Resources
Browse every resource OpsNexus discovers in your connected cloud accounts, filter it, and see its tags and details.
On this page
The Resources page (Cloud > Resources) lists every resource found in the cloud accounts of the current project, across AWS, Azure, Google Cloud and Oracle Cloud. The list is read-only. It is refreshed by each account sync, which runs every hour by default. See Cloud accounts for how syncing works.
You need read access to the Cloud module to see this page.
What is collected
AWS
OpsNexus scans each configured region (or every enabled region) and then the global services. These services are collected:
| Area | Services shown |
|---|---|
| Compute | EC2 (instances), Lambda, ECS (clusters), EKS (clusters) |
| Storage | EBS (volumes), S3 (buckets) |
| Databases | RDS (DB instances), DynamoDB (tables) |
| Networking | VPC, Subnet, Route Table, Internet Gateway, NAT Gateway, VPC Endpoint, VPC Peering, Transit Gateway (VPC attachments), VPN Gateway, ELB (Application, Network and Gateway load balancers) |
| Integration and containers | SQS, SNS, ECR |
| Security | Secrets Manager (secret names only, never values) |
| Global | S3, Route 53 (hosted zones), CloudFront (distributions) |
Global services show the region global.
Resources whose own API does not return tags (for example RDS, load balancers and Lambda) get their tags from the Resource Groups Tagging API. When a resource has a Name tag, that becomes its display name.
Azure
OpsNexus lists every resource in each configured subscription through the Azure Resource Manager resources API. Virtual machines also get their power state (a deallocated VM shows as stopped).
Common types get a readable service name:
| Azure type | Service shown |
|---|---|
| Virtual machines, scale sets | Virtual Machines, VM Scale Sets |
| Managed clusters | AKS |
| Web sites | App Service / Functions |
| Storage accounts, managed disks | Storage Accounts, Managed Disks |
| SQL servers and databases, Cosmos DB accounts | Azure SQL, Cosmos DB |
| Virtual networks, load balancers, application gateways, firewalls, DNS zones, public IPs | Virtual Networks, Load Balancers, Application Gateway, Azure Firewall, Azure DNS, Public IPs |
| Key vaults, container registries | Key Vault, Container Registry |
| Log Analytics workspaces, Recovery Services vaults | Log Analytics, Azure Backup |
Other types are listed under the last part of their Azure type name. The details include the subscription, resource group and SKU.
Google Cloud
OpsNexus searches all resources in each configured project with Cloud Asset Inventory. Common asset types get a readable service name: Compute Engine, GKE, Cloud Storage, Cloud SQL, Cloud Functions, Cloud Run, VPC, Cloud Load Balancing, Cloud DNS, Artifact Registry, Secret Manager and Persistent Disk. Other asset types are listed under the last part of their type name.
Oracle Cloud
OpsNexus runs a Resource Search over the whole tenancy, or over one compartment if you set Compartment OCID. Common types get a readable service name: Compute, OKE, Object Storage, Autonomous Database, Networking, Load Balancer, DNS, Vault, Container Registry, Block Volume and Logging. The region column shows the availability domain when there is one.
Filters
The filter bar at the top of the page narrows the list:
| Filter | What it does |
|---|---|
| Cloud | AWS, Azure, Google Cloud or Oracle Cloud |
| Account | One connected cloud account |
| Region | One region (or global) |
| VPC | Resources inside one AWS VPC |
| Service | One service, for example EC2 or Key Vault |
| State | One state, for example running or stopped |
| Search | Matches the name, the resource ID or tag text |
Filters work together. Each dropdown only lists values that exist under the other active filters, with a count next to each one. For example, picking a region narrows the VPC, Service and State lists to that region.
- Choosing a VPC also sets the region to that VPC's region.
- Changing the cloud, account or region clears a VPC that is not in the new scope.
- Clicking a VPC in the table filters the list to that VPC.
- Clear filters resets all filters at once.
The line above the table shows how many resources match. The table shows 50 resources per page.
Columns
| Column | Meaning |
|---|---|
| Resource | The display name. Underneath, the cloud's resource ID (instance ID, ARN, Azure resource ID, OCID) when it differs from the name. Click the name to open the details. |
| Service | The service the resource belongs to. |
| Account | The OpsNexus account name, with the cloud underneath. |
| Region | The region, global, or the availability domain on Oracle Cloud. |
| VPC | For AWS resources in a VPC: the VPC name and ID. Click it to filter by that VPC. |
| State | The state reported by the cloud, in lower case. Running or available states are green; stopped, deallocated or terminated states are grey. |
| Tags | Tags as key=value, or labels on Google Cloud and freeform tags on Oracle Cloud. Resources with no tags show untagged. |
| Created | The creation date, when the cloud reports it. |
Resource details
Click a resource name to see its full resource ID and a JSON view of its service, region, state, tags and details. The details depend on the resource type. For example:
- EC2 instances: instance type, private IP, VPC, subnet and availability zone.
- EBS volumes: size, volume type and the instance it is attached to.
- RDS instances: engine and version, instance class, VPC and subnets.
- Subnets: CIDR, availability zone and free IP addresses.
- Load balancers: DNS name, scheme, VPC and subnets.
Tags
Tags come straight from the cloud and are read-only in OpsNexus. To change a tag, change it in the cloud. It shows up after the next sync.
Tags matter in two other places:
- Search matches tag text, so you can find resources by an owner or environment tag.
- The Savings suggestions on Cost and budgets list how many workload resources have no tags. Subnets, route tables, internet gateways, peering connections and AWS default VPCs are not counted.
Add owner, environment and project tags to your resources. They make search useful and help split cost by team.
Cloud overview
Cloud > Overview (and each cloud's own page) summarises the inventory:
- The Resources tile shows the total, with how many are running and stopped. Click it to open this page.
- Resources by service and Resources by region show the largest groups.
Troubleshooting
| Problem | What to check |
|---|---|
| No resources at all | The account status on its cloud page. A sign-in error or missing Reader role stops the whole sync. |
| Some AWS services missing | Expand item(s) skipped under the account status. It names each missing IAM permission. |
| AWS resources show raw IDs instead of names | The tag:GetResources permission is missing, or the resources have no Name tag. |
| A deleted resource still shows | Part of the last scan failed (for example, the region was unreachable). OpsNexus keeps the last known resources in that part until a scan of it succeeds. |
| Google Cloud project has no resources | The Cloud Asset API is not enabled, or the service account lacks Cloud Asset Viewer. |