Service Coverage
291+ Cloud Services Covered.
Continuously updated.
We research and maintain ThreatModels for every service your CloudSec team needs across AWS, Azure, and GCP, with weekly OverWatch updates shipped for over four years straight.
291+
Cloud Services
16,000+
APIs Monitored
20,000+
Prioritised Controls
1,700+
Threat Scenarios
Weekly
OverWatch Updates
Don't see the service you need?
We add 16+ new cloud services per quarter and prioritise our roadmap based on customer demand. Request coverage and our team will scope it for you.
What security leaders say about our coverage
"
TrustOnCloud has enabled us, a very large global organisation, to move into our lowest-level environment within about two weeks. I know some small companies that can't even move that fast.
Director of Cloud Security
Prominent International Banking Group
"
This is a gamechanger for us. We can now take our cloud security engineers and look at how we're using the services and then building controls around that.
Senior Cloud Professional
Major U.S. Financial Regulatory Organization
"
Not many products can be procured, turned on without much effort, and realise immediate value.
Senior Security Architect
Major National Financial Institution
Over 250 Cloud Services and 16,000+ APIs covered.
| Technology Provider | Service Name | ThreatModel |
|---|---|---|
| AWS | aws-securitybulletin | |
| AWS | AWS App Mesh | aws-appmesh |
| AWS | AWS AppSync | aws-appsync |
| AWS | AWS Application Migration Service | aws-mgn |
| AWS | AWS Backup | aws-backup |
| AWS | AWS Batch | aws-batch |
| AWS | AWS Budgets | aws-budgets |
| AWS | AWS Certificate Manager (ACM) | aws-acm |
| AWS | AWS Cloud WAN | aws-networkmanager |
| AWS | AWS CloudFormation | aws-cloudformation |
| AWS | AWS CloudHSM | aws-cloudhsm |
| AWS | AWS CloudTrail | aws-cloudtrail |
| AWS | AWS CloudTrail Lake | aws-cloudtrail |
| AWS | AWS CodeBuild | aws-codebuild |
| AWS | AWS CodeConnections | aws-codeconnections |
| AWS | AWS CodeDeploy | aws-codedeploy |
| AWS | AWS CodePipeline | aws-codepipeline |
| AWS | AWS Compute Optimizer | aws-computeoptimizer |
| AWS | AWS Config | aws-config |
| AWS | AWS Control Tower | aws-controltower |
| AWS | AWS Cost Explorer | aws-ce |
| AWS | AWS Cost Optimization Hub | aws-costoptimizationhub |
| AWS | AWS Cost and Usage Reports (CUR) | aws-ce |
| AWS | AWS Data Exports | aws-bcm |
| AWS | AWS DataSync | aws-datasync |
| AWS | AWS Database Migration Service | aws-dms |
| AWS | AWS Deep Learning AMIs | aws-ec2 |
| AWS | AWS Direct Connect | aws-directconnect |
| AWS | AWS Directory Service | aws-ds |
| AWS | AWS Elastic Beanstalk | aws-elasticbeanstalk |
| AWS | AWS Fault Injection Service | aws-fis |
| AWS | AWS Firewall Manager | aws-fms |
| AWS | AWS Global Accelerator | aws-globalaccelerator |
| AWS | AWS Glue | aws-glue |
| AWS | AWS Glue DataBrew | aws-databrew |
| AWS | AWS IAM Identity Center | aws-sso |
| AWS | AWS IAM Roles Anywhere | aws-rolesanywhere |
| AWS | AWS Identity and Access Management (IAM) | aws-iam |
| AWS | AWS Key Management Service (AWS KMS) | aws-kms |
| AWS | AWS Lake Formation | aws-lakeformation |
| AWS | AWS Lambda | aws-lambda |
| AWS | AWS Local Zones | aws-vpc |
| AWS | AWS Marketplace | aws-marketplace |
| AWS | AWS Migration Hub | aws-mgh |
| AWS | AWS Network Firewall | aws-networkfirewall |
| AWS | AWS Network Manager | aws-networkmanager |
| AWS | AWS Nitro Enclaves | aws-ec2enclaves |
| AWS | AWS Organizations | aws-organizations |
| AWS | AWS Private CA | aws-acmpca |
| AWS | AWS PrivateLink | aws-vpc |
| AWS | AWS Resilience Hub | aws-resiliencehub |
| AWS | AWS Resource Access Manager | aws-ram |
| AWS | AWS Resource Explorer | aws-resourceexplorer |
| AWS | AWS Resource Groups | aws-resourcegroups |
| AWS | AWS Secrets Manager | aws-secretsmanager |
| AWS | AWS Security Hub CSPM | aws-securityhub |
| AWS | AWS Security Token Service (AWS STS) | aws-iam |
| AWS | AWS Serverless Application Repository | aws-serverlessrepo |
| AWS | AWS Service Catalog | aws-servicecatalog |
| AWS | AWS Service Quotas | aws-servicequotas |
| AWS | AWS Shield | aws-shield |
| AWS | AWS Shield Advanced | aws-shield |
| AWS | AWS Signer | aws-signer |
| AWS | AWS Step Functions | aws-stepfunctions |
| AWS | AWS Systems Manager | aws-ssm |
| AWS | AWS Transfer Family | aws-transfer |
| AWS | AWS Transit Gateway | aws-tgw |
| AWS | AWS User Notifications | aws-notifications |
| AWS | AWS VPN | aws-vpc |
| AWS | AWS WAF | aws-wafv2 |
| AWS | AWS X-Ray | aws-xray |
| AWS | Amazon API Gateway (HTTP APIs and WebSockets) | aws-apigatewayv2 |
| AWS | Amazon AppFlow | aws-appflow |
| AWS | Amazon Athena | aws-athena |
| AWS | Amazon Augmented AI | aws-sagemaker |
| AWS | Amazon Aurora | aws-rds |
| AWS | Amazon Bedrock | aws-bedrock |
| AWS | Amazon Bedrock AgentCore | aws-bedrockagentcore |
| AWS | Amazon CloudFront | aws-cloudfront |
| AWS | Amazon CloudWatch | aws-cloudwatch |
| AWS | Amazon CloudWatch Evidently | aws-evidently |
| AWS | Amazon Cognito | aws-cognito |
| AWS | Amazon Comprehend | aws-comprehend |
| AWS | Amazon Connect Customer Profiles | aws-customerprofiles |
| AWS | Amazon Data Firehose | aws-firehose |
| AWS | Amazon Data Lifecycle Manager | aws-dlm |
| AWS | Amazon DataZone | aws-datazone |
| AWS | Amazon Detective | aws-detective |
| AWS | Amazon DocumentDB (with MongoDB compatibility) | aws-rds |
| AWS | Amazon DynamoDB | aws-dynamodb |
| AWS | Amazon EC2 Auto Scaling | aws-autoscaling |
| AWS | Amazon EC2 Spot Instances | aws-ec2 |
| AWS | Amazon EMR | aws-emr |
| AWS | Amazon EMR Serverless | aws-emr |
| AWS | Amazon ElastiCache | aws-elasticache |
| AWS | Amazon Elastic Block Store (Amazon EBS) | aws-ec2 |
| AWS | Amazon Elastic Compute Cloud (Amazon EC2) | aws-ec2 |
| AWS | Amazon Elastic Container Registry (Amazon ECR) | aws-ecr |
| AWS | Amazon Elastic Container Service (Amazon ECS) | aws-ecs |
| AWS | Amazon Elastic File System (Amazon EFS) | aws-efs |
| AWS | Amazon Elastic Kubernetes Service (Amazon EKS) | aws-eks |
| AWS | Amazon EventBridge | aws-events |
| AWS | Amazon EventBridge Pipes | aws-pipes |
| AWS | Amazon EventBridge Scheduler | aws-scheduler |
| AWS | Amazon FSx | aws-fsx |
| AWS | Amazon Forecast | aws-forecast |
| AWS | Amazon GuardDuty | aws-guardduty |
| AWS | Amazon Inspector | aws-inspector2 |
| AWS | Amazon Kendra | aws-kendra |
| AWS | Amazon Keyspaces (for Apache Cassandra) | aws-keyspaces |
| AWS | Amazon Kinesis Data Streams | aws-kinesis |
| AWS | Amazon Kinesis Video Streams | aws-kinesisvideo |
| AWS | Amazon Lex V2 | aws-lexv2 |
| AWS | Amazon Lookout for Metrics | aws-lookoutmetrics |
| AWS | Amazon MQ | aws-mq |
| AWS | Amazon Macie | aws-macie2 |
| AWS | Amazon Managed Blockchain | aws-managedblockchain |
| AWS | Amazon Managed Grafana | aws-grafana |
| AWS | Amazon Managed Streaming for Apache Kafka (Amazon MSK) | aws-kafka |
| AWS | Amazon Managed Workflows for Apache Airflow (Amazon MWAA) | aws-mwaa |
| AWS | Amazon OpenSearch Serverless | aws-aoss |
| AWS | Amazon OpenSearch Service | aws-opensearch |
| AWS | Amazon Personalize | aws-personalize |
| AWS | Amazon Polly | aws-polly |
| AWS | Amazon Q Business | aws-qbusiness |
| AWS | Amazon Q developer | aws-qdeveloper |
| AWS | Amazon Q in Connect | aws-qconnect |
| AWS | Amazon Quantum Ledger Database (Amazon QLDB) | aws-qldb |
| AWS | Amazon QuickSight | aws-quicksight |
| AWS | Amazon Redshift | aws-redshift |
| AWS | Amazon Redshift Serverless | aws-redshift |
| AWS | Amazon Rekognition | aws-rekognition |
| AWS | Amazon Relational Database Service (Amazon RDS) | aws-rds |
| AWS | Amazon Route 53 | aws-route53 |
| AWS | Amazon S3 Glacier | aws-s3 |
| AWS | Amazon S3 Tables | aws-s3tables |
| AWS | Amazon SES | aws-ses |
| AWS | Amazon SageMaker | aws-sagemaker |
| AWS | Amazon SageMaker Ground Truth | aws-sagemaker |
| AWS | Amazon SageMaker Studio | aws-sagemaker |
| AWS | Amazon Security Lake | aws-securitylake |
| AWS | Amazon Simple Notification Service (Amazon SNS) | aws-sns |
| AWS | Amazon Simple Queue Service (Amazon SQS) | aws-sqs |
| AWS | Amazon Simple Storage Service (Amazon S3) | aws-s3 |
| AWS | Amazon Textract | aws-textract |
| AWS | Amazon Transcribe | aws-transcribe |
| AWS | Amazon Virtual Private Cloud (Amazon VPC) | aws-vpc |
| AWS | Amazon WorkSpaces | aws-workspaces |
| AWS | Amazon WorkSpaces applications | aws-appstream |
| AWS | EC2 Image Builder | aws-imagebuilder |
| AWS | Elastic Load Balancing (ELB) | aws-elb |
| AWS | IAM Access Analyzer | aws-iam |
| AWS | Previously Amazon Connect Wisdom | aws-qconnect |
| AWS | formerly Amazon AppStream 2.0 | aws-appstream |
| Google Cloud | API Gateway | gcp-apigateway |
| Google Cloud | Access Approval | gcp-accessapproval |
| Google Cloud | Access Context Manager | gcp-accesscontextmanager |
| Google Cloud | Agent Assist | gcp-dialogflow |
| Google Cloud | Analytics Hub | gcp-bigquery |
| Google Cloud | Apigee | gcp-apigee |
| Google Cloud | Apigee API Management | gcp-apigee |
| Google Cloud | Apigee hybrid | gcp-apigee |
| Google Cloud | App Engine | gcp-appengine |
| Google Cloud | Artifact Registry | gcp-artifactregistry |
| Google Cloud | Backup and DR Service | gcp-backupdr |
| Google Cloud | Backup for GKE | gcp-gkebackup |
| Google Cloud | BigQuery | gcp-bigquery |
| Google Cloud | BigQuery Data Transfer Service | gcp-bigquery |
| Google Cloud | Binary Authorization | gcp-binaryauthorization |
| Google Cloud | CX Insights | gcp-contactcenterinsights |
| Google Cloud | Certificate Authority Service | gcp-privateca |
| Google Cloud | Certificate Manager | gcp-certificatemanager |
| Google Cloud | Cloud Armor | gcp-compute |
| Google Cloud | Cloud Asset Inventory | gcp-cloudasset |
| Google Cloud | Cloud Bigtable | gcp-bigtable |
| Google Cloud | Cloud Billing | gcp-cloudbilling |
| Google Cloud | Cloud Build | gcp-cloudbuild |
| Google Cloud | Cloud Composer 2 and 3 | gcp-composer |
| Google Cloud | Cloud DNS | gcp-dns |
| Google Cloud | Cloud Data Loss Prevention (Cloud DLP) | gcp-dlp |
| Google Cloud | Cloud Firestore | gcp-firestore |
| Google Cloud | Cloud Key Management Service (KMS) | gcp-cloudkms |
| Google Cloud | Cloud Load Balancing | gcp-compute |
| Google Cloud | Cloud Logging | gcp-logging |
| Google Cloud | Cloud Monitoring | gcp-monitoring |
| Google Cloud | Cloud NAT | gcp-compute |
| Google Cloud | Cloud Profiler | gcp-profiler |
| Google Cloud | Cloud Quotas | gcp-cloudquotas |
| Google Cloud | Cloud Resource Manager | gcp-cloudresourcemanager |
| Google Cloud | Cloud Run | gcp-run |
| Google Cloud | Cloud Run functions | gcp-cloudfunctions |
| Google Cloud | Cloud SQL | gcp-cloudsql |
| Google Cloud | Cloud Scheduler | gcp-scheduler |
| Google Cloud | Cloud Service Mesh | gcp-trafficdirector |
| Google Cloud | Cloud Source Repositories | gcp-sourcerepo |
| Google Cloud | Cloud Storage | gcp-storage |
| Google Cloud | Cloud Storage Transfer Service | gcp-storagetransfer |
| Google Cloud | Cloud Tasks | gcp-cloudtasks |
| Google Cloud | Cloud Trace | gcp-cloudtrace |
| Google Cloud | Cloud Vision | gcp-vision |
| Google Cloud | Cloud Workstations | gcp-workstations |
| Google Cloud | Collab Enterprise | gcp-vertex |
| Google Cloud | Compute Engine | gcp-compute |
| Google Cloud | Confidential VMs | gcp-compute |
| Google Cloud | Customer Experience Insights | gcp-contactcenterinsights |
| Google Cloud | Dataflow | gcp-dataflow |
| Google Cloud | Dataform | gcp-dataform |
| Google Cloud | Dataplex | gcp-dataplex |
| Google Cloud | Dataproc | gcp-dataproc |
| Google Cloud | Dataproc Metastore | gcp-metastore |
| Google Cloud | Dialogflow CX | gcp-dialogflow |
| Google Cloud | Document AI | gcp-documentai |
| Google Cloud | Error Reporting | gcp-logging |
| Google Cloud | Essential Contacts | gcp-cloudresourcemanager |
| Google Cloud | Eventarc | gcp-eventarc |
| Google Cloud | Filestore | gcp-filestore |
| Google Cloud | Firebase | gcp-firebase |
| Google Cloud | Firebase App Distribution | gcp-firebase |
| Google Cloud | Firebase Cloud Messaging | gcp-firebase |
| Google Cloud | Firebase Hosting | gcp-firebase |
| Google Cloud | Firebase Remote Config | gcp-firebase |
| Google Cloud | Firebase Test Lab | gcp-firebase |
| Google Cloud | Firestore in Native mode | gcp-firestore |
| Google Cloud | Firestore with MongoDB compatibility | gcp-firestore |
| Google Cloud | Gemini Code Assist | gcp-cloudaicompanion |
| Google Cloud | Gemini Enterprise | gcp-discoveryengine |
| Google Cloud | Gemini for Google Cloud | gcp-cloudaicompanion |
| Google Cloud | Gemini in BigQuery | gcp-cloudaicompanion |
| Google Cloud | Gemini in Colab Enterprise | gcp-cloudaicompanion |
| Google Cloud | Google Cloud NetApp Volumes | gcp-netappvolumes |
| Google Cloud | Google Identity and Access Management (IAM) | gcp-iam |
| Google Cloud | Google Kubernetes Engine (GKE) | gcp-gke |
| Google Cloud | Google VMware Engine | gcp-vmwareengine |
| Google Cloud | Identity-Aware Proxy (IAP) | gcp-iap |
| Google Cloud | Looker | gcp-looker |
| Google Cloud | Looker Studio | gcp-lookerstudio |
| Google Cloud | Looker Studio Pro | gcp-lookerstudio |
| Google Cloud | Managed Microsoft AD | gcp-managedidentities |
| Google Cloud | Managed Service for Apache Kafka | gcp-managedkafka |
| Google Cloud | Memorystore for Memcached | gcp-memcache |
| Google Cloud | Memorystore for Redis | gcp-redis |
| Google Cloud | Memorystore for Redis Cluster | gcp-redis |
| Google Cloud | Model Armor | gcp-securitycenter |
| Google Cloud | Natural Language AI | gcp-language |
| Google Cloud | Network Connectivity Center | gcp-networkconnectivity |
| Google Cloud | Network Intelligence Center | gcp-networkmanagement |
| Google Cloud | Network Security | gcp-networksecurity |
| Google Cloud | NotebookLM Enterprise | gcp-discoveryengine |
| Google Cloud | Oracle Database@Google Cloud | gcp-oracledatabase |
| Google Cloud | Organization Policy | gcp-cloudresourcemanager |
| Google Cloud | Parallelstore | gcp-parallelstore |
| Google Cloud | Policy Troubleshooter | gcp-iam |
| Google Cloud | Previously Contact Center AI Insights | gcp-contactcenterinsights |
| Google Cloud | Previously Conversational Insights | gcp-contactcenterinsights |
| Google Cloud | Private Service Connect | gcp-compute |
| Google Cloud | Pub/Sub | gcp-pubsub |
| Google Cloud | Recommender | gcp-recommender |
| Google Cloud | Secret Manager | gcp-secretmanager |
| Google Cloud | Secure Access Connect | gcp-networksecurity |
| Google Cloud | Security Command Center | gcp-securitycenter |
| Google Cloud | Sensitive Data Protection | gcp-dlp |
| Google Cloud | Service Directory | gcp-servicedirectory |
| Google Cloud | Service Extensions | gcp-trafficdirector |
| Google Cloud | Service Networking | gcp-servicenetworking |
| Google Cloud | Service Routing | gcp-trafficdirector |
| Google Cloud | Spanner | gcp-spanner |
| Google Cloud | Speech-to-Text | gcp-speech |
| Google Cloud | Storage Intelligence | gcp-storage |
| Google Cloud | Traffic Director | gcp-trafficdirector |
| Google Cloud | Vertex AI | gcp-vertex |
| Google Cloud | Vertex AI Search | gcp-discoveryengine |
| Google Cloud | Vertex AI Workbench | gcp-notebooks |
| Google Cloud | Workflows | gcp-workflows |
| Google Cloud | formerly AI Applications | gcp-discoveryengine |
| Google Cloud | formerly Cloud AI Companion | gcp-cloudaicompanion |
| Google Cloud | formerly Vertex AI Agent Builder | gcp-discoveryengine |
| Google Cloud | reCAPTCHA Enterprise | gcp-recaptcha |
| Microsoft Azure | Azure AI Search | azure-search |
| Microsoft Azure | Azure AI Services | azure-cognitiveservices |
| Microsoft Azure | Azure App Service certificates | azure-certificateregistration |
| Microsoft Azure | Azure Application Gateway | azure-applicationgateway |
| Microsoft Azure | Azure Automation | azure-automation |
| Microsoft Azure | Azure Backup | azure-recoveryservices |
| Microsoft Azure | Azure Blobs | azure-storage |
| Microsoft Azure | Azure Cognitive Services | azure-cognitiveservices |
| Microsoft Azure | Azure Compute | azure-compute |
| Microsoft Azure | Azure Container Registry | azure-containerregistry |
| Microsoft Azure | Azure Cosmos DB | azure-cosmosdb |
| Microsoft Azure | Azure Data Lake Storage | azure-storage |
| Microsoft Azure | Azure Database for PostgreSQL | azure-postgresql |
| Microsoft Azure | Azure Event Hubs | azure-eventhubs |
| Microsoft Azure | Azure Files | azure-storage |
| Microsoft Azure | Azure Front Door | azure-frontdoor |
| Microsoft Azure | Azure Functions | azure-web |
| Microsoft Azure | Azure Key Vault | azure-keyvault |
| Microsoft Azure | Azure Kubernetes Service | azure-aks |
| Microsoft Azure | Azure Logic Apps | azure-logic |
| Microsoft Azure | Azure Management | azure-management |
| Microsoft Azure | Azure Monitor | azure-monitor |
| Microsoft Azure | Azure OpenAI Service | azure-cognitiveservices |
| Microsoft Azure | Azure Policy | azure-resourcemanager |
| Microsoft Azure | Azure Queues | azure-storage |
| Microsoft Azure | Azure Recovery Services | azure-recoveryservices |
| Microsoft Azure | Azure Relay | azure-relay |
| Microsoft Azure | Azure Resource Manager | azure-resourcemanager |
| Microsoft Azure | Azure SQL | azure-sql |
| Microsoft Azure | Azure Service Bus | azure-servicebus |
| Microsoft Azure | Azure Storage | azure-storage |
| Microsoft Azure | Azure Subscription | azure-subscription |
| Microsoft Azure | Azure Tables | azure-storage |
| Microsoft Azure | Managed identities for Azure resources | azure-msi |
| Microsoft Azure | Microsoft 365 Copilot | azure-copilot |
| Microsoft Azure | Microsoft Azure portal | azure-portal |
| Microsoft Azure | Microsoft Copilot Studio | azure-copilot |
| Microsoft Azure | Microsoft Entra ID | azure-entra |
| Microsoft Azure | previously Azure Cognitive Search | azure-search |