After you configure Discovery for Amazon Web Services (AWS) infrastructures, you can configure Cloud Discovery & Visibility to continuously monitor your Amazon Web Services (AWS) environment for changes to VPC networks, subnets, EC2 instances, ELBv2 (load balancers), Route 53, and VPC endpoints. This is called visibility.
Tip: To set up Visibility jobs, while setting up Discovery, set the Monitoring
Options mode to Real time updates. When you start
Discovery, CDV then creates appropriate Visibility jobs, adds them to a Visibility
Manager, and displays it in the Visibility page.
Only certain actions are tracked by AWS Visibility jobs. These actions are as follows:
- VPC
- Creating a new VPC
- Associating a CIDR (IPv4 and IPv6)
- Disassociating a CIDR (IPv4 and IPv6)
- Deleting a VPC
- Subnet
- Creating a new Subnet
- Associating a CIDR (IPv6)
- Disassociating a CIDR (IPv6)
- Deleting a Subnet
- EC2 instance
- Creating a new EC2 instance
- Stopping an EC2 instance
- Starting an EC2 instance
- Terminating an EC2 instance
- ELBv2
- Creating a new load balancer
- Deleting an existing load balancer
- Route 53
- Creating a public or private hosted zone
- Creating a resource record
- Editing an existing resource record
- Associating a VPC
- Disassociating a VCP
- Deleting an existing resource record
- Deleting an existing public or private hosted zone
Note: Cloud Discovery & Visibility Route 53 does not support visibility for records where the type is edited. - VPC Endpoint
- Creating a VPC endpoint
- Deleting a VPC endpoint
- Associating a CIDR (IPv4) to a VPC endpoint
- Disassociating a CIDR (IPv4) from a VPC endpoint
- Associating a security group to a VPC endpoint
- Disassociating a security group from a VPC endpoint
- Elastic Network Interface (ENI)
- Creating an ENI
- Deleting an ENI
- Attaching an ENI to an EC2 instance
- Detacting an ENI from an EC2 instance or EKS cluster
- Assigning or unassigning one or more IPv4/IPv6 addresses, IPv4 prefix, or IPv6 prefix delegations from a network interface
- Elastic Kubernetes Service (EKS)
- Creating a Cluster
- Deleting a Cluster
- Creating a Node Group
- Deleting a Node Group
- Updating scaling of a Node Group
- Elastic Network Interface (ENI)
- Creating an ENI
- Deleting an ENI
- Attaching an ENI to an EC2 instance
- Detaching an ENI from an EC2 instance or EKS cluster
- Assigning or unassigning one or more IPv4/IPv6 addresses, an IPv4 prefix, or IPv6 prefix delegations from a network interface