CloudGraph
CloudGraph. We assess it under Tool in the garden.
Blurb
One API for all messaging channels. Send SMS, WhatsApp, and RCS messages with automated routing, compliance, and formatting. Start building today.
Summary
What it is: CLI and local GraphQL endpoint over scanned cloud accounts; query resources and edges across providers in one schema.
When to use: quick inventory across AWS plus GCP; compare stage vs prod in one query; ad hoc compliance posture reports; explore relationships (e.g. security groups to instances).
When to skip: need continuous agentless SaaS CNAPP with ticketing workflows; org standardized on Kubescape or a vendor CSPM; GraphQL ops overhead is unwanted.
Key features: CIS benchmark packs, historical snapshots, validated queries, enhanced AWS billing and CloudWatch fields (per upstream docs).
Details
| Topic | Notes |
|---|---|
| Install | See CloudGraph CLI |
| Scan | Connect credentials per cloud; index into local GraphQL |
| Query | GraphQL over unified schema |
Versus Kubescape: Kubescape targets Kubernetes and supply-chain posture with admission and CI hooks; CloudGraph emphasizes cross-cloud GraphQL inventory and CSPM-style checks.
References