Resource Collection Schedule

New Resource Collection: All resources are collected periodically to discover new resources. "New resources" refer to the following cases:

• Resources created for the first time in a new Region

• New Account connected to OpsNow

• Using a new Product that was not previously used

CSP	Collection Cycle	Collection Times (UTC)
AWS	6 hours	2, 8, 14, 20
Azure	6 hours	3, 9, 15, 21
GCP	6 hours	1, 7, 13, 19

Regular Collection

AWS

Collection Time Notation

• 55 → Collected at 55 minutes past every hour (e.g., 00:55, 01:55, 02:55...)

• 10* → Collected every 10 minutes (e.g., 00:10, 00:20, 00:30...)

• 5* → Collected every 5 minutes (e.g., 00:05, 00:10, 00:15...)

Product	Collection Schedule
AMIs	55
API Gateway API Key	25
API Gateway Client Certificate	25
API Gateway Domain Name	25
API Gateway Rest API	10*
API Gateway Usage Plan	25
API Gateway VPC Link	25
Auto Scaling Groups	20
Auto Scaling Instances	20
Client VPN Endpoint	45
Target Networks	45
Cloud Front	30
Amazon CloudSearch	50
Cloud Watch Log Groups	45
CodeDeploy Application	20
Code Pipeline	10
Direct Connect	40
Database Migration Service	40
DynamoDB	10*
EBS	10*
EC2	5*
ECS Cluster	20
ECS Service	20
ECS Task	10*
EFS	55
EIP	10*
EKS	0
Elastic Cache	10*
Elasticsearch Service	10*
EMR	10*
Firewall Manager Policy	50
Amazon Glacier	10
AWS Glue	55
AWS Glue	55
Internet Gateways	45
IVS Channel	30
IVS Chat Room	30
Amazon Kafka	5
Kinesis Data Analytics	15
Kinesis Data Streams	15
Kinesis Data Firehose	15
Kinesis Video Streams	15
KMS	15
Lambda	10*
Launch Configurations	5
Launch Template	5
ELB	10
Media Convert	25
Media Live Channel	5*
Media Live Input	5*
Media Store	5*
Amazon MQ	30
Managed Workflows for Apache Airflow	55
NAT Gateways	50
Network ACLs	0
Network Interface	55
RDS	5*
RDS Cluster	10*
RDS RI	30
RDS Snapshot	10
Redshift	10*
EC2 RI	30
Route Tables	50
Route53	30
S3	10
SageMaker App	5*
SageMaker EndPoint	10
SageMaker NoteBook Instance	15
SageMaker Processing Job	30
SageMaker Training Job	20
SageMaker Transform Job	25
Savings Plans	40
Security Groups	45
Snapshot	45
Simple Queue Service	10
Subnets	55
Transfer For SFTP	5
Transit Gateway	5
Transit Gateway Attachments	30
VPC Endpoint	20
VPC Flow Log	20
VPC	55
VPN	20
WAF Rule Group	40
WAF Web ACL	40
Workspace Bundle	30
Workspace Directorie	30
Workspace Image	30
Workspace IP Group	30
Workspace	30

Azure

Collection Time Notation

• 55 → Collected at 55 minutes past every hour (e.g., 00:55, 01:55, 02:55...)

• 10* → Collected every 10 minutes (e.g., 00:10, 00:20, 00:30...)

• 5* → Collected every 5 minutes (e.g., 00:05, 00:10, 00:15...)

Product	Collection Schedule
Batch Account	50
Redis	50
CDN Profiles	50
Disk	10
Compute Image	10
Compute Snapshots	30
VM	10*
VM Scale set	30
Data Factory	25
MariaDB Server	15
MySQL Flexible Server	15
MySQL Server	15
PostgreSQL Flexible Server	15
PostgreSQL Server	15
DB Account	15
Namespace	25
Insight Component	25
Insight Metric Alerts	25
Application Gateway	45
DDOS Protection Plan	45
Load Balancer	55
Local Network Gateway	55
Network Interface	55
Network Security Group	55
Network Watcher	55
Public IP Address	5
Route Table	5
Traffic Manager Profile	5
Network Gateway	5
Virtual Network	5
workspace	25
Vault	25
searchService	35
Managed Instance	10
SQL Server	25
Virtual Cluster	35
Storage Account	35

GCP

Collection Time Notation

• 55 → Collected at 55 minutes past every hour (e.g., 00:55, 01:55, 02:55...)

• 10* → Collected every 10 minutes (e.g., 00:10, 00:20, 00:30...)

• 5* → Collected every 5 minutes (e.g., 00:05, 00:10, 00:15...)

Product	Collection Schedule
Bigquery Dataset	40
Bigtable Instance	50
IP Addresses	15
AutoScaler	10
Cloud Function	15
Disk	20*
Firewall	30
Health Check	10
Image	30
VM Instance	20*
Instance Group	20*
Instance Group Manager	20*
Instance Template	20*
VPC Network	30
Routes	30
Snapshots	35
Subnet	30
VPN Gateway	15
VPN Tunnel	15
Dataflow Job	20
Dataproc Cluster	20
Kubernetes Cluster	40
Redis	40
Pub/Sub Snapshot	5
Pub/Sub Subscription	5
Pub/Sub Topic	5
SQL Instance	50
Storage	20