# cloudItem

Represents a comprehensive cloud security item with security context.

### Examples

```graphql
type CloudItem {
  id: String
  assetName: String
  service: String
  resourceId: String
  cbomId: String
  cbomProvider: String
  resourceType: String
  resourceName: String
  accountId: String
  firstSeen: String
  cloudProvider: String
  serviceCategory: String
  applications: [AppInfo]
  isExposed: String
  imageSource: String
  registryType: String
  registryName: String
  imageScanStatus: String
  exposurePath: [ExposurePathItem]
  accountName: String
  subService: String
  region: String
  resourceTags: JSON
  resourceArn: String
  images: [CloudItemImage]
  relatedIssues: Severities
  issueSeverityBreakdown: [CloudIssueSeverityBreakdown]
  issuesStats: IssuesStats
  cluster: String
  link: String
  imageHash: String
  workloads: [Workload]
  artifactIds: [String]
  attachedIdentities: CbomAttachedIdentities
  compliance: [CloudItemCompliance]
}
```

### Fields

| Field                                                                                                                                                          | Description                                                                                                                                            | Supported fields                                                                                                                                                                                                                                                                                                         |
| -------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| id `String`                                                                                                                                                    | Unique identifier for the cloud item                                                                                                                   |                                                                                                                                                                                                                                                                                                                          |
| assetName `String`                                                                                                                                             | Name of the cloud asset or resource                                                                                                                    |                                                                                                                                                                                                                                                                                                                          |
| service `String`                                                                                                                                               | Cloud service type (EC2, S3, Lambda, etc.)                                                                                                             |                                                                                                                                                                                                                                                                                                                          |
| resourceId `String`                                                                                                                                            | Cloud provider's resource identifier                                                                                                                   |                                                                                                                                                                                                                                                                                                                          |
| cbomId `String`                                                                                                                                                | Cloud Bill of Materials identifier                                                                                                                     |                                                                                                                                                                                                                                                                                                                          |
| cbomProvider `String`                                                                                                                                          | Cloud provider name                                                                                                                                    |                                                                                                                                                                                                                                                                                                                          |
| resourceType `String`                                                                                                                                          | Type of cloud resource                                                                                                                                 |                                                                                                                                                                                                                                                                                                                          |
| resourceName `String`                                                                                                                                          | Name of the cloud resource                                                                                                                             |                                                                                                                                                                                                                                                                                                                          |
| accountId `String`                                                                                                                                             | Cloud account identifier                                                                                                                               |                                                                                                                                                                                                                                                                                                                          |
| firstSeen `String`                                                                                                                                             | Date when the resource was first discovered                                                                                                            |                                                                                                                                                                                                                                                                                                                          |
| cloudProvider `String`                                                                                                                                         | Cloud provider (AWS, Azure, GCP, etc.)                                                                                                                 |                                                                                                                                                                                                                                                                                                                          |
| serviceCategory `String`                                                                                                                                       | Category of the cloud service                                                                                                                          |                                                                                                                                                                                                                                                                                                                          |
| applications [`[AppInfo]`](/api-documentation/api-reference/api--cloud-security/types/objects/app-info.md)                                                     | Applications associated with this cloud resource                                                                                                       | <p>id <code>String</code><br>name <code>String</code><br>type <code>String</code></p>                                                                                                                                                                                                                                    |
| isExposed `String`                                                                                                                                             | Whether the resource is exposed to the internet                                                                                                        |                                                                                                                                                                                                                                                                                                                          |
| imageSource `String`                                                                                                                                           | Source of the container image if applicable                                                                                                            |                                                                                                                                                                                                                                                                                                                          |
| registryType `String`                                                                                                                                          | Type of container registry                                                                                                                             |                                                                                                                                                                                                                                                                                                                          |
| registryName `String`                                                                                                                                          | Name of the container registry                                                                                                                         |                                                                                                                                                                                                                                                                                                                          |
| imageScanStatus `String`                                                                                                                                       | Status of the image security scan                                                                                                                      |                                                                                                                                                                                                                                                                                                                          |
| exposurePath [`[ExposurePathItem]`](/api-documentation/api-reference/api--cloud-security/types/objects/exposure-path-item.md)                                  | Path showing how the resource is exposed                                                                                                               | <p>type <code>String</code><br>name <code>String</code><br>cbomId <code>String</code></p>                                                                                                                                                                                                                                |
| accountName `String`                                                                                                                                           | Human-readable name of the cloud account                                                                                                               |                                                                                                                                                                                                                                                                                                                          |
| subService `String`                                                                                                                                            | Sub-service or component within the main service                                                                                                       |                                                                                                                                                                                                                                                                                                                          |
| region `String`                                                                                                                                                | Cloud region where the resource is located                                                                                                             |                                                                                                                                                                                                                                                                                                                          |
| resourceTags `JSON`                                                                                                                                            | Tags associated with the cloud resource                                                                                                                |                                                                                                                                                                                                                                                                                                                          |
| resourceArn `String`                                                                                                                                           | Amazon Resource Name (ARN) for AWS resources                                                                                                           |                                                                                                                                                                                                                                                                                                                          |
| images [`[CloudItemImage]`](/api-documentation/api-reference/api--cloud-security/types/objects/cloud-item-image.md)                                            | Container images associated with this resource                                                                                                         | <p>name <code>String</code><br>hashes <a href="/pages/eUPzyOcQSmoSZZiiH56S"><code>\[CloudItemImageHash]</code></a><br>tags <code>\[String]</code></p>                                                                                                                                                                    |
| relatedIssues [`Severities`](/api-documentation/api-reference/api--application/types/objects/severities.md)                                                    | Security issues found in this resource, categorized by severity                                                                                        | <p>info <code>Int</code><br>low <code>Int</code><br>medium <code>Int</code><br>high <code>Int</code><br>critical <code>Int</code><br>appox <code>Int</code></p>                                                                                                                                                          |
| issueSeverityBreakdown [`[CloudIssueSeverityBreakdown]`](/api-documentation/api-reference/api--cloud-security/types/objects/cloud-issue-severity-breakdown.md) | Breakdown of issues by policy category with severity details                                                                                           | <p>name <code>String</code><br>severities <a href="/pages/slO1MlaqzcbcMdp3yvLW"><code>Severities</code></a></p>                                                                                                                                                                                                          |
| issuesStats [`IssuesStats`](/api-documentation/api-reference/api--cloud-security/types/objects/issues-stats.md)                                                | Statistics about security issues found                                                                                                                 | <p>totalIssues <code>Int</code><br>sourceTools <a href="/pages/iuwBryjQQYMGSGWB6XHg"><code>\[IssueStat]</code></a><br>categories <a href="/pages/iuwBryjQQYMGSGWB6XHg"><code>\[IssueStat]</code></a><br>severities <a href="/pages/iuwBryjQQYMGSGWB6XHg"><code>\[IssueStat]</code></a></p>                               |
| cluster `String`                                                                                                                                               | Kubernetes cluster name if applicable                                                                                                                  |                                                                                                                                                                                                                                                                                                                          |
| link `String`                                                                                                                                                  | URL link to view the resource in the cloud console                                                                                                     |                                                                                                                                                                                                                                                                                                                          |
| imageHash `String`                                                                                                                                             | Hash of the container image                                                                                                                            |                                                                                                                                                                                                                                                                                                                          |
| workloads [`[Workload]`](/api-documentation/api-reference/api--cloud-security/types/objects/workload.md)                                                       | Kubernetes workloads associated with this resource                                                                                                     | <p>type <code>String</code><br>namespace <code>String</code><br>name <code>String</code><br>cluster <code>String</code><br>region <code>String</code><br>isExposed <code>String</code><br>consoleLink <code>String</code><br>exposurePath <a href="/pages/tMlpo6zYA5V8UBvv4IyM"><code>\[ExposurePathItem]</code></a></p> |
| artifactIds `[String]`                                                                                                                                         | List of artifact identifiers associated with this resource                                                                                             |                                                                                                                                                                                                                                                                                                                          |
| attachedIdentities [`CbomAttachedIdentities`](/api-documentation/api-reference/api--cloud-security/types/objects/cbom-attached-identities.md)                  | CBOM asset related identities                                                                                                                          | <p>users <code>\[String]</code><br>groups <code>\[String]</code><br>servicePrincipals <code>\[String]</code><br>serviceAccounts <code>\[String]</code><br>iamPolicies <code>\[String]</code><br>attachedResources <code>\[String]</code><br>trustedBy <code>\[String]</code></p>                                         |
| compliance [`[CloudItemCompliance]`](/api-documentation/api-reference/api--cloud-security/types/objects/cloud-item-compliance.md)                              | Per-asset compliance results: each entry is a single compliance check evaluated for this asset, with its status and the framework controls it maps to. | <p>checkId <code>String</code><br>status <code>String</code><br>frameworks <code>JSON</code></p>                                                                                                                                                                                                                         |

### References

#### Queries using this object:

* [\<?> getSingleCloudBomItem](/api-documentation/api-reference/api--cloud-security/queries/get-single-cloud-bom-item.md)

#### Fields with this object:

* [{} CloudItemsResponse.cloudItems](/api-documentation/api-reference/api--cloud-security/types/objects/cloud-items-response.md)


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.ox.security/api-documentation/api-reference/api--cloud-security/types/objects/cloud-item.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.