Does Virima Discover Kubernetes, Lambda, and Serverless Cloud Services? A Complete Cloud Coverage Guide
| |

Does Virima Discover Kubernetes, Lambda, and Serverless Cloud Services? A Complete Cloud Coverage Guide

Virima 6.1.1 extends CMDB discovery to modern cloud services that traditional discovery tools miss: Kubernetes clusters on AWS and Azure, serverless compute functions, managed container services, and Azure PaaS. This guide answers the most common questions about Virima’s cloud discovery coverage for Kubernetes, serverless, and PaaS environments.

Does Virima discover AWS EKS Kubernetes clusters?

Yes. Virima’s IT Discovery platform discovers Amazon Elastic Kubernetes Service (EKS) clusters via the AWS API. Discovery captures EKS clusters as configuration items with their cluster name, ARN, Kubernetes version, API endpoint, and status. Virima also discovers EKS managed node groups — including instance type, scaling configuration, and node image version and workloads (Deployments, StatefulSets, DaemonSets) running within the cluster. All discovered EKS resources populate the Virima CMDB with parent-child relationships and are available in ViVID Service Mapping for service dependency visualization.

Does Virima support AWS ECS discovery?

Yes. Virima 6.1.1 discovers AWS Elastic Container Service (ECS) resources including ECS clusters, ECS services, and ECS task definitions via the AWS API. ECS clusters are captured as top-level CIs with their capacity provider configuration. ECS services are captured with their launch type (EC2, Fargate, or External), task definition association, desired task count, and load balancer integration. Task definition families and revisions are captured to enable change management tracking for containerized application deployments.

Can Virima discover Azure AKS?

Yes. Virima 6.1.1 discovers Azure Kubernetes Service (AKS) clusters via the Azure Resource Manager API, as part of Virima’s Azure Discovery integration. Discovery captures AKS clusters as configuration items with their Kubernetes version, DNS prefix, node resource group, provisioning state, and power state. Virima also discovers AKS node pools — including VM size, OS type, node count, autoscaling configuration, and node image version. Workloads running within AKS clusters are discovered using the Kubernetes API, following the same workload-level CI model as EKS. AKS cluster CIs link to their Azure Virtual Network and associated Azure resources in the CMDB relationship graph.

Does Virima discover AWS Lambda functions?

Yes. Virima 6.1.1 discovers AWS Lambda functions as configuration items via the AWS API. Discovery captures function name, ARN, runtime (e.g., python3.12, nodejs22.x, java21), memory allocation, timeout setting, handler, code package type, and associated layers. Lambda function trigger relationships — API Gateway, S3, SQS, EventBridge, and DynamoDB Streams — are captured as CMDB relationships, enabling downstream service dependency mapping through ViVID.

For a deeper look at why serverless assets need configuration management and how Lambda, App Runner, and Batch map to CMDB CIs, see AWS Lambda, App Runner, and Batch in CMDB.

Does Virima support AWS App Runner discovery?

Yes. Virima 6.1.1 discovers AWS App Runner services as configuration items. Discovery captures the service name, ARN, source configuration (container image URI or source repository), CPU and memory allocation, auto-scaling configuration, service URL, and service status. App Runner services are linked in the CMDB to their source container registry (Amazon ECR) and, where applicable, to their VPC connector associations for private resource access.

Does Virima support AWS Batch discovery?

Yes. Virima 6.1.1 discovers AWS Batch resources including compute environments, job queues, and job definitions. Compute environments are captured with their type (EC2, Spot, Fargate), vCPU range, and network configuration. Job queues are captured with their priority and compute environment associations. Job definitions are captured with their revision history, container image, and resource requirements. The parent-child relationships between compute environments, job queues, and job definitions are preserved in the CMDB.

Does Virima discover Azure Functions?

Yes. Virima 6.1.1 discovers Azure Functions (Function Apps) as configuration items via the Azure Resource Manager API. Discovery captures the Function App name, resource ID, runtime stack and version, hosting plan type (Consumption, Premium, or Dedicated), OS type, and associated Azure Storage account. Individual functions within each Function App are captured with their trigger types (HTTP, Timer, Queue, Event Hub, Cosmos DB, Service Bus). Application settings keys — not values — are captured for configuration tracking.

Does Virima support Azure Cosmos DB discovery?

Yes. Virima 6.1.1 discovers Azure Cosmos DB accounts as configuration items via the Azure Resource Manager API. Discovery captures the account name, resource ID, API type (NoSQL, MongoDB, Cassandra, Gremlin, or Table), consistency level, replication regions, multi-region write configuration, throughput provisioning type, and backup policy. Private endpoint associations are captured as CMDB relationships. Cosmos DB CIs participate in ViVID service maps, reflecting their role as data infrastructure supporting applications and business services.

For the full guide to Azure PaaS CMDB discovery — including Key Vault, Azure Functions, and Storage Accounts — see Azure Cosmos DB, Functions, and Key Vault in CMDB: Closing the PaaS Discovery Gap.

Does Virima discover Azure Key Vault?

Yes. Virima 6.1.1 discovers Azure Key Vault instances as configuration items. Discovery captures the vault name, resource ID, location, SKU (Standard or Premium), access policies, soft delete and purge protection settings, firewall rules, and private endpoint associations. Certificate metadata — names and expiration dates — is captured to support compliance tracking and proactive certificate rotation. Secret and key names (not values) are captured to enable configuration relationship mapping without exposing sensitive data.

Does Virima discover Azure Storage Accounts?

Yes. Virima 6.1.1 discovers Azure Storage Accounts as configuration items via the Azure Resource Manager API. Discovery captures the account name, resource ID, account kind, replication type (LRS, ZRS, GRS, GZRS), access tier, minimum TLS version, public access configuration, and soft delete retention settings. Private endpoint associations are captured as CMDB relationships. Storage account CIs support data governance by providing a centralized CMDB inventory of storage infrastructure and its security configuration.


What AWS services does Virima support for CMDB import?

Virima supports CMDB discovery for a broad range of AWS services across compute, container, serverless, networking, and database categories. Core AWS coverage includes EC2 instances, VPCs, security groups, ELB/ALB load balancers, RDS databases, S3 buckets, and IAM roles. Virima 6.1.1 expands this to include EKS clusters and node groups, ECS clusters, services and task definitions, Lambda functions, App Runner services, and AWS Batch compute environments, job queues, and job definitions. For the complete current AWS service list, the coverage table below provides a structured reference.

What Azure services does Virima support for CMDB discovery?

Virima supports CMDB discovery for Azure infrastructure across IaaS and PaaS service categories. Core Azure coverage includes Azure Virtual Machines, Virtual Networks, Network Security Groups, Azure Load Balancers, Azure SQL databases, and Azure resource groups. Virima 6.1.1 expands this to include AKS clusters and node pools, Azure Functions (Function Apps), Azure Cosmos DB accounts, Azure Key Vault instances, Azure Storage Accounts, and Azure Database for PostgreSQL Flexible Server. All Azure PaaS CIs are available in ViVID Service Mapping alongside IaaS resources.

How does Virima handle ephemeral Kubernetes workloads in CMDB?

Virima’s Kubernetes discovery operates at the workload level, not the individual pod level. Pods are too ephemeral for CMDB management — they are created and destroyed constantly during deployments, autoscaling, and node recompaction. Instead, Virima discovers stable workload objects (Deployments, StatefulSets, DaemonSets, CronJobs) as CIs, capturing the current container image, replica count, namespace, and labels. This approach keeps the CMDB current and meaningful without generating noise from pod churn. For stateful workloads (StatefulSets), individual pod replicas with persistent storage can be captured as child CIs of the parent workload.

For a comprehensive technical guide to Kubernetes CMDB discovery — including CI modeling best practices, change impact analysis, and service mapping — see our Kubernetes CMDB Discovery guide.

Cloud Service Coverage Table

AWS Services — Virima 6.1.1 CMDB Discovery Coverage

AWS ServiceCI TypeDiscovery MethodVirima Coverage
EC2 InstancesCompute ServerAWS EC2 APIYes
EKS ClustersKubernetes ClusterAWS EKS APIYes (6.1.1)
EKS Managed Node GroupsNode GroupAWS EKS APIYes (6.1.1)
Kubernetes Workloads (EKS)Workload CIKubernetes APIYes (6.1.1)
ECS ClustersContainer ClusterAWS ECS APIYes (6.1.1)
ECS ServicesContainer ServiceAWS ECS APIYes (6.1.1)
ECS Task DefinitionsTask DefinitionAWS ECS APIYes (6.1.1)
AWS Lambda FunctionsServerless FunctionAWS Lambda APIYes (6.1.1)
AWS App Runner ServicesManaged Container ServiceAWS App Runner APIYes (6.1.1)
AWS Batch Compute EnvironmentsBatch ComputeAWS Batch APIYes (6.1.1)
AWS Batch Job QueuesBatch QueueAWS Batch APIYes (6.1.1)
AWS Batch Job DefinitionsBatch Job DefinitionAWS Batch APIYes (6.1.1)
VPCsNetworkAWS EC2/VPC APIYes
Security GroupsNetwork SecurityAWS EC2 APIYes
Elastic Load Balancers (ALB/NLB)Load BalancerAWS ELB APIYes
RDS Database InstancesDatabaseAWS RDS APIYes
S3 BucketsStorageAWS S3 APIYes

Azure Services — Virima 6.1.1 CMDB Discovery Coverage

Azure ServiceCI TypeDiscovery MethodVirima Coverage
Azure Virtual MachinesCompute ServerAzure ARM APIYes
Azure AKS ClustersKubernetes ClusterAzure ARM APIYes (6.1.1)
Azure AKS Node PoolsNode PoolAzure ARM APIYes (6.1.1)
Kubernetes Workloads (AKS)Workload CIKubernetes APIYes (6.1.1)
Azure Functions (Function Apps)Serverless FunctionAzure ARM APIYes (6.1.1)
Azure Cosmos DB AccountsPaaS DatabaseAzure ARM APIYes (6.1.1)
Azure Key VaultSecurity InfrastructureAzure ARM APIYes (6.1.1)
Azure Storage AccountsStorageAzure ARM APIYes (6.1.1)
Azure Database for PostgreSQLPaaS DatabaseAzure ARM APIYes (6.1.1)
Azure Virtual NetworksNetworkAzure ARM APIYes
Network Security GroupsNetwork SecurityAzure ARM APIYes
Azure Load BalancersLoad BalancerAzure ARM APIYes
Azure SQL DatabasePaaS DatabaseAzure ARM APIYes
Azure Resource GroupsOrganizationalAzure ARM APIYes

See Virima’s Cloud Discovery in Action

Virima 6.1.1 brings Kubernetes, serverless, and PaaS services into your CMDB — giving IT operations and platform engineering teams the configuration visibility they need across modern cloud environments.

Schedule a Demo at Virima.com

Similar Posts