Rapid7 Cloud Native Application Protection Tables
The Rapid7 Cloud Native Application Protection integration uses the following tables.
Tables
Rapid7InsightCloudSecCloudAccounts
Contains details of cloud accounts configured and discovered in Rapid7 InsightCloudSec.
| Name | Type | Description |
|---|---|---|
| ConfigID | integer | The configuration ID |
| AccountID | string | The unique identifier of the cloud account (AccountID) |
| BadgeCount | integer | The number of badges (tags/labels) on this account in InsightCloudSec |
| CloudAccess | string | The level of access granted to the cloud account |
| CloudOrganizationDomainName | string | The domain name of the cloud organization (if applicable) |
| CloudOrganizationID | string | The unique identifier of the cloud organization |
| CloudOrganizationNickname | string | The nickname of the cloud organization |
| CloudTypeID | string | The cloud provider type identifier (e.g. AWS, GCP, Azure) |
| CreationTime | datetime | The timestamp when the cloud account was created in InsightCloudSec |
| DisabledResourceTypes | string | Comma-separated list of resource types disabled for this account |
| EventDrivenHarvestRole | string | The IAM role used for event-driven harvesting |
| FailedResourceTypes | string | Comma-separated list of resource types that failed to harvest |
| GroupResourceID | string | The resource group ID that this account belongs to in InsightCloudSec |
| ID | integer | The primary key for this record |
| IsCompartment | bit | Whether this account represents an OCI compartment |
| IsPlatformManaged | bit | Whether this account is managed by the platform |
| LastRefreshed | datetime | The last time this account’s data was refreshed in InsightCloudSec |
| Name | string | The display name of the cloud account |
| Owner | string | The owner or principal responsible for the account |
| ResourceCount | integer | The total number of resources discovered under this account |
| ResourceID | string | The internal resource identifier string for the account |
| RoleARN | string | The ARN of the role assumed to access this cloud account |
| ScanError | string | Any error message encountered during the last scan |
| Status | string | The current status of the cloud account in InsightCloudSec |
| StrategyID | integer | The strategy ID used for harvesting this account |
| TenantID | string | The tenant or subscription ID associated with the account |
| TrailblazerAccountInScope | string | Whether this account is included in the Trailblazer audit scope |
| TrailblazerCloudtrailTrails | string | Comma-separated list of CloudTrail trails monitored for this account |
| BatchDate | datetime | The date and time the data was retrieved from Rapid7 |
Rapid7InsightCloudSecFindings
Contains detailed records of security findings generated by InsightCloudSec Insights, including metadata, severity, affected resources, and associated risk information.
| Name | Type | Description |
|---|---|---|
| ConfigID | integer | Identifier of the insight/configuration instance for this finding |
| ID | integer | Unique identifier for this specific finding record. |
| All | integer | Indicator denoting that the finding applies across all resources/context in scope. |
| Author | string | User or system that created the insight template or finding. |
| CacheUpdatedAt | datetime | Timestamp when the cache for this record or related metadata was last refreshed. |
| CustomSeverity | string | User-assigned or override severity for this insight/finding. |
| Description | string | Text description of the insight/finding: what it checks for and what the finding means. |
| Disabled | string | Flag indicating whether this insight/configuration is disabled. |
| Duration | integer | Time period or duration over which this finding was evaluated or applies. |
| Exemptions | integer | List or count of resource exemptions applied to this insight/configuration. |
| Favorited | boolean | Flag indicating that a user has marked this insight/finding as a favorite. |
| InsertedAt | datetime | Timestamp when this record was first inserted in the system. |
| IsDeprecated | boolean | Flag indicating the insight/template/configuration is deprecated. |
| MetaData | string | Structured additional metadata attached to the record for extra context. |
| Name | string | Name/title of the insight or finding record. |
| Notes | string | Free-form notes or comments attached to this insight/finding. |
| OwnerResourceID | string | Identifier of the resource that owns or is responsible for this finding. |
| Released | string | Flag or date indicating when the insight/template was released/published for use. |
| RemoveVersion | string | Version number of the template/configuration from which this insight was removed or marked for removal. |
| ResourceGroupBlacklist | string | List of resource groups that are excluded from evaluation by this insight/configuration. |
| ResourceTypes | string | The list of resource types (e.g., compute instance, storage bucket) that this insight targets or applies to. |
| Results | integer | Number or set of actual resultsthat failed or triggered this insight in the current run. |
| Severity | integer | Default severity level of this insight (e.g., Low, Medium, High) before any custom overrides. |
| Source | string | Origin or type of this finding (e.g., misconfiguration check, threat detection, IaC scan). |
| SupportedClouds | string | List of cloud providers (e.g., AWS, Azure, GCP) for which this insight is supported. |
| SupportedIacClouds | string | List of IaC (Infrastructure as Code) frameworks/clouds which this insight supports (e.g., Terraform, CloudFormation). |
| Tags | string | Key/value tags attached to this insight/finding for categorization, filtering, or grouping. |
| TemplateID | string | Identifier of the underlying insight template definition that this record is based on. |
| Total | integer | Total number of resources evaluated for this insight in the current scope/run. |
| UpdatedAt | datetime | Timestamp when this record was last updated. |
| UserResourceID | string | Identifier of the user that last modified or is responsible for this finding/insight. |
| Version | string | Version number of the insight/template/configuration currently applied. |
| Rapid7InsightCloudSecInsightID | integer | Internal ID of the Insight within the InsightCloudSec system. |
| Rapid7InsightCloudSecInsightConfigID | integer | Internal ID of the specific insight configuration in InsightCloudSec. |
| Rapid7InsightCloudSecResourceID | string | Internal ID of the resource in InsightCloudSec that this finding is against. |
| Rapid7InsightCloudSecResourceConfigID | integer | Internal ID of the resource configuration snapshot in InsightCloudSec at the time of finding. |
| ResourceAccountID | string | Identifier of the cloud account hat owns the resource under evaluation. |
| ResourceCloud | string | Cloud provider name of the resource (e.g., AWS, Azure, GCP) for which the finding applies. |
| BatchDate | datetime | Date of the ingestion/processing batch in which this finding record was created or updated. |
| AttackPathCount | integer | Number of attack-paths identified by InsightCloudSec that involve this resource. |
| PublicAccessible | boolean | Flag indicating whether the resource evaluated by this insight is publicly accessible as determined by the platform. |
| RiskScore | integer | Numeric risk score assigned to this finding/resource based on combined risk factors. |
| SensitiveDataHigh | integer | Count of high-severity sensitive data findings/classifications associated with this resource. |
| SensitiveDataLow | integer | Count of low-severity sensitive data findings/classifications for this resource. |
| SensitiveDataMedium | integer | Count of medium-severity sensitive data findings/classifications for this resource. |
| SensitiveDataStatus | string | Overall status flag of sensitive data classification for the resource (e.g., none, detected, mitigated). |
Rapid7InsightCloudSecInsightPacks
Contains definitions of Insight Packs available in Rapid7 InsightCloudSec.
| Name | Type | Description |
|---|---|---|
| PackID | integer | The unique identifier for the Insight Pack |
| ConfigID | integer | The configuration ID |
| Name | string | The name of the Insight Pack |
| Description | string | A detailed description of the Insight Pack’s purpose |
| InsertedAt | datetime | The timestamp when this pack record was first inserted |
| UpdatedAt | datetime | The timestamp when this pack record was last updated |
| LogoUrl | string | The URL of the Insight Pack’s logo image |
| RemoveVersion | string | The version string indicating which insight was removed (if any) |
| Source | string | The source of the pack (e.g., backoffice, custom) |
| Subscriptions | integer | The number of subscriptions to this pack |
| IsDeprecated | bit | Whether the pack is deprecated |
| Locked | bit | Whether the pack is locked from modification |
| BatchDate | datetime | The date and time the data was retrieved from Rapid7 |
Rapid7InsightCloudSecInsightPackSupportedClouds
Maps each Insight Pack to the cloud platforms it supports.
| Name | Type | Description |
|---|---|---|
| ConfigID | integer | The configuration ID |
| CloudName | string | The name of the supported cloud platform |
| BatchDate | datetime | The date and time the data was retrieved from Rapid7 |
| ID | integer | The Unique Identifier |
Rapid7InsightCloudSecInsightResourceTypes
Stores which resource types are supported by insights for the given configuration.
| Name | Type | Description |
|---|---|---|
| ConfigID | integer | The configuration ID |
| ResourceType | string | The supported resource type name (e.g. storagecontainer, instance) |
| BatchDate | datetime | The date and time the data was retrieved from Rapid7 |
| ID | integer | The Unique Identifier |
Rapid7InsightCloudSecInsights
Insight definitions and metadata from Rapid7 InsightCloudSec for a given configuration
| Name | Type | Description |
|---|---|---|
| ConfigID | integer | The configuration ID |
| InsightID | integer | The unique identifier of the insight |
| All | integer | The total number of resources evaluated by this insight (including exempted) |
| Author | string | The source system or user who authored the insight |
| CacheUpdatedAt | datetime | The timestamp when the cached results were last updated |
| CustomSeverity | string | Any user-defined severity override for this insight |
| Description | string | A detailed description of what the insight checks for |
| Disabled | string | Indicates if the insight is currently disabled |
| Duration | float | How long the insight took to execute (in seconds) |
| Exemptions | integer | The count of resources exempted from this insight |
| Favorited | bit | Flag indicating if this insight is marked as a favorite |
| InsertedAt | datetime | When the insight definition was first inserted into the system |
| IsDeprecated | bit | Flag indicating if the insight is deprecated |
| MetaData | string | Any additional metadata for the insight |
| Name | string | The human-readable name of the insight |
| Notes | string | Developer or operator notes associated with the insight |
| OwnerResourceID | string | Identifier for the resource owner context, if applicable |
| Released | string | The version or release identifier when the insight was made available |
| RemoveVersion | string | The version when the insight was removed or deprecated |
| ResourceGroupBlacklist | string | Any resource groups excluded from this insight |
| Results | integer | The number of resources currently failing this insight |
| Severity | integer | The default severity level of the insight (as an integer) |
| Source | string | The origin of the insight (e.g. backoffice, core) |
| TemplateID | string | Identifier for the underlying template used by the insight |
| Total | integer | The total number of resources returned by the insight (before paging) |
| UpdatedAt | datetime | The timestamp when the insight definition was last updated |
| UserResourceID | string | Identifier for the user context, if applicable |
| Version | string | The version number of the insight definition |
| BatchDate | datetime | The date and time the data was retrieved from Rapid7 |
Rapid7InsightCloudSecInsightSupportedClouds
Stores which cloud platforms each insight supports, including when this data was retrieved.
| Name | Type | Description |
|---|---|---|
| ConfigID | integer | The configuration ID |
| CloudName | string | The name of the supported cloud for the insight. |
| BatchDate | datetime | The date and time the data was retrieved from Rapid7 |
Rapid7InsightCloudSecInsightSupportedIacClouds
Stores which Infrastructure-as-Code cloud platforms each insight supports, including when this information was retrieved.
| Name | Type | Description |
|---|---|---|
| ConfigID | integer | The configuration ID |
| IACCloudName | string | The name of the supported Infrastructure-as-Code cloud for the insight. |
| BatchDate | datetime | The date and time the data was retrieved from Rapid7 |
| ID | integer | The Unique Identifier |
Rapid7InsightCloudSecInsightTags
Stores associations between insights and their tags, including when they were retrieved.
| Name | Type | Description |
|---|---|---|
| ConfigID | integer | The configuration ID |
| Tag | string | The tag text assigned to the insight. |
| BatchDate | datetime | The date and time the data was retrieved from Rapid7 |
Rapid7InsightCloudSecIntegrations
Contains the settings and metadata for each InsightCloudSec integration configuration.
| Name | Type | Description |
|---|---|---|
| ID | integer | The unique ID for the configuration |
| Name | string | The name of the configuration set up |
| IsEnabled | boolean | Is the integration enabled |
| BaseURL | string | The base URL the integration uses for API calls to Rapid7 |
| CreatedDate | datetime | The date and time the configuration was created |
| ModifiedDate | datetime | The date and time the configuration was modified |
| CreatedBy | string | The user who created the configuration |
| ModifiedBy | string | The user who modified the configuration |
| IntegrationID | integer | The unique ID for the integration |
Rapid7InsightCloudSecResourceActiveVulnerabilityReports
Holds active vulnerability assessment summaries for each resource, including counts by severity, risk scores, assessment status, and snapshot timestamps.
| Name | Type | Description |
|---|---|---|
| ConfigID | integer | The configuration ID |
| ResourceID | string | The resource identifier for which this report applies |
| ReportID | string | The unique identifier for the vulnerability report |
| CriticalCount | integer | The count of critical severity vulnerabilities in the latest assessment |
| HighCount | integer | The count of high severity vulnerabilities in the latest assessment |
| MediumCount | integer | The count of medium severity vulnerabilities in the latest assessment |
| LowCount | integer | The count of low severity vulnerabilities in the latest assessment |
| NoneCount | integer | The count of vulnerabilities classified as none severity in the latest assessment |
| TotalCount | integer | The total number of vulnerabilities in the latest assessment |
| RiskScore | float | The aggregated risk score from the latest assessment |
| Severity | string | The overall severity level determined by the assessment |
| PublicAccessible | bit | Indicates whether the resource is publicly accessible |
| ImageID | string | The identifier of the image scanned, if applicable |
| LastAssessment | datetime | The timestamp of the most recent assessment |
| AssessmentStartedAt | datetime | The timestamp when the assessment process began |
| AssessmentMessageStartedAt | datetime | The timestamp when the assessment messaging was initiated |
| AssessmentCompletedAt | datetime | The timestamp when the assessment process completed |
| SnapshotCreatedAt | datetime | The timestamp when the vulnerability snapshot was created |
| SnapshotCompletedAt | datetime | The timestamp when the vulnerability snapshot process completed |
| AssessmentStatus | string | The current status of the assessment (e.g., COMPLETED, FAILED) |
| AssessmentErrorReason | string | The reason for any assessment error, if applicable |
| BatchDate | datetime | The date and time the data was retrieved from Rapid7 |
Rapid7InsightCloudSecResourceAdditionalDetails
Stores supplementary metadata in JSON format that provides extended details about individual InsightCloudSec resources beyond the core resource attributes.
| Name | Type | Description |
|---|---|---|
| ResourceID | string | Identifier of the resource in the system. |
| ConfigID | integer | Identifier of the configuration record or harvest snapshot for the resource at the time the additional details were captured. |
| AdditionalDetailsJSON | string | A JSON-formatted field containing supplementary metadata or attributes for the resource. |
| BatchDate | datetime | Date representing the ingestion or batch load run when these additional details were recorded. |
Rapid7InsightCloudSecResources
Holds a snapshot of each discovered cloud resource for a given configuration, including identifiers, metadata, tags, and timestamps.
| Name | Type | Description |
|---|---|---|
| ConfigID | integer | The configuration ID |
| ResourceID | string | The unique resource identifier assigned by InsightCloudSec |
| ResourceName | string | The human-readable name of the resource |
| ResourceType | string | The type of the resource (e.g. instance, storagecontainer) |
| Cloud | string | The cloud provider of the resource (e.g. AWS, GCE) |
| Account | string | The name of the account under which the resource exists |
| AccountID | string | The account ID associated with the resource’s cloud account |
| AccountStatus | string | The current status of the resource’s account (e.g. REFRESH) |
| OrganizationServiceID | integer | The identifier of the organization service that owns the resource |
| AutoID | integer | An internal auto-incremented ID assigned by InsightCloudSec |
| ProviderID | string | The provider-specific identifier for the resource |
| Region | string | The geographic region where the resource resides |
| CreationTimestamp | datetime | The timestamp when the resource was created (if available) |
| DiscoveredTimestamp | datetime | The timestamp when the resource was first discovered by InsightCloudSec |
| ModifiedTimestamp | datetime | The timestamp when the resource was last modified in the cloud provider |
| NamespaceID | string | The namespace or ARN that uniquely qualifies the resource |
| BatchDate | datetime | The date and time the data was retrieved from Rapid7 |
| Rapid7InsightCloudSecResources | integer | Integer identifier that uniquely references a resource record within the InsightCloudSec Resources table. |
Rapid7InsightCloudSecResourceTags
Contains the tag key-value pairs defined for resources in InsightCloudSec, representing metadata used for organization, filtering, and policy management.
| Name | Type | Description |
|---|---|---|
| ConfigID | integer | The configuration ID |
| Tag | string | The tag value categorizing the resource |
| BatchDate | datetime | The date and time the data was retrieved from Rapid7 |
Rapid7InsightCloudSecResourceTypes
Holds the count of each resource type for a given configuration at the snapshot time.
| Name | Type | Description |
|---|---|---|
| ConfigID | integer | The configuration ID |
| Name | string | The resource type name |
| Count | integer | The number of resources of this type |
| BatchDate | datetime | The date and time the data was retrieved from Rapid7 |
Rapid7InsightCloudSecResourceVulnerabilities
Stores the vulnerability findings for each resource, keyed by CVE ID and resource.
| Name | Type | Description |
|---|---|---|
| ConfigID | integer | The configuration ID |
| CVEID | string | The unique CVE identifier of the vulnerability |
| ResourceID | string | The ID of the resource where this vulnerability was found |
| Severity | string | The severity level of the vulnerability (e.g. CRITICAL, HIGH) |
| CVSSV2Vector | string | The CVSS v2 vector string describing the attack metrics |
| Source | string | The origin of the vulnerability data (e.g. NVD, INSTANCE) |
| CVSSV2Score | float | The numeric CVSS v2 score |
| FirstFound | datetime | The timestamp when this vulnerability was first detected on the resource |
| CVSSScore | float | The overall CVSS score (default version) |
| CVSSV3Score | float | The numeric CVSS v3 score |
| URI | string | The URL linking to official details about the CVE |
| HasExploits | bit | Indicates if known exploits exist for this vulnerability |
| AffectedPackages | integer | The number of packages on the resource affected by this vulnerability |
| HasThreats | bit | Indicates if known threat intelligence entries exist |
| ResourceCount | integer | The total number of resources globally affected by this CVE |
| Title | string | A human-readable summary or title of the vulnerability |
| RiskScore | float | A calculated risk metric combining severity and exposure |
| VulnerabilityID | string | An internal or alternate vulnerability identifier |
| LastSeen | datetime | The timestamp when the vulnerability was last observed on the resource |
| CVSSV3Vector | string | The CVSS v3 vector string describing the attack metrics |
| ImageCount | integer | The number of container images affected (if applicable) |
| PublicResourceCount | integer | The count of publicly-accessible resources affected |
| PackageCount | integer | The total number of packages scanned on the resource |
| CweIdsJSON | string | JSON-serialized list of CWE identifier(s) |
| Description | string | Detailed description of the vulnerability from metadata |
| FixedVersion | string | The version in which this vulnerability is resolved |
| PublishedDate | datetime | The official publication date of the CVE |
| LastModifiedDate | datetime | The timestamp when the CVE metadata was last updated |
| BatchDate | datetime | The date and time the data was retrieved from Rapid7 |
Bridge Tables
Rapid7InsightCloudSecFindings_Rapid7InsightCloudSecInsightPacks
Maps security findings to the Insight Packs they belong to, linking each finding with its associated group or collection of Insights in InsightCloudSec.
| Name | Type | Description |
|---|---|---|
| ID | integer | The Unique Identifier |
| ConfigID | integer | The configuration ID |
| PackID | integer | The unique identifier for the Insight Pack |
Rapid7InsightCloudSecInsightPacks_Rapid7InsightCloudSecInsightPackSupportedClouds
Associates each Insight Pack with the cloud platforms it supports.
| Name | Type | Description |
|---|---|---|
| PackID | integer | The unique identifier of the Insight Pack |
| ConfigID | integer | The configuration ID |
| CloudName | string | The name of the supported cloud platform |
Rapid7InsightCloudSecInsights_Rapid7InsightCloudSecInsightPacks
Associates each insight with the packs it belongs to.
| Name | Type | Description |
|---|---|---|
| InsightID | integer | The unique identifier of the insight |
| ConfigID | integer | The configuration ID |
| PackID | integer | The unique identifier of the insight pack |
Rapid7InsightCloudSecInsights_Rapid7InsightCloudSecInsightResourceTypes
Associates each insight with the resource types it applies to.
| Name | Type | Description |
|---|---|---|
| InsightID | integer | The unique identifier of the insight |
| ConfigID | integer | The configuration ID |
| ResourceType | string | The name of the resource type that this insight targets |
Rapid7InsightCloudSecInsights_Rapid7InsightCloudSecInsightSupportedClouds
Associates each insight with the clouds it supports.
| Name | Type | Description |
|---|---|---|
| InsightID | integer | The unique identifier of the insight |
| ConfigID | integer | The configuration ID |
| CloudName | string | The name of the cloud that this insight supports |
Rapid7InsightCloudSecInsights_Rapid7InsightCloudSecInsightSupportedIacClouds
Associates each insight with its supported Infrastructure-as-Code cloud platforms.
| Name | Type | Description |
|---|---|---|
| InsightID | integer | The unique identifier of the insight |
| ConfigID | integer | The configuration ID |
| IACCloudName | string | The name of the supported IaC cloud platform |
Rapid7InsightCloudSecInsights_Rapid7InsightCloudSecInsightTags
Associates insights with their tags, capturing which tags apply to each insight.
| Name | Type | Description |
|---|---|---|
| InsightID | integer | The unique identifier of the insight |
| ConfigID | integer | The configuration ID |
| Tag | string | The tag value categorizing the insight |
Rapid7InsightCloudSecInsights_Rapid7InsightCloudSecResources
Maps each insight to the resources it applies to.
| Name | Type | Description |
|---|---|---|
| InsightID | integer | The unique identifier of the insight |
| ConfigID | integer | The configuration ID |
| ResourceID | string | The identifier of the resource |
Rapid7InsightCloudSecResources_Rapid7InsightCloudSecResourceTags
Links resources to their associated tags, enabling categorization and filtering of InsightCloudSec resources by tag metadata.
| Name | Type | Description |
|---|---|---|
| Tag | string | The tag value categorizing the resource |
| ConfigID | integer | The configuration ID |
| ResourceID | string | The unique resource identifier |
Updated 3 months ago
Did this page help you?