | Yes |
| Network | Public access | Yes |
| Network | Connection policy | Yes |
| Network | Encrypted connections | Yes |
| Security | Microsoft defender for SQL | No |
| Security | Ledger | Yes |
| Security | Identity | Yes |
| Security | Transparent data encryption | Yes |
| Security | Auditing | No |
| Additional settings | Database collation | Yes |
| Additional settings | Maintenance window | Yes |
| Tags | Tags | Yes |
| Compute + storage | Service tier | Yes |
| Compute + storage | Compute tier | Yes |
| Compute + storage | DTUs | Yes |
| Compute + storage | Max storage | Yes |
| Backups | Differential backup frequency | Yes |
| Backups | PITR retention | Yes |
| Backups | Retention policy | Yes |
Storage account
| Property Category | Properties | Value | Supported |
|---|---|---|---|
| Data storage | Containers | Yes | |
| Data storage | File shares | No | |
| Data storage | Queues | No | |
| Data storage | Tables | No | |
| Basic | Subscription | Yes | |
| Basic | Resource Group | Yes | |
| Basic | Storage account name | Yes | |
| Basic | Region | Yes | |
| Basic | Primary Service | Yes | |
| Basic | Performance | Standard | Yes |
| Basic | Performance | Premium | Yes |
| Basic | Premium account type | Block blobs | Yes |
| Basic | Premium account type | File shares | No |
| Basic | Premium account type | Page Blobs | No |
| Basic | Redundancy | Yes | |
| Networking | Public access | Yes | |
| Networking | Virtual networks | Yes | |
| Networking | Private endpoint | No | |
| Networking | Network routing | Yes | |
| Networking | Custom domain | No | |
| Data protection | Recovery | Azure Backup for blobs | No |
| Data protection | Recovery | Point-in-time restore for containers | Yes |
| Data protection | Recovery | Soft delete for blobs | Yes |
| Data protection | Recovery | Soft delete for containers | Yes |
| Data protection | Recovery | Permanent delete for soft deleted items | Yes |
| Data protection | Tracking | Yes | |
| Data protection | Access control | Yes | |
| Data management | Blob inventory | No | |
| Data management | Lifecycle Management | Yes | |
| Encryption type | Microsoft-managed keys | Yes | |
| Encryption type | Customer-managed keys | User-assigned | Yes |
| Encryption type | Customer-managed keys | System-assigned | No |
| Encryption | Enable support for customer-managed keys | Yes | |
| Encryption | Infrastructure encryption | Yes | |
| Tags | Tags | Yes | |
| Settings | Configuration | Yes | |
| Settings | Resource Sharing | Blob service | Yes |
| Settings | Resource Sharing | File service | No |
| Settings | Resource Sharing | Queue service | No |
| Settings | Resource Sharing | Table service | No |
Virtual machine
| Property Category | Properties | Value | Supported |
|---|---|---|---|
| Basic | Subscription | Yes | |
| Basic | Virtual machine name | Yes | |
| Basic | Region | Yes | |
| Basic | Availability zone | Yes | |
| Basic | Zone options | Self-selected zone | Yes |
| Basic | Availability set | Yes | |
| Basic | Security type | Standard | Yes |
| Basic | Security type | Trusted launch virtual machines | Yes |
| Basic | Image | Yes | |
| Basic | VM architecture | Yes | |
| Basic | Run with Azure Spot discount | Yes | |
| Basic | Eviction type | Yes | |
| Basic | Eviction policy | Yes | |
| Basic | Maximum price you want to pay per hour | Yes | |
| Basic | Size | Yes | |
| Basic | Enable Hibernation | Yes | |
| Basic | Authentication type | Yes | |
| Basic | Administrator account | Yes | |
| Basic | Inbound port rules | Yes | |
| Basic | Licensing | Yes | |
| Disk | Encryption at host | Yes | |
| Disk | OS disk size | Yes | |
| Disk | OS disk type | Yes | |
| Disk | Delete with VM | Yes | |
| Disk | Key management | Platform-managed key | Yes |
| Disk | Key management | Custom-managed key | Yes |
| Disk | Key management | Platform-managed and custom managed | Yes |
| Disk | Enable Ultra Disk compatibility | Yes | |
| Disk | Data disks | Yes | |
| Disk | Use managed disks | Yes | |
| Disk | Ephemeral OS disk | OS cache placement | Yes |
| Disk | Ephemeral OS disk | Temp disk placement | Yes |
| Networking | Virtual network | Yes | |
| Networking | Public IP | Yes | |
| Networking | Private IP address | Yes | |
| Networking | NIC network security group | Yes | |
| Networking | Inbound port rules | Yes | |
| Networking | Outbound port rules | Yes | |
| Networking | Delete public IP and NIC when VM is deleted | Yes | |
| Networking | Accelerated networking | Yes | |
| Networking | Azure load balancer | Yes | |
| Networking | Application security group | Yes | |
| Management | Identity | Yes | |
| Management | Microsoft Entra ID | Yes | |
| Monitoring | Boot diagnostics | Enable with managed storage account | Yes |
| Monitoring | Boot diagnostics | Enable with custom storage account | Yes |
| Advanced | Custom data | Yes | |
| Advanced | User data | Yes | |
| Security | Security type | Yes | |
| Security | Enable secure boot | Yes | |
| Security | Enable vTPM | Yes | |
| Tags | Yes |
Virtual machine scale set
| Property Category | Properties | Value | Supported |
|---|---|---|---|
| Basic | Subscription | Yes | |
| Basic | VMSS name | Yes | |
| Basic | Region | Yes | |
| Basic | Availability zone | Yes | |
| Basic | Orchestration mode | Yes | |
| Basic | Security type | Yes | |
| Basic | Scaling mode | Yes | |
| Basic | Instance count | Yes | |
| Basic | Scaling configuration_Scaling conditions | Yes | |
| Basic | Scaling configuration_Predictive autoscaling | Yes | |
| Basic | Scaling configuration_Scale-In policy | Yes | |
| Basic | Scaling configuration_Apply force delete to scale-in operations | Yes | |
| Basic | Image | Yes | |
| Basic | VM architecture | Yes | |
| Basic | Size | Yes | |
| Basic | Hibernation | Yes | |
| Basic | Authentication type | Yes | |
| Basic | Licensing | Yes | |
| Spot | Turn off Spot | Yes | |
| Spot | Turn on Spot | Yes | |
| Spot | Eviction type | Yes | |
| Spot | Maximum price you want to pay per hour | Yes | |
| Spot | Eviction policy | Yes | |
| Spot | Try to restore instances | Yes | |
| Spot | Restore timeout | Yes | |
| Spot | Scale with VMs and Spot VMs | Yes | |
| Spot | Base VM (uninterruptible) count | Yes | |
| Spot | Instance distribution | Yes | |
| Disks | Encryption at host | Yes | |
| Disks | OS disk size | Yes | |
| Disks | OS disk type | Yes | |
| Disks | Key management | Yes | |
| Disks | Ultra Disk compatibility | Yes | |
| Disks | Data disks_Key management | Yes | |
| Disks | Use managed disks | Enable | Yes |
| Disks | Ephemeral OS disk | None | Yes |
| Disks | Ephemeral OS disk | Ephemeral OS disk_OS cache placement | Yes |
| Disks | Ephemeral OS disk | Ephemeral OS disk_Temp disk placement | Yes |
| Networking | Virtual network | Yes | |
| Networking | Subnet | Yes | |
| Networking | Network interface | Yes | |
| Networking | Application security group | Yes | |
| Networking | Load balancing | None | Yes |
| Networking | Load balancing | Azure load balancer | Yes |
| Management | Upgrade mode | Yes | |
| Management | Boot diagnostics_Enable with managed storage account (recommended) | Yes | |
| Management | Boot diagnostics_Enable with custom storage account | Yes | |
| Management | Boot diagnostics_Disable | Yes | |
| Management | Notifications for instance termination | Yes | |
| Management | Notifications for OS image upgrades or re-image | Yes | |
| Management | System assigned managed identity | Yes | |
| Management | Login with Microsoft Entra ID | Yes | |
| Management | User assigned identity | Yes | |
| Management | Overprovisioning | Yes | |
| Management | Automatic OS upgrades | Yes | |
| Management | Enable hotpatch | Yes | |
| Management | Patch orchestration options | Yes | |
| Health | Automatic instance repairs | Yes | |
| Health | Repair actions | Yes | |
| Health | Grace period (min) | Yes | |
| Advanced | Scaling beyond 100 instances | Yes | |
| Advanced | Force strictly even balance across zones | Yes | |
| Advanced | Spreading algorithm_Max spreading | Yes | |
| Advanced | User data | Yes | |
| Tags | Tag Name + Tag value | Yes | |
| VMSS_overview | Operating system | Yes | |
| VMSS_overview | Primary NIC public IP address | Yes | |
| VMSS_overview | Fault domain count | Yes | |
| VMSS_overview | Base VM count | Yes | |
| VMSS_overview | Single placement group | FALSE | Yes |
| VMSS_overview | Power state | Yes | |
| VMSS_overview | Public IP address | Yes | |
| VMSS_overview | Source image details | Yes | |
| VMSS_Instance | Name | Yes | |
| VMSS_Instance | Computer name | Yes | |
| VMSS_Instance | Status | Yes | |
| VMSS_Instance | Type | Yes | |
| VMSS_Instance | Provisioning state | Yes | |
| VMSS_Instance | Size | Yes | |
| VMSS_Networking | Network security group | Yes | |
| VMSS_Networking | Accelerated networking | Yes | |
| VMSS_Networking | Inbound port rules | Yes | |
| VMSS_Networking | Outbound port rules | Yes | |
| VMSS_security type | Secure boot | Yes | |
| VMSS_security type | vTPM | Yes | |
| VMSS_security type | Integrity monitoring | Yes |
Web app
| Property Category | Properties | Value | Supported |
|---|---|---|---|
| Web App type | Web APP | Yes | |
| Web App type | Static Web App | No | |
| Web App type | Web App + Database | No | |
| Web App type | WordPress on App Service | No | |
| Basic | Subscription | Yes | |
| Basic | Resource group | No | |
| Basic | Name | Yes | |
| Basic | Publish | Code | No |
| Basic | Publish | Container | Yes |
| Basic | Region | Yes | |
| Database | Create a Database | Yes | |
| Database | Disable creating a database | Yes | |
| Tag | Tag | Yes | |
| Events | Events | No | |
| Deployment | Deployment slots | No | |
| Deployment Center | Source | Container Registry | Yes |
| Deployment Center | Source | GitHub Action | No |
| Deployment Center | Source | Azure Pipelines | No |
| Networking | Virtual Network | Yes | |
| Networking | Public access | Yes | |
| Networking | NAT gateways | Yes | |
| Networking | Network security groups | Yes | |
| Networking | Private dns zones | Yes | |
| Networking | Private Link | Yes | |
| Networking | Private Endpoints | Yes | |
| Networking | Azure Front Door | No | |
| Networking | Hybrid connections | No | |
| Networking | Inbound addresses | Yes | |
| Networking | Outbound subnet | Yes | |
| Configuration | SCM Basic Auth Publishing Credentials | Yes | |
| Configuration | FTP Basic Auth Publishing Credentials | Yes | |
| Configuration | FTP state | Yes | |
| Configuration | HTTP version | Yes | |
| Configuration | HTTP 2.0 Proxy_off | off | Yes |
| Configuration | HTTP 2.0 Proxy_off | On | Yes |
| Configuration | HTTP 2.0 Proxy_off | gRPC Only | No |
| Configuration | SSH | On | Yes |
| Configuration | SSH | Off | No |
| Configuration | Always on | Yes | |
| Configuration | Session affinity | Yes | |
| Configuration | Session affinity proxy | Yes | |
| Configuration | HTTPS Only | Yes | |
| Configuration | Minimum Inbound TLS Version | Yes | |
| Configuration | Client certificate mode | Yes | |
| Configuration | Certificate exclusion paths | Yes | |
| Configuration | Mount Storage | No | |
| Settings | Environment variables | Yes | |
| Settings | Identity | Yes | |
| Settings | Authentication | No | |
| Settings | Events | No | |
| Settings | Backup | No | |
| Settings | Custom Domains | No | |
| Settings | Certificates | No | |
| Settings | Web Jobs | No | |
| Settings | Service Connector | No | |
| Settings | Locks | No | |
| Monitor+secure | Application Insights | Disable | Yes |
| Monitor+secure | Application Insights | Enable | No |
| Monitor+secure | Defender for App Service | Disable | Yes |
| Monitor+secure | Defender for App Service | Enable | No |
| Monitor+secure | Health check | Health check | Yes |
| Monitor+secure | Health check | Instance | No |
| Performance | Load Testing | No | |
| App Service plan | Name | Yes | |
| App Service plan | Resource Group | Yes | |
| App Service plan | Location | Yes | |
| App Service plan | Pricing plan | Yes | |
| App Service plan | Instance Count | Yes | |
| App Service plan | App(s)/Slots | No | |
| App Service plan | Operating System | Yes | |
| App Service plan | Zone redundant | Yes | |
| API | API Management | Yes | |
| API | API definition | Yes | |
| API | CORS | Yes | |
| Automation | Tasks | No | |
| Automation | Export template | Yes |
Amazon Web Services
Aurora and RDS database
Aurora MySQL
| Property Category | Properties | Value | Supported |
|---|---|---|---|
| Engine options | Engine version | Yes | |
| Engine options | Enable RDS Extended Support | Yes | |
| Templates | Production | Yes | |
| Templates | Dev/Test | Yes | |
| Settings | DB cluster identifier | Yes | |
| Settings | Master username | Yes | |
| Settings | Credentials management | Managed in AWS Secrets Manager | No |
| Settings | Credentials management | Self managed | Yes |
| Cluster storage configuration | Configuration options | Aurora I/O-Optimized | Yes |
| Cluster storage configuration | Configuration options | Aurora Standard | Yes |
| Instance configuration | DB instance class | Serverless v2 | Yes |
| Instance configuration | DB instance class | Memory optimized classes (includes r classes) | Yes |
| Instance configuration | DB instance class | Burstable classes (includes t classes) | Yes |
| Instance configuration | Capacity range | Minimum capacity (ACUs) | Yes |
| Instance configuration | Capacity range | Maximum capacity (ACUs) | Yes |
| Instance configuration | Pause after inactivity | Yes | |
| Availability & durability | Multi-AZ deployment | Create an Aurora Replica or Reader node in a different AZ (recommended for scaled availability) | Yes |
| Availability & durability | Multi-AZ deployment | Don't create an Aurora Replica | Yes |
| Connectivity | Compute resource | Connect EC2 | No |
| Connectivity | Compute resource | Don't connect EC2 | Yes |
| Connectivity | Virtual private cloud (VPC) | Yes | |
| Connectivity | DB subnet group | Yes | |
| Connectivity | Public access | Yes | Yes |
| Connectivity | Public access | No | Yes |
| Connectivity | VPC security group (firewall) | Yes | |
| Connectivity | RDS Proxy | No | |
| Connectivity | Certificate authority - optional | Yes | |
| Connectivity | RDS Data API | Yes | |
| Connectivity | Database port | Yes | |
| Read replica write forwarding | Turn on local write forwarding | Yes | |
| Tags | Yes | ||
| Database authentication | IAM database authentication | Yes | |
| Database authentication | Kerberos authentication | No | |
| Monitoring | Database Insights | Advanced | Yes |
| Monitoring | Database Insights | Standard | Yes |
| Monitoring | Performance Insights | Enable | Yes |
| Monitoring | Performance Insights | Disable | Yes |
| Monitoring | Retention period | Yes | |
| Monitoring | AWS KMS key | Custom | Yes |
| Monitoring | AWS KMS key | Default | Yes |
| Monitoring | Enhanced Monitoring | Enable | Yes |
| Monitoring | Enhanced Monitoring | Disable | Yes |
| Monitoring | OS metrics granularity | Yes | |
| Monitoring | Monitoring role for OS metrics | Yes | |
| Monitoring | Log exports | Audit log | Yes |
| Monitoring | Log exports | Error log | Yes |
| Monitoring | Log exports | General log | Yes |
| Monitoring | Log exports | iam-db-auth-error log | Yes |
| Monitoring | Log exports | instance log | Yes |
| Monitoring | Log exports | Slow query log | Yes |
| Monitoring | IAM role | Yes | |
| Additional configuration_Database options | Initial database name | Yes | |
| Additional configuration_Database options | DB cluster parameter group | Yes | |
| Additional configuration_Database options | DB parameter group | Yes | |
| Additional configuration_Database options | Option group | Yes | |
| Additional configuration_Database options | Failover priority | Yes | |
| Additional configuration_Backup | Backup retention period | Yes | |
| Additional configuration_Backup | Copy tags to snapshots | Yes | |
| Additional configuration_Backup | Enable encryption | Disable | Yes |
| Additional configuration_Backup | Enable encryption | Enable | Yes |
| Additional configuration_Backup | AWS KMS key | Default | Yes |
| Additional configuration_Backup | AWS KMS key | Custom | Yes |
| Additional configuration_Backtrack | Backtrack | Enable | Yes |
| Additional configuration_Backtrack | Backtrack | Disable | Yes |
| Additional configuration_Backtrack | Target Backtrack window | Yes | |
| Additional configuration_Maintenance | Auto minor version upgrade | Enable | Yes |
| Additional configuration_Maintenance | Auto minor version upgrade | Disable | Yes |
| Additional configuration_Maintenance | Maintenance window | Yes | |
| Additional configuration_Maintenance | Deletion protection | Enable | Yes |
| Additional configuration_Maintenance | Deletion protection | Disable | Yes |
| Cluster_Connectivity & security | Endpoints | Yes | |
| Cluster_Connectivity & security | Custom endpoints | Yes | |
| Cluster_Connectivity & security | Manage IAM roles | IAM roles | Yes |
| Cluster_Connectivity & security | Manage IAM roles | Service to connect to this cluster | No |
| Cluster_Connectivity & security | Share DB cluster with other AWS accounts | No | |
| Cluster_Connectivity & security | Proxies | No | |
| Cluster_Monitoring | CloudWatch | No | |
| Cluster_Logs&Events | Auto scaling policies | No | |
| Cluster_Logs&Events | Auto scaling activities | No | |
| Cluster_Configuration | DB cluster role | Yes | |
| Cluster_Configuration | Resource ID | Yes | |
| Cluster_Configuration | Amazon Resource Name (ARN) | Yes | |
| Cluster_Configuration | Capacity type | Yes | |
| Cluster_Configuration | DB cluster ID | Yes | |
| Cluster_Configuration | Limitless Database | No | |
| Cluster_Configuration | Database activity stream | Yes | |
| Cluster_Configuration | KMS key | Default | Yes |
| Cluster_Configuration | KMS key | Custom | Yes |
| Cluster_Zero-ETL integrations | Zero-ETL integrations | No | |
| Cluster_Maintenance&Backups | Maintenance window | Yes | |
| Cluster_Maintenance&Backups | Pending maintenance | Yes | |
| Cluster_Maintenance&Backups | Pending modifications | Yes | |
| Cluster_Maintenance&Backups | Snapshots | No | |
| Cluster_Maintenance&Backups | Exports In Amazon S3 | No | |
| Cluster_Data migrations | Associated data migrations | No | |
| Cluster_Recommendations | Recommendations | No | |
| Instance_Connectivity & security | Endpoint | Yes | |
| Instance_Connectivity & security | Port | Yes | |
| Instance_Connectivity & security | Availability Zone | Yes | |
| Instance_Connectivity & security | VPC | Yes | |
| Instance_Connectivity & security | Subnet group | Yes | |
| Instance_Connectivity & security | Subnets | Yes | |
| Instance_Connectivity & security | Network type | IPV4 | Yes |
| Instance_Connectivity & security | Network type | Dual-stack mode | Yes |
| Instance_Connectivity & security | VPC security groups | Yes | |
| Instance_Connectivity & security | Publicly accessible | Yes | |
| Instance_Connectivity & security | Certificate authority | Yes | |
| Instance_Connectivity & security | Certificate authority date | No | |
| Instance_Connectivity & security | DB instance certificate expiration date | No | |
| Instance_Connectivity & security | Security group rules | Yes | |
| Instance_Monitoring | CloudWatch | No | |
| Instance_Logs&Events | CloudWatch alarms | No | |
| Instance_Logs&Events | Logs | No | |
| Instance_Configuration | DB instance ID | Yes | |
| Instance_Configuration | Amazon Resource Name (ARN) | Yes | |
| Instance_Configuration | Resource ID | Yes | |
| Instance_Configuration | Architecture settings | Yes | |
| Instance_Configuration | DevOps Guru | No | |
| Instance_Maintenance&Backups | Maintenance window | Yes | |
| Instance_Maintenance&Backups | Pending maintenance | Yes | |
| Instance_Maintenance&Backups | Pending modifications | Yes | |
| Instance_Tags | Yes | ||
| Instance_Recommendations | No |
Aurora PostgreSQL
| Property Category | Properties | Value | Supported |
|---|---|---|---|
| Special engine | Aurora Limitless Database | No | |
| Engine options | Engine version | Yes | |
| Engine options | Enable RDS Extended Support | Yes | |
| Templates | Production | Yes | |
| Templates | Dev/Test | Yes | |
| Settings | DB cluster identifier | Yes | |
| Settings | Master username | Yes | |
| Settings | Credentials management | Managed in AWS Secrets Manager | No |
| Settings | Credentials management | Self managed-Auto generate password | Yes |
| Settings | Credentials management | Self managed-Master password | Yes |
| Cluster storage configuration | Configuration options | Aurora I/O-Optimized | Yes |
| Cluster storage configuration | Configuration options | Aurora Standard | Yes |
| Instance configuration | DB instance class | Serverless v2 | Yes |
| Instance configuration | DB instance class | Memory optimized classes (includes r classes) | Yes |
| Instance configuration | DB instance class | Burstable classes (includes t classes) | Yes |
| Instance configuration | DB instance class | Optimized Reads classes - new | Yes |
| Instance configuration | Capacity range | Minimum capacity (ACUs) | Yes |
| Instance configuration | Capacity range | Maximum capacity (ACUs) | Yes |
| Instance configuration | Pause after inactivity | Yes | |
| Availability & durability | Multi-AZ deployment | Create an Aurora Replica or Reader node in a different AZ (recommended for scaled availability) | Yes |
| Availability & durability | Multi-AZ deployment | Don't create an Aurora Replica | Yes |
| Connectivity | Compute resource | Connect EC2 | No |
| Connectivity | Compute resource | Don't connect EC2 | Yes |
| Connectivity | Network type | Ipv4 | Yes |
| Connectivity | Network type | Dual | Yes |
| Connectivity | Virtual private cloud (VPC) | Yes | |
| Connectivity | DB subnet group | Yes | |
| Connectivity | Public access | Yes | Yes |
| Connectivity | Public access | No | Yes |
| Connectivity | VPC security group (firewall) | Yes | |
| Connectivity | Route tables | Yes | |
| Connectivity | Internet gateway | Yes | |
| Connectivity | Egress-only internet gateway | Yes | |
| Connectivity | Network Access Control Lists (ACLs) | Yes | |
| Connectivity | DHCP options sets | Yes | |
| Connectivity | Network address translation (NAT) gateways | Yes | |
| Connectivity | Route 53 | Yes | |
| Connectivity | VPC endpoints | Yes | |
| Connectivity | RDS Proxy | No | |
| Connectivity | Certificate authority - optional | Yes | |
| Connectivity | RDS Data API | Yes | |
| Connectivity | Database port | Yes | |
| Read replica write forwarding | Turn on local write forwarding | Yes | |
| Tags | Yes | ||
| Database authentication | IAM database authentication | Yes | |
| Database authentication | Kerberos authentication | No | |
| Monitoring | Database Insights | Advanced | Yes |
| Monitoring | Database Insights | Standard | Yes |
| Monitoring | Performance Insights | Enable | Yes |
| Monitoring | Performance Insights | Disable | Yes |
| Monitoring | Retention period | Yes | |
| Monitoring | AWS KMS key | Custom | Yes |
| Monitoring | AWS KMS key | Default | Yes |
| Monitoring | Enhanced Monitoring | Enable | Yes |
| Monitoring | Enhanced Monitoring | Disable | Yes |
| Monitoring | OS metrics granularity | Yes | |
| Monitoring | Monitoring role for OS metrics | Yes | |
| Monitoring | Log exports | Audit log | Yes |
| Monitoring | Log exports | Error log | Yes |
| Monitoring | Log exports | General log | Yes |
| Monitoring | Log exports | iam-db-auth-error log | Yes |
| Monitoring | Log exports | instance log | Yes |
| Monitoring | Log exports | Slow query log | Yes |
| Monitoring | IAM role | No | |
| Monitoring | Devops Guru | No | |
| Additional configuration_Database options | Initial database name | Yes | |
| Additional configuration_Database options | DB cluster parameter group | Yes | |
| Additional configuration_Database options | DB (instance) parameter group | Yes | |
| Additional configuration_Database options | Option group | Yes | |
| Additional configuration_Database options | Failover priority | Yes | |
| Additional configuration_Backup | Backup retention period | Yes | |
| Additional configuration_Backup | Copy tags to snapshots | Yes | |
| Additional configuration_Backup | Enable encryption | Yes | |
| Additional configuration_Backup | AWS KMS key | Default | Yes |
| Additional configuration_Backup | AWS KMS key | Custom | Yes |
| Additional configuration_Maintenance | Auto minor version upgrade | Yes | |
| Additional configuration_Maintenance | Maintenance window | Yes | |
| Additional configuration_Maintenance | Deletion protection | Yes | |
| Cluster_Connectivity & security | Endpoints | Yes | |
| Cluster_Connectivity & security | Custom endpoints | Yes | |
| Cluster_Connectivity & security | Manage IAM roles | IAM roles | Yes |
| Cluster_Connectivity & security | Manage IAM roles | Service to connect to this cluster | No |
| Cluster_Connectivity & security | Share DB cluster with other AWS accounts | No | |
| Cluster_Connectivity & security | Connected compute resources | No | |
| Cluster_Connectivity & security | Proxies | No | |
| Cluster_Connectivity & security | RDS API | Yes | |
| Cluster_Monitoring | CloudWatch | No | |
| Cluster_Logs&Events | Auto scaling policies | No | |
| Cluster_Logs&Events | Auto scaling activities | No | |
| Cluster_Configuration | DB cluster role | Yes | |
| Cluster_Configuration | Resource ID | No | |
| Cluster_Configuration | Amazon Resource Name (ARN) | Yes | |
| Cluster_Configuration | Babelfish_Database migration mode | Yes | |
| Cluster_Configuration | Babelfish_Default collation locale | Yes | |
| Cluster_Configuration | Babelfish_Collation name | Yes | |
| Cluster_Configuration | Capacity type | Yes | |
| Cluster_Configuration | Encryption_KMS key | Default | Yes |
| Cluster_Configuration | Encryption_KMS key | Custom | Yes |
| Cluster_Configuration | Database activity stream | Yes | |
| Cluster_Configuration | Database activity stream_KMS key | Default | Yes |
| Cluster_Configuration | Database activity stream_KMS key | Custom | Yes |
| Cluster_Zero-ETL integrations | Zero-ETL integrations | No | |
| Cluster_Maintenance&Backups | Maintenance window | Yes | |
| Cluster_Maintenance&Backups | Pending maintenance | Yes | |
| Cluster_Maintenance&Backups | Pending modifications | No | |
| Cluster_Maintenance&Backups | Snapshots | No | |
| Cluster_Maintenance&Backups | Exports In Amazon S3 | No | |
| Cluster_Data migrations | Associated data migrations | No | |
| Cluster_Recommendations | Recommendations | No | |
| Instance_Connectivity & security | Endpoint | Yes | |
| Instance_Connectivity & security | Port | Aurora PostgreSQL port | Yes |
| Instance_Connectivity & security | Port | Babelfish TDS port | Yes |
| Instance_Connectivity & security | Availability Zone | Yes | |
| Instance_Connectivity & security | VPC | Yes | |
| Instance_Connectivity & security | Subnet group | Yes | |
| Instance_Connectivity & security | Subnets | Yes | |
| Instance_Connectivity & security | Network type | IPV4 | Yes |
| Instance_Connectivity & security | Network type | Dual-stack mode | Yes |
| Instance_Connectivity & security | VPC security groups | Yes | |
| Instance_Connectivity & security | Publicly accessible | Yes | |
| Instance_Connectivity & security | Certificate authority | Yes | |
| Instance_Connectivity & security | Certificate authority date | No | |
| Instance_Connectivity & security | DB instance certificate expiration date | No | |
| Instance_Connectivity & security | Security group rules | Yes | |
| Instance_Monitoring | CloudWatch | No | |
| Instance_Logs&Events | CloudWatch alarms | No | |
| Instance_Logs&Events | Logs | No | |
| Instance_Configuration | DB instance ID | No | |
| Instance_Configuration | Amazon Resource Name (ARN) | Yes | |
| Instance_Configuration | Resource ID | No | |
| Instance_Configuration | Architecture settings | No | |
| Instance_Configuration | DevOps Guru | No | |
| Instance_Maintenance&Backups | Maintenance window | Yes | |
| Instance_Maintenance&Backups | Pending maintenance | Yes | |
| Instance_Maintenance&Backups | Pending modifications | Yes | |
| Instance_Tags | Yes | ||
| Instance_Recommendations | No |
RDS database - PostgreSQL
| Property Category | Properties | Value | Supported |
|---|---|---|---|
| Basic information | Deployment options | Multi-AZ DB cluster deployment (3 instances) | No |
| Basic information | Credentials management | Managed in AWS Secrets Manager - most secure | No |
| Basic information | Compute resource | Connect to an EC2 compute resource | No |
| Basic information | Certificate authority | No | |
| Basic information | RDS Proxy | No | |
| Basic information | Database authentication | Password and Kerberos authentication | No |
| Basic information | Backup | Backup replication | No |
| Basic information | Devops Guru | No |
RDS database - MySQL
| Property Category | Properties | Value | Supported |
|---|---|---|---|
| Basic information | Engine version | Yes | |
| Basic information | Enable RDS Extended Support | Yes | |
| Basic information | Deployment options | Multi-AZ DB instance deployment (2 instances) | Yes |
| Basic information | Deployment options | Single-AZ DB instance deployment (1 instance) | Yes |
| Basic information | Deployment options | Multi-AZ DB cluster deployment (3 instances) | No |
| Basic information | DB instance identifie | Yes | |
| Basic information | Master username | Yes | |
| Basic information | Credentials management | Managed in AWS Secrets Manager - most secure | No |
| Basic information | Credentials management | Self managed | Yes |
| Basic information | DB instance class | Yes | |
| Basic information | Storage | Yes | |
| Basic information | Enable storage autoscaling | Yes | |
| Basic information | Compute resource | Don’t connect to an EC2 compute resource | Yes |
| Basic information | Compute resource | Connect to an EC2 compute resource | No |
| Basic information | VPC | Yes | |
| Basic information | DB subnet group | Yes | |
| Basic information | Public access | Yes | |
| Basic information | VPC security group (firewall) | Yes | |
| Basic information | Certificate authority | No | |
| Basic information | RDS Proxy | No | |
| Basic information | Database port | Yes | |
| Basic information | Tag | Yes | |
| Basic information | Database authentication | Password authentication | Yes |
| Basic information | Database authentication | Password and IAM database authentication | Yes |
| Basic information | Database authentication | Password and Kerberos authentication | No |
| Basic information | Monitoring | Yes | |
| Basic information | Monitoring | KMS key | Yes |
| Basic information | IAM role | Yes | |
| Basic information | Initial database name | Yes | |
| Basic information | DB parameter groups | Old name + suffix | Yes |
| Basic information | Option group | Old name + suffix | Yes |
| Basic information | Backup | Yes | |
| Basic information | Backup | AWS KMS key | Yes |
| Basic information | Backup | Backup replication | No |
| Basic information | Maintenance | Yes | |
| Basic information | Enable deletion protection | Yes | |
| Networking | Network type | IPv4 | Yes |
| Networking | Network type | Dual | Yes |
| Networking | Availability Zone | Yes |
RDS database - SQL Server
| Property Category | Properties | Value | Supported |
|---|---|---|---|
| Database type | Amazon RDS | Yes | |
| Database type | Amazon RDS Custom | No | |
| DHCP options sets | VPC | Yes | |
| DHCP options sets | Subnet group | Yes | |
| DHCP options sets | Network type | Yes | |
| DHCP options sets | VPC security groups | Yes | |
| DHCP options sets | Route tables | Yes | |
| DHCP options sets | internet gateway | Yes | |
| DHCP options sets | Egress-only internet gateway | Yes | |
| DHCP options sets | Network Access Control Lists | Yes | |
| DHCP options sets | DHCP options sets | Yes | |
| DHCP options sets | Network address translation (NAT) gateways | Yes | |
| DHCP options sets | Route 53 | Yes | |
| DHCP options sets | VPC endpoints | Yes | |
| DHCP options sets | Publicly accessible | Yes | |
| DHCP options sets | Certificate authority | No | |
| DHCP options sets | EC2 connection | No | |
| DHCP options sets | Lambda function | No | |
| DHCP options sets | Proxies | No | |
| DHCP options sets | Security group rules | Yes | |
| DHCP options sets | Replication | No | |
| DHCP options sets | IAM roles | Yes | |
| Logs&events | CloudWatch alarms | No | |
| Configuration | DB instance ID | Yes | |
| Configuration | Engine version | Yes | |
| Configuration | DB name | No | |
| Configuration | Collation | No | |
| Configuration | Option groups | Yes | |
| Configuration | DB instance parameter group | Yes | |
| Configuration | Deletion protection | Yes | |
| Configuration | Architecture settings | No | |
| Configuration | Instance class | Yes | |
| Configuration | vCPU | Yes | |
| Configuration | RAM | Yes | |
| Configuration | Credentials management | Managed in AWS Secrets Manager | No |
| Configuration | Credentials management | Self managed | Yes |
| Configuration | Master username | Yes | |
| Configuration | Master password | Yes | |
| Configuration | Microsoft SQL Server Windows Authentication | No | |
| Configuration | Multi-AZ | Yes | |
| Configuration | Avalability zone | Yes | |
| Configuration | Database port | Yes | |
| Configuration | Encryption | Yes | |
| Configuration | Storage_AWS KMS key | custom | Yes |
| Configuration | Storage_AWS KMS key | default | Yes |
| Configuration | Storage type | Yes | |
| Configuration | Storage | Yes | |
| Configuration | Provisioned IOPS | Yes | |
| Configuration | Storage throughput | Yes | |
| Configuration | Storage autoscaling | Yes | |
| Configuration | Maximum storage threshold | Yes | |
| Configuration | Monitoring type | Yes | |
| Configuration | Performance Insights | Yes | |
| Configuration | Retention period | Yes | |
| Configuration | Monitoring _KMS key | custom | Yes |
| Configuration | Monitoring _KMS key | default | Yes |
| Configuration | Enhanced Monitoring | Yes | |
| Configuration | Monitoring role | Yes | |
| Configuration | DevOps Guru | No | |
| Configuration | Granularity | Yes | |
| Configuration | Database activity stream | Yes | |
| Maintainance & backups | Auto minor version upgrade | Yes | |
| Maintainance & backups | Maintenance window | Yes | |
| Maintainance & backups | Pending modifications | No | |
| Maintainance & backups | Automated backups | Yes | |
| Maintainance & backups | Copy tags to snapshots | Yes | |
| Maintainance & backups | Backup window | Yes | |
| Maintainance & backups | Snapshots | No | |
| Tags | Yes |
DynamoDB
| Property Category | Properties | Value | Supported |
|---|---|---|---|
| Table settings | Table name | Yes | |
| Table settings | Partition key | Yes | |
| Table settings | Sort key - optional | Yes | |
| Table settings | Table class | Yes | |
| Table settings | Capacity mode | On-demand | Yes |
| Table settings | Capacity mode | Provisioned | Yes |
| Table settings | Warm throughput | Yes | |
| Table settings | Secondary indexes | Yes | |
| Table settings | Encryption at rest | AWS owned key | Yes |
| Table settings | Encryption at rest | AWS managed key | Yes |
| Table settings | Encryption at rest | Customer managed key | Yes |
| Table settings | Deletion protection | Yes | |
| Table settings | Resource-based policy | Yes | |
| Table settings | Tags | Yes | |
| Table settings | MRSC global table | No | |
| Property after created DB | Point-in-time recovery (PITR) | Yes | |
| Property after created DB | DynamoDB stream | Yes | |
| Property after created DB | Time to Live (TTL | Yes | |
| Property after created DB | DAX | No | |
| Property after created DB | Backups | No | |
| Property after created DB | Trigger | No | |
| Property after created DB | Amazon Kinesis data stream | No | |
| Property after created DB | Exports to S3 | No | |
| Property after created DB | Resource-based policy for active stream | No | |
| Property after created DB | Replicas | No |
EC2 instance
| Property Category | Properties | Value | Supported |
|---|---|---|---|
| Advanced network configuration | Interface type | EFA with ENA | No |
| Advanced network configuration | Interface type | EFA only | No |
| Advanced network configuration | Network card index | No | |
| Advanced network configuration | ENA Express | No | |
| Advanced network configuration | ENA Express UDP | No | |
| Advanced network configuration | ENA queues | No | |
| Configure storage | Volume initialization rate - new, optional | No | |
| Configure storage | File systems | No | |
| Advanced details | Domain join directory | No | |
| Advanced details | Stop - Hibernate behavior | Enable | No |
| Advanced details | Instance bandwidth configuration | Default | No |
| Advanced details | Instance bandwidth configuration | Higher networking bandwidth | No |
| Advanced details | Instance bandwidth configuration | Higher EBS bandwidth | No |
| Advanced details | Purchasing option(Lifecycle) | Spot instances | Yes |
| Advanced details | Maximum price | Yes | |
| Advanced details | Request type | One-time | Yes |
| Advanced details | Request type | Persistent | Yes |
| Advanced details | Valid to | Yes | |
| Advanced details | Request expiry date | Yes | |
| Advanced details | Interruption behavior | Hibernate | Yes |
| Advanced details | Interruption behavior | Stop | Yes |
| Advanced details | Interruption behavior | Terminate | Yes |
| Advanced details | Capacity reservation | Specified value | No |
| Advanced details | RAM disk ID | No | |
| Advanced details | Kernel ID | No | |
| Advanced details | License configurations | No | |
| Instance_Overall | Instance state | Yes | |
| Instance_Overall | AWS Compute Optimizer finding | No | |
| Instance_Overall | Auto Scaling Group name | No | |
| Instance_Overall | Managed | True | No |
| Instance_Overall | Operator | No | |
| Instance_details | Instance reboot migration | Disable | No |
| Instance_details | Host ID | No | |
| Instance_details | Host resource group name | No | |
| Instance_details | Virtualization type | pv | No |
| Instance_details | Affinity | No | |
| Instance_details | Reservation | No | |
| Instance_details | Partition number | No | |
| Instance_details | Capacity Reservation ID | No | |
| Instance_networking | Carrier IP addresses (ephemeral) | No | |
| Instance_networking | Outpost ID | No | |
| Instance_networking | Network interface | ENA Express | No |
| Instance_networking | Network interface | ENA Express UDP | No |
Elastic Beanstalk
| Property Category | Properties | Value | Supported |
|---|---|---|---|
| Configure environment | Environment tier | Yes | |
| Configure environment | Domain | Yes | |
| Configure environment | Application name | Yes | |
| Configure environment | Application tags | Yes | |
| Configure environment | Environment name | Yes | |
| Configure environment | Environment description | Yes | |
| Configure environment | Platform | Docker | Yes |
| Configure environment | Platform branch | Yes | |
| Configure environment | Platform version | Yes | |
| Configure environment | Application code | Yes | |
| Configure environment | Presets | Yes | |
| Service access | Service role | Yes | |
| Service access | EC2 instance profile | Yes | |
| Service access | EC2 key pair | Yes | |
| Modify worker | Worker queue (SQS) | Standard | Yes |
| Modify worker | Worker queue (SQS) | FIFO | No |
| Modify worker | HTTP path | Yes | |
| Modify worker | MIME type | Yes | |
| Modify worker | HTTP connections | Yes | |
| Modify worker | Visibility timeout | Yes | |
| Modify worker | Error visibility timeout | Yes | |
| Modify worker | Max retries | Yes | |
| Modify worker | Connection timeout | Yes | |
| Modify worker | Inactivity timeout | Yes | |
| Modify worker | Retention period | Yes | |
| Networking | VPC | Yes | |
| Networking | Public IP address | Yes | |
| Networking | Instance subnet | Yes | |
| Database | Database | No | |
| Tags | Tags | Yes | |
| Instance traffic and scaling | Root volume type | Yes | |
| Instance traffic and scaling | Amazon CloudWatch monitoring | Yes | |
| Instance traffic and scaling | Instance metadata service | Yes | |
| Instance traffic and scaling | EC2 security group | Yes | |
| Instance traffic and scaling | Environment type | Single instance | Yes |
| Instance traffic and scaling | Environment type | Load balanced | No |
| Instance traffic and scaling | Fleet composition | Yes | |
| Instance traffic and scaling | Architecture | Yes | |
| Instance traffic and scaling | Instance types | Yes | |
| Instance traffic and scaling | AMI ID | Yes | |
| Instance traffic and scaling | Availability Zones | Yes | |
| Instance traffic and scaling | Placement | Yes | |
| Instance traffic and scaling | Scaling triggers | Yes | |
| Instance traffic and scaling | Load balancer types | Yes | |
| Configure updates, monitoring and logging | Health reporting | Yes | |
| Configure updates, monitoring and logging | Health monitoring rule customization | Yes | |
| Configure updates, monitoring and logging | Health event streaming to CloudWatch Logs | Yes | |
| Configure updates, monitoring and logging | Managed platform updates | Yes | |
| Configure updates, monitoring and logging | Email notifications | Yes | |
| Configure updates, monitoring and logging | Rolling updates and deployments | Yes | |
| Configure updates, monitoring and logging | Platform software | Yes |
Elastic Kubernetes Service
| Property Category | Properties | Value | Supported |
|---|---|---|---|
| Configuration options | Quick configuration (with EKS Auto Mode) | Yes | |
| Configuration options | Custom configuration | Yes | |
| Cluster configuration | Name | Yes | |
| Cluster configuration | Kubernetes version | Yes | |
| Cluster configuration | Cluster IAM role | Yes | |
| Cluster configuration | Node IAM role | Yes | |
| Cluster configuration | VPC | Yes | |
| Cluster configuration | Subnets | Yes | |
| Cluster info | Status | Yes | |
| Cluster info | Support period | Yes | |
| Cluster info | Provider | Yes | |
| Cluster info | Cluster health | No | |
| Cluster info | Upgrade insights | No | |
| Cluster info | Node health issues | No | |
| Overview | API server endpoint | No | |
| Overview | Certificate authority | No | |
| Overview | OpenID Connect provider URL | No | |
| Overview | Cluster IAM role ARN | Yes | |
| Overview | Cluster ARN | Yes | |
| Overview | Platform version | Yes | |
| Overview | EKS Auto Mode | Yes | |
| Overview | Node IAM role | Yes | |
| Overview | Upgrade policy | Yes | |
| Overview | ARC Zonal shift | Yes | |
| Overview | Encryption key | AWS owned | Yes |
| Overview | Encryption key | Custom managed | Yes |
| Overview | KMS key ID | Yes | |
| Resource | Workloads | No | |
| Resource | Cluster | Nodes | No |
| Resource | Cluster | Namespaces | Yes |
| Resource | Cluster | APIServices | No |
| Resource | Cluster | Leases | No |
| Resource | Cluster | RuntimeClasses | No |
| Resource | Cluster | FlowSchemas | No |
| Resource | Cluster | PriorityLevelConfigurations | No |
| Resource | Service and networking | No | |
| Resource | Config and secrets | ConfigMaps | Yes |
| Resource | Config and secrets | Secrets | Yes |
| Resource | Storage | PersistentVolumeClaims(PVC) | Yes |
| Resource | Storage | PersistentVolumes(PV) | Yes |
| Resource | Storage | StorageClasses | No |
| Resource | Storage | VolumeAttachment | No |
| Resource | Storage | CSIDrivers | No |
| Resource | Storage | CSINodes | No |
| Resource | Storage | CSIStorageCapacities | No |
| Resource | Authentication | No | |
| Resource | Authorization | No | |
| Resource | Policy | No | |
| Resource | Extensions | No | |
| Compute | Nodes | No | |
| Compute | Built-in node pools | Yes | |
| Compute | Node groups | No | |
| Compute | Fargate profiles | No | |
| Networking | VPC | Yes | |
| Networking | Cluster IP address family & Service IP range | IPv4 | Yes |
| Networking | Cluster IP address family & Service IP range | IPv6 | No |
| Networking | Subnets | Yes | |
| Networking | Cluster security group | Yes | |
| Networking | Additional security groups | Yes | |
| Networking | API server endpoint access | Public and private | Yes |
| Networking | API server endpoint access | Public | Yes |
| Networking | API server endpoint access | Private | No |
| Networking | Remote node networks | No | |
| Networking | Remote pod networks | No | |
| Networking | Public access source allowlist | Yes | |
| Add-ons | Yes | ||
| Access | Authentication mode | EKS API | Yes |
| Access | Authentication mode | EKS API and ConfigMap | No |
| Access | IAM access entries | Standard | Yes |
| Access | IAM access entries | EC2 | No |
| Access | IAM access entries | EC2 Linux | No |
| Access | IAM access entries | EC2 Windows | No |
| Access | IAM access entries | Fargate LinuX | No |
| Access | IAM access entries | Hybrid Linux | No |
| Access | IAM access entries | HyperPod Linux | No |
| Access | Pod Identity associations | Yes | |
| Access | OIDC identity providers | Yes | |
| Observability | Scrapers | No | |
| Observability | CloudWatch | No | |
| Observability | Control plane logs | No | |
| Update history | No | ||
| Tags | Yes | ||
| Deploy | Deploy application | Yes | |
| Configuration options | Custom configuration | Yes | |
| Cluster configuration | Name | Yes | |
| Cluster configuration | Cluster IAM role | Yes | |
| Cluster configuration | Kubernetes version | Yes | |
| Cluster configuration | Upgrade policy | Yes | |
| Cluster configuration | Cluster access | Yes | |
| Cluster configuration | Cluster authentication mode | Yes | |
| Cluster configuration | Envelope encryption | AWS Default | Yes |
| Cluster configuration | Envelope encryption | Use your own AWS KMS key | Yes |
| Cluster configuration | ARC Zonal shift | Yes | |
| Cluster configuration | Tags | Yes | |
| Networking | VPC | Yes | |
| Networking | Subnets | Yes |
S3 bucket
| Classification | Properties | Value | Supported |
|---|---|---|---|
| Object | Object overview | Yes | |
| Object | Object management overview | Yes | |
| Object | Storage class | Standard | Yes |
| Object | Storage class | Intelligent-Tiering | Yes |
| Object | Storage class | Standard-IA | Yes |
| Object | Storage class | One Zone-IA | Yes |
| Object | Storage class | Glacier instant retrieval | Yes |
| Object | Storage class | Glacier flexible retrieval | No |
| Object | Storage class | Glacier deep archive | No |
| Object | Storage class | Reduced redundancy | Yes |
| Object | Server-side encryption settings | Yes | |
| Object | Checksums | Yes | |
| Object | Tags | Yes | |
| Object | Metadata | Yes | |
| Object | Object lock | Yes | |
| Properties | Bucket overview | Yes | |
| Properties | Bucket versioning | Yes | |
| Properties | Tags | Yes | |
| Properties | Default encryption | Yes | |
| Properties | Intelligent-Tiering Archive configurations | No | |
| Properties | Server access logging | No | |
| Properties | Amazon EventBridge | No | |
| Properties | Transfer acceleration | Yes | |
| Properties | Object lock | Yes | |
| Properties | Requester pays | No | |
| Properties | Static website hosting | Yes | |
| Permissions | Permissions overview | Yes | |
| Permissions | Block public access | Yes | |
| Permissions | Bucket policy | Yes | |
| Permissions | Object ownership | Yes | |
| Permissions | Access control list | No | |
| Permissions | Cross-origin resource sharing | Yes | |
| Metrics | Storage class analysis | No | |
| Management | Lifecycle configuration | Yes | |
| Management | Replication rules | Yes | |
| Management | Inventory configurations | No | |
| Access point | Properties | Yes | |
| Access point | Permissions | Yes | |
| Access point | Access point policy | No |
Google Cloud
Cloud Storage
| Classification | Properties | Value | Supported |
|---|---|---|---|
| Object | Size | Yes | |
| Object | Type | Yes | |
| Object | Storage class | Yes | |
| Object | Public access | Yes | |
| Object | Version history | No | |
| Object | Encryption | Yes | |
| Configuration | Hierarchical namespace | No | |
| Configuration | Location type | Region | Yes |
| Configuration | Location type | Dual region | No |
| Configuration | Location type | Multiple region | No |
| Configuration | Default storage class | Yes | |
| Configuration | Requester Pays | No | |
| Configuration | Tags | No | |
| Configuration | Labels | Yes | |
| Configuration | Cloud console URL | Yes | |
| Configuration | gsutil URL | Yes | |
| Permission | Access control | Yes | |
| Permission | Public access prevention | Yes | |
| Permission | Public access status | Yes | |
| Protection | Replication | No | |
| Protection | Soft delete policy | Yes | |
| Protection | Object versioning | Yes | |
| Protection | Bucket retention policy | Yes | |
| Protection | Object retention | Yes | |
| Protection | Encryption type | Yes | |
| Protection | Lifecycle rules | Yes |
Kubernetes engine
| Property Category | Properties | Supported |
|---|---|---|
| Cluster basic | Name | Yes |
| Cluster basic | Tier | Yes |
| Cluster basic | Mode | Yes |
| Cluster basic | Location type | Yes |
| Cluster basic | Region | Yes |
| Cluster basic | Default node zone | Yes |
| Cluster basic | Release channel | Yes |
| Cluster basic | Version | Yes |
| Cluster basic | Current COS version | Yes |
| Cluster basic | End of standard support | Yes |
| Cluster basic | End of extended support | Yes |
| Cluster basic | Rollout sequence | Yes |
| Upgrades | Auto-upgrade status | No |
| Upgrades | Minor version auto-upgrade target | Yes |
| Upgrades | Patch version auto-upgrade target | Yes |
| Upgrades | Upgrade history | No |
| Automation | Maintenance window | Yes |
| Automation | Maintenance exclusions | Yes |
| Automation | Notification | Yes |
| Automation | Vertical pod autoscaling | Yes |
| Automation | Node auto-provisioning | Yes |
| Automation | Auto-provisioning network tags | Yes |
| Automation | Autoscaling profile | Yes |
| Control plane networking | DNS endpoint | Yes |
| Control plane networking | Control plane access using IPv4 addresses | Yes |
| Control plane networking | Public endpoint | Yes |
| Control plane networking | Private endpoint | Yes |
| Control plane networking | Access using control plane's internal IP address from any region | Yes |
| Control plane networking | Authorized networks | Yes |
| Control plane networking | Enforce authorized networks on control plane's internal endpoint | Yes |
| Control plane networking | Add Google Cloud external IP addresses to authorized networks | Yes |
| Cluster networking | Network | Yes |
| Cluster networking | Subnet | Yes |
| Cluster networking | Stack type | Yes |
| Cluster networking | Private control plane's endpoint subnet | Yes |
| Cluster networking | VPC-native traffic routing | Yes |
| Cluster networking | Cluster Pod IPv4 range (default) | Yes |
| Cluster networking | Cluster Pod IPv4 ranges (additional) | No |
| Cluster networking | IPv4 service range | Yes |
| Cluster networking | Intranode visibility | Yes |
| Cluster networking | HTTP Load balancing | Yes |
| Cluster networking | Subsetting for L4 Internal load balancers | Yes |
| Cluster networking | Calico autopilot network policy | Yes |
| Cluster networking | Dataplane V2 | Yes |
| Cluster networking | Dataplane V2 metrics | Yes |
| Cluster networking | Dataplane V2 observability | Yes |
| Cluster networking | DNS provider | Yes |
| Cluster networking | NodeLocal DNScache | Yes |
| Cluster networking | Gateway API | Yes |
| Cluster networking | Multi-networking | Yes |
| Cluster networking | Inter-Node transparent encryption | Yes |
| Cluster networking | FQDN Network policy | Yes |
| Cluster networking | VPC firewall rule auto-creation for LoadBalancer services | No |
| Default New Node-Pool Configuration | Private Node | Yes |
| Security | Binary authorization | No |
| Security | Secret manager | Yes |
| Security | Shielded GKE nodes | Yes |
| Security | Confidential GKE Nodes | Yes |
| Security | Service account | Yes |
| Security | Cloud API access scope | Yes |
| Security | Application-layer secret encryption | Yes |
| Security | Boot disk encryption | Yes |
| Security | Workload identity | Yes |
| Security | Workload identity namespace | Yes |
| Security | Google groups for RBAC | No |
| Security | Legacy authorization | Yes |
| Security | Basic authentication | No |
| Security | Client certificate | Yes |
| Security | Security postture | Yes |
| Security | Workload vulnerability scanning | Yes |
| Metadata | Description | Yes |
| Metadata | Labels | Yes |
| Metadata | Tags | No |
| Metadata | Tags firewall | No |
| Features | Ray operator | Yes |
| Features | Logging | Yes |
| Features | Cloud monitoring | Yes |
| Features | Managed service for Prometheus | Yes |
| Features | Automatic application monitoring | No |
| Features | Kubernetes alpha features | Yes |
| Features | Cost allocation | Yes |
| Features | GKE usage metering | Yes |
| Features | Backup for GKE | No |
| Features | Config connector | Yes |
| Features | Compute engine persistent disk CSI driver | Yes |
| Features | Image streaming | Yes |
| Features | Filestore CSI driver | Yes |
| Features | Cloud storage fuse CSI driver | Yes |
| Features | Service mesh | No |
| Storage | Storage classes | Yes |
| Storage | Persistent volumes | Yes |
| Connect | PVC | Yes |
| Connect | config map | Yes |
| Connect | namespace | Yes |
| Connect | secret | Yes |
| Fleet | Register fleet | No |
SQL instance
MySQL instance
| Property Category | Properties | Value | Supported |
|---|---|---|---|
| Overview | Database version | Yes | |
| Overview | Instance ID | Yes | |
| Overview | Password policy | Yes | |
| Overview | Region | Yes | |
| Overview | Zone | Yes | |
| Overview | Machine configuration | Yes | |
| Overview | Storage | Yes | |
| Overview | Maintenance | Yes | |
| Overview | Flags | Yes | |
| Overview | Query insights | Yes | |
| Overview | Labels | Yes | |
| Users | Yes | ||
| Databases | Yes | ||
| Backups | Automated backups | Yes | |
| Backups | Backups window | Yes | |
| Backups | Automated backups retained | Yes | |
| Backups | Point-in-time recovery | Yes | |
| Backups | Days of logs retained | Yes | |
| Backups | Location | Yes | |
| Connections | Connection name | Yes | |
| Connections | Private IP | No | |
| Connections | Public IP | Yes | |
| Security | SSL mode | Yes | |
| Security | Server certificate authority mode | Google managed internal certificate authority | Yes |
| Security | Server certificate authority mode | Google managed CAS certificate authority | Yes |
| Security | Server certificate authority mode | Customer managed CAS certificate authority | No |
PostgreSQL instance
| Property Category | Properties | Value | Supported |
|---|---|---|---|
| Overview | Database version | Yes | |
| Overview | Instance ID | Yes | |
| Overview | Password policy | Yes | |
| Overview | Region | Yes | |
| Overview | Zone | Yes | |
| Overview | Machine configuration | Yes | |
| Overview | Storage | Yes | |
| Overview | Maintenance | Yes | |
| Overview | Flags | Yes | |
| Overview | Query insights | Yes | |
| Overview | Labels | Yes | |
| Users | Yes | ||
| Databases | Yes | ||
| Backups | Automated backups | Yes | |
| Backups | Backups window | Yes | |
| Backups | Automated backups retained | Yes | |
| Backups | Point-in-time recovery | Yes | |
| Backups | Days of logs retained | Yes | |
| Backups | Location | Yes | |
| Connections | Connection name | Yes | |
| Connections | Private IP | No | |
| Connections | Public IP | Yes | |
| Security | SSL mode | Yes | |
| Security | Server certificate authority mode | Google managed internal certificate authority | Yes |
| Security | Server certificate authority mode | Google managed CAS certificate authority | Yes |
| Security | Server certificate authority mode | Customer managed CAS certificate authority | No |
SQLServer instance
| Property Category | Properties | Value | Supported |
|---|---|---|---|
| Overview | Database version | Yes | |
| Overview | Instance ID | Yes | |
| Overview | Region | Yes | |
| Overview | Zone | Yes | |
| Overview | Machine configuration | Yes | |
| Overview | Storage | Yes | |
| Overview | Maintenance | Yes | |
| Overview | Flags | Yes | |
| Overview | Query insights | Yes | |
| Overview | Labels | Yes | |
| Users | Yes | ||
| Databases | Yes | ||
| Backups | Automated backups | Yes | |
| Backups | Backups window | Yes | |
| Backups | Automated backups retained | Yes | |
| Backups | Point-in-time recovery | Yes | |
| Backups | Days of logs retained | Yes | |
| Backups | Location | Yes | |
| Connections | Connection name | Yes | |
| Connections | Private IP | No | |
| Connections | Public IP | Yes | |
| Security | SSL mode | Yes | |
| Security | Server certificate authority mode | Google managed internal certificate authority | Yes |
| Security | Server certificate authority mode | Google managed CAS certificate authority | Yes |
| Security | Server certificate authority mode | Customer managed CAS certificate authority | No |
VM instance
| Property Category | Properties | Value | Supported |
|---|---|---|---|
| Machine configuration | Name | Yes | |
| Machine configuration | Region | Yes | |
| Machine configuration | Zone | Yes | |
| Machine configuration | Machine type | Yes | |
| Machine configuration | vCPU | Yes | |
| Machine configuration | Memory | Yes | |
| Machine configuration | vCPUs to core ratio | Yes | |
| Machine configuration | Visible core count | Yes | |
| Machine configuration | Limit the VM's CPU frequency to all-core turbo | Yes | |
| Machine configuration | GPU type | Yes | |
| Machine configuration | Number of GPUs | Yes | |
| Machine configuration | Enable Virtual Workstation (NVIDIA GRID) | Need to choose target region is Europe-west4 | Yes |
| OS and storage | Operating system | Debian | Yes |
| OS and storage | Operating system | Ubuntu | Yes |
| OS and storage | Operating system | Windows server | Yes |
| OS and storage | Version | Yes | |
| OS and storage | Boot disk type | Hyperdisk balanced | Yes |
| OS and storage | Boot disk type | Balanced persistent disk | Yes |
| OS and storage | Boot disk type | Extreme persistent disk | Yes |
| OS and storage | Boot disk type | SSD persistent disk | Yes |
| OS and storage | Boot disk type | Standard persistent disk | Yes |
| OS and storage | Size | Yes | |
| OS and storage | Deletion rule | Keep boot disk | Yes |
| OS and storage | Deletion rule | Delete boot disk | Yes |
| OS and storage | Storage pool | Enable | No |
| OS and storage | Storage pool | Disable | Yes |
| OS and storage | Encryption | Google-managed encryption key | Yes |
| OS and storage | Encryption | Cloud KMS key | Yes |
| OS and storage | Encryption | Customer-supplied encryption key (CSEK) | No |
| OS and storage | Device name | Auto | Yes |
| OS and storage | Device name | Custom device name | Yes |
| OS and storage | Additional disks | Yes | |
| OS and storage | Container image | Yes | |
| OS and storage | Restart policy | Always | Yes |
| OS and storage | Restart policy | On failure | Yes |
| OS and storage | Restart policy | Never | Yes |
| OS and storage | Run as privileged | Yes | |
| OS and storage | Allocate a buffer for STDIN | Yes | |
| OS and storage | Allocate a pseudo-TTY | Yes | |
| OS and storage | Command | Yes | |
| OS and storage | Arguments | Yes | |
| OS and storage | Environment variables | Yes | |
| OS and storage | Volume mounts | Yes | |
| Data protection | Back up your data | Backup plan | No |
| Data protection | Back up your data | Snapshot schedules | No |
| Data protection | Back up your data | No backups | Yes |
| Data protection | Cross-zone synchronous replication | Regional disks | Yes |
| Data protection | Secondary zone | Yes | |
| Data protection | Cross-region asynchronous replication | Asynchronous replication | No |
| Data protection | Exclude boot disks | No | |
| Networking | Firewall | Allow HTTP traffic | Yes |
| Networking | Firewall | Allow HTTPS traffic | Yes |
| Networking | Firewall | Allow Load Balancer Health Checks | Yes |
| Networking | Network tags | Yes | |
| Networking | Hostname | Yes | |
| Networking | IP forwarding | Enable | Yes |
| Networking | IP forwarding | Disable | Yes |
| Networking | Network bandwidth | Yes | |
| Networking | Network interfaces | Yes | |
| Networking | Network | Yes | |
| Networking | Subnetwork | Yes | |
| Networking | Network interface card(NIC type) | VirtIO | Yes |
| Networking | Network interface card(NIC type) | gVNIC | Yes |
| Networking | IP stack type | IPv4 (single-stack) | Yes |
| Networking | IP stack type | IPv4 and IPv6 (dual-stack) | Yes |
| Networking | IP stack type | IPv6 (single-stack) | Yes |
| Networking | Primary internal IPv4 address | Ephemeral (Automatic) | Yes |
| Networking | Primary internal IPv4 address | Ephemeral (Custom) | Yes |
| Networking | Custom ephemeral IP address | Yes | |
| Networking | Alias IP ranges | Primary subnet range & Alias IP range 1 | No |
| Networking | Alias IP ranges | Secondary subnet range & Alias IP range 2 | No |
| Networking | External IPv4 address | Yes | |
| Networking | Network Service Tier | Premium | Yes |
| Networking | Network Service Tier | Standard | Yes |
| Networking | Public DNS PTR Record | No | |
| Observability | Install Ops Agent for Monitoring and Logging | Yes | |
| Observability | Enable display device | Yes | |
| Security | Service accounts | No service accounts | Yes |
| Security | Service accounts | Select service account | Yes |
| Security | Access scopes | Allow default access | Yes |
| Security | Access scopes | Allow full access to all Cloud APIs | Yes |
| Security | Access scopes | Set access for each API | Yes |
| Security | Confidential VM service(Confidential computing service) | Yes | |
| Security | Shielded VM | Turn on Secure Boot | Yes |
| Security | Shielded VM | Turn on vTPM | Yes |
| Security | Shielded VM | Turn on Integrity Monitoring | Yes |
| Security | VM access | Control VM access through IAM permissions | Yes |
| Security | VM access | Require 2-step verification | Yes |
| Security | VM access | Block project-wide SSH keys | Yes |
| Security | Add manually generated SSH keys | SSH keys | Yes |
| Advanced | Description | Yes | |
| Advanced | Deletion protection | Enable | Yes |
| Advanced | Deletion protection | Disable | Yes |
| Advanced | Reservations | Choose a reservation | No |
| Advanced | Reservations | Don't use a reservation | Yes |
| Advanced | Automation | Startup script | Yes |
| Advanced | Metadata | Key 1 | Yes |
| Advanced | Metadata | Value 1 | Yes |
| Advanced | Data encryption | Google-managed encryption key | Yes |
| Advanced | Data encryption | Cloud KMS key | Yes |
| Advanced | Data encryption | Customer-supplied encryption key (CSEK). | No |
| Advanced | Enable logging | Yes | |
| Advanced | Enable monitoring | Yes | |
| Advanced | Provisioning model | Standard | Yes |
| Advanced | Provisioning model | Spot (Preemptibility = On) | Yes |
| Advanced | Time limit for the VM | Yes | |
| Advanced | Gracefully shut down the VM | Maximum duration | No |
| Advanced | On VM termination | Stop | Yes |
| Advanced | On VM termination | Delete | Yes |
| Advanced | On host maintenance | Migrate VM instance | Yes |
| Advanced | On host maintenance | Terminate VM instance | Yes |
| Advanced | Host error timeout | Unspecified (default) | Yes |
| Advanced | Host error timeout | Specified time | Yes |
| Advanced | Automatic restart | On(Default) | Yes |
| Advanced | Automatic restart | Off | Yes |
| Advanced | Customer Managed Encryption Key (CMEK) revocation policy | Shut down (recommended) | Yes |
| Advanced | Customer Managed Encryption Key (CMEK) revocation policy | Do nothing | Yes |
| Advanced | Sole-tenancy | No | |
| Instance_details | Instance template | Yes | |
| Instance_details | In-use by | No | |
| Instance_details | Physical host | No | |
| Instance_details | Maintenance status | No | |
| Instance_details | Labels | Yes | |
| Instance_details | Tags | No | |
| Instance_details | Preserved state size | No | |
| Instance_Machine configuration | CPU platform | Yes | |
| Instance_Machine configuration | Minimum CPU platform | Yes | |
| Instance_Machine configuration | Architecture | Yes | |
| Instance_Machine configuration | Custom visible cores | Yes | |
| Instance_Machine configuration | Resource policies | No | |
| Instance_Network interface | Interface type | VPC | Yes |
| Instance_Network interface | Interface type | Private service connect | No |
| Instance_Network interface | Primary internal IP address | Yes | |
| Instance_Boot disk | Name | Yes | |
| Instance_Boot disk | Image | Yes | |
| Instance_Boot disk | Interface type | NVME | Yes |
| Instance_Boot disk | Interface type | SCSI | Yes |
| Instance_Boot disk | Provisioned IOPS | Yes | |
| Instance_Boot disk | Provisioned throughput | Yes | |
| Instance_Boot disk | Provisional IOPS | Yes | |
| Instance_Boot disk | Architecture | Yes | |
| Instance_Boot disk | Zone | Yes | |
| Instance_Boot disk | Labels | Yes | |
| Instance_Boot disk | Tags | No | |
| Instance_Boot disk | In-use by | Yes | |
| Instance_Boot disk | Source image | No | |
| Instance_Boot disk | Access mode | Yes |
On this page