SecurityInsight settings · Settings > Collection scope & limits
Azure exposure graph resource types
| Key | SI_AzureExposureGraph_ResourceLabels |
|---|---|
| Where | Settings > Collection scope & limits |
| Type | List |
| Default | The shipped list of 16 resource types; access mapping also includes every other Azure resource type. |
| Edition | Community |
What it does
Which exposure graph node types are treated as Azure resources for extra exposure details and access mapping.
When set
Restricts exposure detail lookups and access mapping to the types you list. Once set, access mapping no longer covers every other Azure resource type, so access counts can shrink.
When blank or default
Left blank, the default applies: The shipped list of 16 resource types; access mapping also includes every other Azure resource type.
Risk and how to reverse it
Changes what is collected from the next run: narrowing it means some assets or data are not collected, so they look absent in profiles, CIs and reports (absence is never read as fixed). Reversible: change it back; the next run collects again.
Requires
Nothing else.
Recommended
Keep the default. Change it when: Only if your Defender exposure graph uses non-standard node names.
Documented for SecurityInsight 3.0.79. Written by the SecurityInsight team; Invardia publishes it. · All settings · Security review pack