Software Secure Workload
Activity Configure

Labels Generated by Cloud Connectors

These labels apply to data from AWS and Azure. The source for these labels is workloads and network interfaces of an AWS VPC or Azure VNet. The tags from the source are merged and displayed in Secure Workload. For example, if the workload tag is

env: prod
and the network interface tag is
env: prod
, the label value in Secure Workload is
prod,test
, which is displayed under the orchestrator_env column on the respective connector page.

For labels specific to AKS, EKS, and GKE, see also Labels Related to Kubernetes Clusters.

Table 1. Labels in Inventory Gathered Using a Cloud Connector

Key

Value

orchestrator_system/orch_type

AWS or Azure

orchestrator_system/cluster_name

<Cluster_name is the name given by the user for this connector’s configuration>

orchestrator_system/name

<Name of connector>

orchestrator_system/cluster_id

<Virtual network ID>

Instance-Specific Labels

The following labels are specific to each node:

Key

Value

orchestrator_system/workload_type

vm

orchestrator_system/machine_id

<InstanceID assigned by the platform>

orchestrator_system/machine_name

<PublicDNS(FQDN) given to this node by AWS> –or– <InstanceName in Azure>

orchestrator_system/segmentation_enabled

<Flag to determine if segmentation is enabled on the inventory>

orchestrator_system/virtual_network_id

<ID of virtual network the inventory belongs to>

orchestrator_system/virtual_network_name

<Name of virtual network the inventory belongs to>

orchestrator_system/interface_id

<Identifier of elastic network interface attached to this inventory>

orchestrator_system/region

<Region the inventory belongs to>

orchestrator_system/resource_group

(This tag applies to Azure inventory only)

orchestrator_‘<Tag Key>‘

<Tag Value> Key-value pair for any number of custom tags assigned to inventory in the cloud portal.