Service Coverage
Firefly Applications Backup & DR captures continuous snapshots of your applications and the infrastructure they depend on, with full dependency graphs, and restores complete environments as Terraform code.
This page lists every resource type Firefly protects, by provider, with the matching Terraform resource name. Coverage expands continuously — if a resource type you need is missing, see Contacting Support.
Firefly protects 190 resource types across 48 AWS services.
Amazon API Gateway
HTTP APIs
aws_apigatewayv2_api
Supported
API Gateway Rest API
aws_api_gateway_rest_api
Supported
API Gateway Domain Name
aws_api_gateway_domain_name
Supported
API Gateway VPC Link
aws_api_gateway_vpc_link
Supported
API Gateway API Key
aws_api_gateway_api_key
Supported
API Gateway Usage Plan
aws_api_gateway_usage_plan
Supported
API Gateway Authorizer
aws_api_gateway_authorizer
Supported
API Gateway Integration
aws_api_gateway_integration
Supported
API Gateway v2 Route
aws_apigatewayv2_route
Supported
API Gateway Stage
aws_api_gateway_stage
Supported
API Gateway v2 Stage
aws_apigatewayv2_stage
Supported
API Gateway v2 Integration
aws_apigatewayv2_integration
Supported
API Gateway v2 Authorizer
aws_apigatewayv2_authorizer
Supported
Amazon Aurora/RDS
Database Clusters (Provisioned & Serverless v2)
aws_rds_cluster
Supported
RDS Cluster Instance
aws_rds_cluster_instance
Supported
RDS Cluster Parameter Group
aws_rds_cluster_parameter_group
Supported
DB Cluster Snapshot
aws_db_cluster_snapshot
Supported
DB Parameter Group
aws_db_parameter_group
Supported
DB Subnet Group
aws_db_subnet_group
Supported
DB Proxy
aws_db_proxy
Supported
Amazon Certificate Manager (ACM)
Certificates
aws_acm_certificate
Supported
Amazon Cloud Map
Cloud Map Namespaces
aws_service_discovery_private_dns_namespace
Supported
Service Discovery Service
aws_service_discovery_service
Supported
Amazon CloudWatch
CloudWatch Alarms
aws_cloudwatch_metric_alarm
Supported
CloudWatch Log Group
aws_cloudwatch_log_group
Supported
Amazon Cognito
Cognito User Pools
aws_cognito_user_pool
Supported
Cognito User Pool Client
aws_cognito_user_pool_client
Supported
Cognito Identity Provider
aws_cognito_identity_provider
Supported
Amazon DocumentDB
Database Clusters
aws_docdb_cluster
Supported
DocDB Cluster Instance
aws_docdb_cluster_instance
Supported
DocDB Cluster Parameter Group
aws_docdb_cluster_parameter_group
Supported
Amazon DynamoDB
DynamoDB Tables
aws_dynamodb_table
Supported
Amazon ElastiCache
Cache Clusters
aws_elasticache_cluster
Supported
ElastiCache Replication Group
aws_elasticache_replication_group
Supported
ElastiCache Parameter Group
aws_elasticache_parameter_group
Supported
ElastiCache Subnet Group
aws_elasticache_subnet_group
Supported
ElastiCache User
aws_elasticache_user
Supported
ElastiCache User Group
aws_elasticache_user_group
Supported
AWS Elastic Beanstalk
Elastic Beanstalk Applications
aws_elastic_beanstalk_application
Supported
Elastic Beanstalk Application Version
aws_elastic_beanstalk_application_version
Supported
Elastic Beanstalk Configuration Template
aws_elastic_beanstalk_configuration_template
Supported
Elastic Beanstalk Environment
aws_elastic_beanstalk_environment
Supported
Amazon FSx for NetApp ONTAP
File Systems
aws_fsx_ontap_file_system
Supported
FSx ONTAP Volume
aws_fsx_ontap_volume
Supported
FSx ONTAP Storage Virtual Machine
aws_fsx_ontap_storage_virtual_machine
Supported
Amazon FSx for Windows File Servers
File Systems
aws_fsx_windows_file_system
Supported
Amazon OpenSearch
OpenSearch Domains
aws_opensearch_domain
Supported
OSIS Pipeline
aws_osis_pipeline
Supported
Elasticsearch Domain
aws_elasticsearch_domain
Supported
Amazon Redshift
Redshift Cluster
aws_redshift_cluster
Supported
Redshift Parameter Group
aws_redshift_parameter_group
Supported
Redshift Subnet Group
aws_redshift_subnet_group
Supported
Redshift Serverless Namespace
aws_redshiftserverless_namespace
Supported
Redshift Serverless Workgroup
aws_redshiftserverless_workgroup
Supported
Amazon Relational Database Service (RDS)
Database Instances
aws_db_instance
Supported
DB Option Group
aws_db_option_group
Supported
DB Parameter Group
aws_db_parameter_group
Supported
DB Subnet Group
aws_db_subnet_group
Supported
DB Proxy
aws_db_proxy
Supported
DB Snapshot
aws_db_snapshot
Supported
AWS Secrets Manager
Secrets
aws_secretsmanager_secret
Supported
Amazon Simple Storage Service (S3)
S3 Buckets
aws_s3_bucket
Supported
S3 Bucket Policy
aws_s3_bucket_policy
Supported
S3 Bucket Public Access Block
aws_s3_bucket_public_access_block
Supported
S3 Bucket Versioning
aws_s3_bucket_versioning
Supported
S3 Bucket Server Side Encryption Configuration
aws_s3_bucket_server_side_encryption_configuration
Supported
S3 Bucket Lifecycle Configuration
aws_s3_bucket_lifecycle_configuration
Supported
S3 Bucket Logging
aws_s3_bucket_logging
Supported
S3 Bucket ACL
aws_s3_bucket_acl
Supported
S3 Bucket Ownership Controls
aws_s3_bucket_ownership_controls
Supported
AWS Systems Manager
Parameter Values
aws_ssm_parameter
Supported
Amazon Elastic Compute Cloud (EC2)
Amazon Machine Images
aws_ami
Supported
EBS Volume
aws_ebs_volume
Supported
Instance
aws_instance
Supported
Key Pair
aws_key_pair
Supported
Launch Configuration
aws_launch_configuration
Supported
Security Group
aws_security_group
Supported
Amazon EC2 Auto Scaling
Auto Scaling Group
aws_autoscaling_group
Supported
Launch Configuration
aws_launch_configuration
Supported
Auto Scaling Policy
aws_autoscaling_policy
Supported
Launch Template
aws_launch_template
Supported
Amazon Elastic Container Registry (ECR)
ECR Repositories
aws_ecr_repository
Supported
ECR Pull Through Cache Rule
aws_ecr_pull_through_cache_rule
Supported
Amazon Elastic Container Service (ECS)
ECS Clusters
aws_ecs_cluster
Supported
ECS Service
aws_ecs_service
Supported
ECS Task Definition
aws_ecs_task_definition
Supported
ECS Task Set
aws_ecs_task_set
Supported
ECS Capacity Provider
aws_ecs_capacity_provider
Supported
Amazon Elastic File System (EFS)
EFS File Systems
aws_efs_file_system
Supported
EFS Access Point
aws_efs_access_point
Supported
EFS Mount Target
aws_efs_mount_target
Supported
Amazon Elastic Kubernetes Service (EKS)
EKS Clusters
aws_eks_cluster
Supported
EKS Addon
aws_eks_addon
Supported
EKS Fargate Profile
aws_eks_fargate_profile
Supported
EKS Node Group
aws_eks_node_group
Supported
Kubernetes Namespace
kubernetes_namespace
Supported
EKS Identity Provider Config
aws_eks_identity_provider_config
Supported
Amazon Elastic Load Balancing (ELB)
Classic Load Balancers
aws_elb
Supported
Application / Network Load Balancers
aws_lb
Supported
LB Target Group
aws_lb_target_group
Supported
LB Listener
aws_lb_listener
Supported
LB Listener Rule
aws_lb_listener_rule
Supported
LB Listener Certificate
aws_lb_listener_certificate
Supported
Amazon EventBridge
EventBridge Event Buses
aws_cloudwatch_event_bus
Supported
CloudWatch Event Rule
aws_cloudwatch_event_rule
Supported
Scheduler Schedule
aws_scheduler_schedule
Supported
Scheduler Schedule Group
aws_scheduler_schedule_group
Supported
CloudWatch Event Target
aws_cloudwatch_event_target
Supported
Amazon Firehose
Delivery Streams
aws_kinesis_firehose_delivery_stream
Supported
AWS Identity and Access Management (IAM)
IAM Roles
aws_iam_role
Supported
IAM Policy
aws_iam_policy
Supported
IAM Instance Profile
aws_iam_instance_profile
Supported
IAM Openid Connect Provider
aws_iam_openid_connect_provider
Supported
IAM User
aws_iam_user
Supported
IAM Group
aws_iam_group
Supported
IAM Group Membership
aws_iam_group_membership
Supported
IAM Access Key
aws_iam_access_key
Supported
IAM Role Policy
aws_iam_role_policy
Supported
IAM Role Policy Attachment
aws_iam_role_policy_attachment
Supported
AWS Key Management Service (KMS)
KMS Aliases
aws_kms_alias
Supported
KMS Key
aws_kms_key
Supported
AWS Lambda
Lambda Functions
aws_lambda_function
Supported
Lambda Alias
aws_lambda_alias
Supported
Lambda Layer Version
aws_lambda_layer_version
Supported
Lambda Event Source Mapping
aws_lambda_event_source_mapping
Supported
Lambda Permission
aws_lambda_permission
Supported
Amazon Route 53
Private Hosted Zones
aws_route53_zone
Supported
Route 53 Profiles Profile
aws_route53profiles_profile
Supported
Route 53 Resolver Endpoint
aws_route53_resolver_endpoint
Supported
Route 53 Resolver Rule
aws_route53_resolver_rule
Supported
Route 53 Resolver Firewall Domain List
aws_route53_resolver_firewall_domain_list
Supported
Route 53 Resolver Firewall Rule Group
aws_route53_resolver_firewall_rule_group
Supported
Route 53 Record
aws_route53_record
Supported
Amazon Simple Notification Service (SNS)
SNS Topics
aws_sns_topic
Supported
SNS Topic Subscription
aws_sns_topic_subscription
Supported
Amazon Simple Queue Service (SQS)
SQS Queues
aws_sqs_queue
Supported
AWS Transfer Family
SFTP Servers
aws_transfer_server
Supported
Transfer User
aws_transfer_user
Supported
Transfer Ssh Key
aws_transfer_ssh_key
Supported
Transfer Workflow
aws_transfer_workflow
Supported
Amazon Virtual Private Cloud (VPC)
DHCP Options
aws_vpc_dhcp_options
Supported
Internet Gateway
aws_internet_gateway
Supported
EC2 Managed Prefix List
aws_ec2_managed_prefix_list
Supported
NAT Gateway
aws_nat_gateway
Supported
Network ACL
aws_network_acl
Supported
Network Interface
aws_network_interface
Supported
Route Table
aws_route_table
Supported
Route Table Association
aws_route_table_association
Supported
Security Group
aws_security_group
Supported
Security Group Rule
aws_security_group_rule
Supported
Subnet
aws_subnet
Supported
EC2 Transit Gateway
aws_ec2_transit_gateway
Supported
EC2 Transit Gateway Peering Attachment
aws_ec2_transit_gateway_peering_attachment
Supported
EC2 Transit Gateway Route Table
aws_ec2_transit_gateway_route_table
Supported
EC2 Transit Gateway VPC Attachment
aws_ec2_transit_gateway_vpc_attachment
Supported
VPC
aws_vpc
Supported
VPC Endpoint
aws_vpc_endpoint
Supported
VPC Endpoint Service
aws_vpc_endpoint_service
Supported
VPC IPv4 CIDR Block Association
aws_vpc_ipv4_cidr_block_association
Supported
VPC IPv6 CIDR Block Association
aws_vpc_ipv6_cidr_block_association
Supported
VPC Peering Connection
aws_vpc_peering_connection
Supported
VPC Peering Connection Accepter
aws_vpc_peering_connection_accepter
Supported
EIP
aws_eip
Supported
Flow Log
aws_flow_log
Supported
AWS Web Application Firewall (WAF)
Web ACLs
aws_wafv2_web_acl
Supported
WAFv2 IP Set
aws_wafv2_ip_set
Supported
WAFv2 Regex Pattern Set
aws_wafv2_regex_pattern_set
Supported
WAFv2 Rule Group
aws_wafv2_rule_group
Supported
AWS MSK
Provisioned Clusters
aws_msk_cluster
Supported
MSK Serverless Cluster
aws_msk_serverless_cluster
Supported
AWS Step Functions
State Machines
aws_sfn_state_machine
Supported
SFN Alias
aws_sfn_alias
Supported
AWS Resource Access Manager
RAM Shares
aws_ram_resource_share
Supported
Amazon Bedrock
Guardrails
aws_bedrock_guardrail
Supported
Bedrock Model Invocation Logging Configuration
aws_bedrock_model_invocation_logging_configuration
Supported
Amazon GuardDuty
Detectors
aws_guardduty_detector
Supported
AWS Network Firewall
Firewalls
aws_networkfirewall_firewall
Supported
AWS Glue
Catalog Databases
aws_glue_catalog_database
Supported
Glue Catalog Table
aws_glue_catalog_table
Supported
Glue Crawler
aws_glue_crawler
Supported
Glue Job
aws_glue_job
Supported
Glue Connection
aws_glue_connection
Supported
Amazon Athena
Workgroups
aws_athena_workgroup
Supported
Athena Database
aws_athena_database
Supported
Athena Named Query
aws_athena_named_query
Supported
Amazon Kinesis Data Streams
Streams
aws_kinesis_stream
Supported
Amazon EMR
Clusters
aws_emr_cluster
Supported
Amazon Neptune
Clusters
aws_neptune_cluster
Supported
Neptune Cluster Instance
aws_neptune_cluster_instance
Supported
AWS Global Accelerator
Accelerators
aws_globalaccelerator_accelerator
Supported
Firefly protects 86 resource types across 14 Azure services.
Azure Key Vault
Vaults
azurerm_key_vault
Supported
Secrets
azurerm_key_vault_secret
Supported
Certificates
azurerm_key_vault_certificate
Supported
Keys
azurerm_key_vault_key
Supported
Key Access Policy
azurerm_key_vault_access_policy
Supported
Azure Storage
Storage Accounts
azurerm_storage_account
Supported
Blob Containers
azurerm_storage_container
Supported
Blobs
azurerm_storage_blob
Supported
Queues
azurerm_storage_queue
Supported
Network Rules
azurerm_storage_account_network_rules
Supported
Azure VMs
Virtual Machines
azurerm_linux_virtual_machine / azurerm_windows_virtual_machine
Supported
Managed Disks
azurerm_managed_disk
Supported
Virtual Machine Images
azurerm_image
Supported
Availability Sets
azurerm_availability_set
Supported
Virtual Machine Scale Sets
azurerm_linux_virtual_machine_scale_set / azurerm_windows_virtual_machine_scale_set
Supported
Bastion Hosts
azurerm_bastion_host
Supported
Virtual Machine Extension
azurerm_virtual_machine_extension
Supported
Virtual Networks
Virtual Networks
azurerm_virtual_network
Supported
Subnets
azurerm_subnet
Supported
Route Tables
azurerm_route_table
Supported
Public IP addresses
azurerm_public_ip
Supported
NAT Gateways
azurerm_nat_gateway
Supported
Network Interfaces
azurerm_network_interface
Supported
Application Security Groups
azurerm_application_security_group
Supported
Network Security Groups
azurerm_network_security_group
Supported
Private DNS Zones
azurerm_private_dns_zone
Supported
Private DNS Zone Record Sets
azurerm_private_dns_a_record / _aaaa_record / _cname_record / _mx_record / _ptr_record / _srv_record / _txt_record
Supported
Private DNS Zone Virtual Network Links
azurerm_private_dns_zone_virtual_network_link
Supported
Private DNS Zone Groups
private_dns_zone_group block of azurerm_private_endpoint
Supported
Private Endpoints
azurerm_private_endpoint
Supported
Virtual Network Peerings
azurerm_virtual_network_peering
Supported
Network Security Rule
azurerm_network_security_rule
Supported
Private Endpoint Application Security Group Association
azurerm_private_endpoint_application_security_group_association
Supported
Subnet Network Security Group Association
azurerm_subnet_network_security_group_association
Supported
Subnet Route Table association
azurerm_subnet_route_table_association
Supported
Virtual Network Gateway
azurerm_virtual_network_gateway
Supported
Load Balancing
Azure Load Balancer
azurerm_lb
Supported
Application Gateway
azurerm_application_gateway
Supported
Application Gateway WAF Policies
azurerm_web_application_firewall_policy
Supported
Load Balancer Rule
azurerm_lb_rule
Supported
Load Balancer Probe
azurerm_lb_probe
Supported
Loab Balancer Backend Address Pool
azurerm_lb_backend_address_pool
Supported
Azure SQL
SQL Servers
azurerm_mssql_server
Supported
SQL DB
azurerm_mssql_database
Supported
SQL Server Firewall Rules
azurerm_mssql_firewall_rule
Supported
SQL Server Outbound Firewall Rules
azurerm_mssql_outbound_firewall_rule
Supported
SQL Server Virtual Network Rules
azurerm_mssql_virtual_network_rule
Supported
SQL Server Connection Policies
connection_policy argument of azurerm_mssql_server
Supported
SQL Server DNS Aliases
azapi_resource (Microsoft.Sql/servers/dnsAliases)
Supported
SQL on VMs
azurerm_mssql_virtual_machine
Supported
Containers
Container Instances
azurerm_container_group
Supported
Container Registries
azurerm_container_registry
Supported
Container Repositories
data plane — no Terraform resource
Supported
Identity / Authorization
User-Assigned Identities
azurerm_user_assigned_identity
Supported
Federated Identity Credentials
azurerm_federated_identity_credential
Supported
Custom Role Definitions
azurerm_role_definition
Supported
Role Assignments
azurerm_role_assignment
Supported
Azure App Services
Web Apps
azurerm_linux_web_app / azurerm_windows_web_app
Supported
Function Apps
azurerm_linux_function_app / azurerm_windows_function_app
Supported
App Service Plans
azurerm_service_plan
Supported
App Service Certificates
azurerm_app_service_certificate
Supported
App Service Environments
azurerm_app_service_environment_v3
Supported
Web App Auth Settings
auth_settings / auth_settings_v2 block of azurerm_*_web_app
Supported
Web App Host Name Bindings
azurerm_app_service_custom_hostname_binding
Supported
Azure Service Bus
Namespaces
azurerm_servicebus_namespace
Supported
Queues
azurerm_servicebus_queue
Supported
Queue Authorization Rules
azurerm_servicebus_queue_authorization_rule
Supported
Subscriptions
azurerm_servicebus_subscription
Supported
Subscription Rules
azurerm_servicebus_subscription_rule
Supported
Topics
azurerm_servicebus_topic
Supported
Topic Authorization Rules
azurerm_servicebus_topic_authorization_rule
Supported
Azure Kubernetes Service (AKS)
AKS Managed Clusters
azurerm_kubernetes_cluster
Supported
Agent Pools (Node Pools)
azurerm_kubernetes_cluster_node_pool
Supported
Kubernetes Resources (in-cluster)
kubernetes provider resources
Supported
Azure Container Apps
Container Apps
azurerm_container_app
Supported
Container Apps Environments
azurerm_container_app_environment
Supported
Container App Certificates
azurerm_container_app_environment_certificate
Supported
Container App Managed Certificates / Custom Domains
azurerm_container_app_custom_domain / azurerm_container_app_environment_custom_domain
Supported
Container App Jobs
azurerm_container_app_job
Supported
Container App Auth Configs
azapi_resource (Microsoft.App/containerApps/authConfigs)
Supported
Azure Database for PostgreSQL
Flexible Servers
azurerm_postgresql_flexible_server
Supported
PostgreSQL Databases
azurerm_postgresql_flexible_server_database
Supported
Server Configurations
azurerm_postgresql_flexible_server_configuration
Supported
Entra Administrators
azurerm_postgresql_flexible_server_active_directory_administrator
Supported
Firewall Rules
azurerm_postgresql_flexible_server_firewall_rule
Supported
Azure Monitor
Log Analytics Workspaces
azurerm_log_analytics_workspace
Supported
Last updated
Was this helpful?