# AWS Inventory schema ERD

Table and field reference for the Fivetran AWS Inventory connector.

## Table & Field Reference

### lambda_vpc_security_group

| Column | Type | Keys |
| --- | --- | --- |
| security_group_id | String | PK |
| function_arn | String | PK, FK |

### account_password_policy

| Column | Type | Keys |
| --- | --- | --- |
| account_id | String | PK, FK |
| allow_users_to_change_password | Boolean |  |
| expire_passwords | Boolean |  |
| hard_expiry | Boolean |  |
| max_password_age | Int |  |
| minimum_password_length | Int |  |
| password_reuse_prevention | Int |  |
| require_lowercase_characters | Boolean |  |
| require_numbers | Boolean |  |
| require_symbols | Boolean |  |
| require_uppercase_characters | Boolean |  |

### vpc

| Column | Type | Keys |
| --- | --- | --- |
| id | String | PK |
| cidr_block | String |  |
| cidr_block_association_set | Json |  |
| dhcp_options_id | String |  |
| instance_tenancy | String |  |
| ipv_6_cidr_block_association_set | Json |  |
| is_default | Boolean |  |
| state | String |  |
| tags | Json |  |

### account_virtual_mfa_device

| Column | Type | Keys |
| --- | --- | --- |
| serial_number | String | PK |
| base_32_string_seed | Json |  |
| enable_date | String |  |
| q_rcode_png | Json |  |
| user | Json |  |

### iam_user

| Column | Type | Keys |
| --- | --- | --- |
| id | String | PK |
| arn | String |  |
| create_date | Instant |  |
| path | String |  |
| user_name | String |  |

### iam_inline_user_policy

| Column | Type | Keys |
| --- | --- | --- |
| policy_name | String | PK, FK |
| user_id | String | PK, FK |

### route_53_hosted_zone

| Column | Type | Keys |
| --- | --- | --- |
| id | String | PK |
| name | String |  |

### config_event

| Column | Type | Keys |
| --- | --- | --- |
| _file | String | PK |
| _line | Long | PK |
| _modified | Instant | PK |
| index | Long | PK |
| arn | String |  |
| availability_zone | String |  |
| aws_account_id | String |  |
| aws_region | String |  |
| configuration | Json |  |
| configuration_item_capture_time | Instant |  |
| configuration_item_status | String |  |
| configuration_item_version | String |  |
| configuration_state_id | Long |  |
| configuration_state_md_5_hash | String |  |
| hash_raw | Long |  |
| raw | Json |  |
| related_events | Json |  |
| relationships | Json |  |
| resource_creation_time | Instant |  |
| resource_id | String |  |
| resource_name | String |  |
| resource_type | String |  |
| supplementary_configuration | Json |  |
| tags | Json |  |

### lambda_function

| Column | Type | Keys |
| --- | --- | --- |
| arn | String | PK |
| vpc_config_id | String | FK |
| code_sha_256 | String |  |
| code_size | Long |  |
| dead_letter_config_target_arn | String |  |
| description | String |  |
| destination_config_on_failure_destination | String |  |
| destination_config_on_success_destination | String |  |
| event_invoke_config_max_event_age_in_seconds | Int |  |
| event_invoke_config_max_retry_attempt | Int |  |
| function_name | String |  |
| handler | String |  |
| kms_key_arn | String |  |
| last_modified | String |  |
| last_update_status | String |  |
| last_update_status_reason | String |  |
| last_update_status_reason_code | String |  |
| master_arn | String |  |
| memory_size | Int |  |
| package_type | String |  |
| policy | String |  |
| policy_revision_id | String |  |
| revision_id | String |  |
| role | String |  |
| runtime | String |  |
| signing_job_arn | String |  |
| signing_profile_version_arn | String |  |
| state | String |  |
| state_reason | String |  |
| state_reason_code | String |  |
| timeout | Int |  |
| tracing_config_response_mode | String |  |
| version | String |  |

### lambda_vpc_subnet

| Column | Type | Keys |
| --- | --- | --- |
| subnet_id | String | PK |
| function_arn | String | PK, FK |

### account_summary

| Column | Type | Keys |
| --- | --- | --- |
| account_id | String | PK |

### iam_policy_role

| Column | Type | Keys |
| --- | --- | --- |
| role_id | String | PK |
| policy_arn | String | PK, FK |
| role_name | String |  |

### iam_policy_version

| Column | Type | Keys |
| --- | --- | --- |
| version_id | String | PK |
| policy_arn | String | PK, FK |
| create_date | Instant |  |
| document | String |  |
| is_default_version | Boolean |  |

### cloud_trail

| Column | Type | Keys |
| --- | --- | --- |
| name | String | PK |
| kms_key_id | String | FK |
| s_3_bucket_name | String | FK |
| cloud_watch_logs_log_group_arn | String |  |
| cloud_watch_logs_role_arn | String |  |
| has_custom_event_selectors | Boolean |  |
| has_insight_selectors | Boolean |  |
| home_region | String |  |
| include_global_service_events | Boolean |  |
| is_multi_region_trail | Boolean |  |
| is_organization_trail | Boolean |  |
| log_file_validation_enabled | Boolean |  |
| s_3_key_prefix | String |  |
| sns_topic_arn | String |  |
| trail_arn | String |  |

### iam_user_access_key

| Column | Type | Keys |
| --- | --- | --- |
| access_key_id | String | PK |
| user_id | String | PK, FK |
| create_date | Instant |  |
| status | String |  |

### load_balancer_security_group

| Column | Type | Keys |
| --- | --- | --- |
| load_balancer_arn | String | PK, FK |
| security_group_id | String | PK, FK |

### load_balancer

| Column | Type | Keys |
| --- | --- | --- |
| arn | String | PK |
| vpc_id | String | FK |
| canonical_hosted_zone_id | String |  |
| created_time | Instant |  |
| d_nsname | String |  |
| ip_address_type | String |  |
| load_balancer_name | String |  |
| schema | String |  |
| state_code | String |  |
| state_reason | String |  |
| type | String |  |

### lambda_layer

| Column | Type | Keys |
| --- | --- | --- |
| arn | String | PK |
| function_arn | String | PK, FK |
| code_size | Long |  |
| signing_job_arn | String |  |
| signing_profile_version_arn | String |  |

### kms_key

| Column | Type | Keys |
| --- | --- | --- |
| key_id | String | PK |
| key_arn | String |  |
| key_rotation_enabled | Boolean |  |

### s_3_bucket_acl

| Column | Type | Keys |
| --- | --- | --- |
| grantee | String | PK |
| bucket_name | String | PK, FK |
| permission | String |  |

### config_recorder

| Column | Type | Keys |
| --- | --- | --- |
| name | String | PK |
| recording_group | Json |  |
| role_arn | String |  |

### iam_managed_user_policy

| Column | Type | Keys |
| --- | --- | --- |
| policy_name | String | PK, FK |
| user_id | String | PK, FK |
| policy_arn | String |  |

### security_group_tag

| Column | Type | Keys |
| --- | --- | --- |
| key | String | PK |
| group_id | String | PK, FK |
| value | String |  |

### cloud_trail_status

| Column | Type | Keys |
| --- | --- | --- |
| trail_name | String | PK, FK |
| is_logging | Boolean |  |
| latest_cloud_watch_logs_delivery_error | String |  |
| latest_cloud_watch_logs_delivery_time | Instant |  |
| latest_delivery_attempt_succeeded | String |  |
| latest_delivery_attempt_time | Instant |  |
| latest_delivery_error | String |  |
| latest_delivery_time | Instant |  |
| latest_digest_delivery_error | String |  |
| latest_digest_delivery_time | Instant |  |
| latest_notification_attempt_succeeded | String |  |
| latest_notification_attempt_time | Instant |  |
| latest_notification_error | String |  |
| latest_notification_time | Instant |  |
| start_logging_time | Instant |  |
| stop_logging_time | Instant |  |
| time_logging_started | String |  |
| time_logging_stopped | String |  |

### security_group

| Column | Type | Keys |
| --- | --- | --- |
| id | String | PK |
| vpc_id | String | FK |
| description | String |  |
| group_name | String |  |
| ip_permissions | Json |  |
| ip_permissions_egress | Json |  |
| owner_id | String |  |

### iam_policy

| Column | Type | Keys |
| --- | --- | --- |
| policy_id | String | PK |
| arn | String |  |
| attachment_count | Int |  |
| create_date | Instant |  |
| default_version_id | String |  |
| description | String |  |
| is_attachable | Boolean |  |
| path | String |  |
| permissions_boundary_usage_count | Int |  |
| policy_name | String |  |
| update_date | Instant |  |

### instance

| Column | Type | Keys |
| --- | --- | --- |
| id | String | PK |
| iam_instance_profile_id | String | FK |
| image_id | String | FK |
| vpc_id | String | FK |
| ami_launch_index | String |  |
| architecture | String |  |
| client_token | String |  |
| cpu_option_core_count | Int |  |
| cpu_option_threads_per_core | Int |  |
| ebs_optimized | Boolean |  |
| ena_support | Boolean |  |
| hypervisor | String |  |
| iam_instance_profile_arn | String |  |
| instance_lifecycle | String |  |
| instance_type | String |  |
| kernel_id | String |  |
| key_name | String |  |
| launch_time | String |  |
| monitoring_state | String |  |
| platform | String |  |
| private_dns_name | String |  |
| private_ip_address | String |  |
| public_dns_name | String |  |
| public_ip_address | String |  |
| ramdisk_id | String |  |
| root_device_name | String |  |
| root_device_type | String |  |
| source_dest_check | Boolean |  |
| spot_instance_request_id | String |  |
| sriov_net_support | String |  |
| state_code | Int |  |
| state_name | String |  |
| state_reason_code | String |  |
| state_reason_message | String |  |
| state_transition_reason | String |  |
| subnet_id | String |  |
| virtualization_type | String |  |
| placement_** |  |  |

### account_credential_report

| Column | Type | Keys |
| --- | --- | --- |
| account_id | String | PK, FK |
| description | String |  |
| state | String |  |

### image

| Column | Type | Keys |
| --- | --- | --- |
| id | String | PK |
| architecture | String |  |
| description | String |  |
| hypervisor | String |  |
| image_location | String |  |
| image_owner_alias | String |  |
| image_owner_id | String |  |
| image_state | String |  |
| image_type | String |  |
| is_public | Boolean |  |
| kernel_id | String |  |
| name | String |  |
| root_device_name | String |  |
| root_device_type | String |  |
| virtualization_type | String |  |

### iam_user_mfa_device

| Column | Type | Keys |
| --- | --- | --- |
| serial_number | String | PK, FK |
| user_id | String | PK, FK |
| enable_date | Instant |  |

### s_3_bucket

| Column | Type | Keys |
| --- | --- | --- |
| name | String | PK |
| owner_id | String | FK |
| creation_date | Instant |  |
| log_file_prefix | String |  |
| logging_destination_bucket_name | String |  |
| owner_display_name | String |  |
| policy_text | String |  |

### iam_policy_group

| Column | Type | Keys |
| --- | --- | --- |
| group_id | String | PK |
| policy_arn | String | PK, FK |
| group_name | String |  |

### cloud_trail_event_selector

| Column | Type | Keys |
| --- | --- | --- |
| index | Int | PK |
| trail_name | String | PK, FK |
| data_resources | Json |  |
| exclude_management_event_sources | Json |  |
| include_management_events | Boolean |  |
| read_write_type | String |  |

### route_53_resource_record_set

| Column | Type | Keys |
| --- | --- | --- |
| name | String | PK |
| type | String | PK |
| hosted_zone_id | String | PK, FK |

### iam_user_group

| Column | Type | Keys |
| --- | --- | --- |
| group_id | String | PK |
| user_id | String | PK, FK |
| arn | String |  |
| create_date | Instant |  |
| group_name | String |  |
| path | String |  |

### account_alias

| Column | Type | Keys |
| --- | --- | --- |
| alias_name | String | PK |
| account_id | String | PK, FK |

### iam_user_login_profile

| Column | Type | Keys |
| --- | --- | --- |
| user_id | String | PK, FK |
| create_date | Instant |  |
| password_reset_required | Boolean |  |

## Relationships

- lambda_vpc_security_group(function_arn) → lambda_function(arn)
- account_password_policy(account_id) → account_summary(account_id)
- iam_inline_user_policy(user_id) → iam_user(id)
- iam_inline_user_policy(policy_name) → iam_policy(policy_id)
- lambda_function(vpc_config_id) → vpc(id)
- lambda_vpc_subnet(function_arn) → lambda_function(arn)
- iam_policy_role(policy_arn) → iam_policy(policy_id)
- iam_policy_version(policy_arn) → iam_policy(policy_id)
- cloud_trail(kms_key_id) → kms_key(key_id)
- cloud_trail(s_3_bucket_name) → s_3_bucket(name)
- iam_user_access_key(user_id) → iam_user(id)
- load_balancer_security_group(load_balancer_arn) → load_balancer(arn)
- load_balancer_security_group(security_group_id) → security_group(id)
- load_balancer(vpc_id) → vpc(id)
- lambda_layer(function_arn) → lambda_function(arn)
- s_3_bucket_acl(bucket_name) → s_3_bucket(name)
- iam_managed_user_policy(user_id) → iam_user(id)
- iam_managed_user_policy(policy_name) → iam_policy(policy_id)
- security_group_tag(group_id) → security_group(id)
- cloud_trail_status(trail_name) → cloud_trail(name)
- security_group(vpc_id) → vpc(id)
- instance(image_id) → image(id)
- instance(vpc_id) → vpc(id)
- instance(iam_instance_profile_id) → iam_user(id)
- account_credential_report(account_id) → account_summary(account_id)
- iam_user_mfa_device(user_id) → iam_user(id)
- iam_user_mfa_device(serial_number) → account_virtual_mfa_device(serial_number)
- s_3_bucket(owner_id) → iam_user(id)
- iam_policy_group(policy_arn) → iam_policy(policy_id)
- cloud_trail_event_selector(trail_name) → cloud_trail(name)
- route_53_resource_record_set(hosted_zone_id) → route_53_hosted_zone(id)
- iam_user_group(user_id) → iam_user(id)
- account_alias(account_id) → account_summary(account_id)
- iam_user_login_profile(user_id) → iam_user(id)