> ## Documentation Index
> Fetch the complete documentation index at: https://docs.cymph.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Assets

> Which cloud resources and endpoints an asset sync mirrors into your inventory.

An asset sync mirrors infrastructure into your asset inventory. **Select Space** chooses which resource types; **Import Scope** narrows them to particular subscriptions or regions.

Resource types are offered by family. Ticking a family selects every type in it, and a family shown ticked is shorthand for exactly that — the sync stores the individual types, so a type added to that family in a later release is not picked up until you edit the sync.

## Azure

| Family         | Resource types                                                                                   |
| -------------- | ------------------------------------------------------------------------------------------------ |
| **Compute**    | Virtual Machines, VM Scale Sets, BareMetal Instances                                             |
| **Containers** | AKS Clusters, Container Apps, OpenShift Clusters                                                 |
| **Web & Apps** | App Services, Spring Apps                                                                        |
| **Databases**  | SQL Servers, PostgreSQL Servers, MySQL Servers, Cosmos DB Accounts, Redis Caches, Mongo Clusters |
| **Storage**    | Storage Accounts, Key Vaults                                                                     |
| **Identity**   | Users, Managed Identities                                                                        |

Everything is read per subscription, except **Users**, which come from Microsoft Graph and exist once per tenant.

## AWS

| Family                      | Resource types                                                                          |
| --------------------------- | --------------------------------------------------------------------------------------- |
| **Compute**                 | EC2 Instances, Auto Scaling Groups, Dedicated Hosts                                     |
| **Serverless & Containers** | Lambda Functions, EKS Clusters, ECS Services, App Runner Services                       |
| **Web & Apps**              | Elastic Beanstalk Environments                                                          |
| **Databases**               | RDS Instances, RDS Clusters, DynamoDB Tables, DocumentDB Clusters, ElastiCache Clusters |
| **Storage**                 | S3 Buckets                                                                              |
| **Networking**              | Load Balancers                                                                          |
| **Security**                | Secrets, KMS Keys                                                                       |
| **Identity**                | IAM Groups, IAM Roles, Instance Profiles                                                |

Everything is read per region, except S3 buckets and the identity types, which are account-wide.

<Note>
  Secrets and KMS keys are inventory only. Cymph records that they exist and their metadata — it never reads a secret value or key material.
</Note>

## Wazuh

A Wazuh sync mirrors your **enrolled agents** and nothing else. Each becomes a Linux, Windows, or macOS asset depending on what it reports, enriched with its operating system and network addresses. There is no scope to choose — a Wazuh sync always covers the whole manager.