Every cloud, read-only first

Pick your cloud to see the exact access CoverOps asks for, what it reads, what it finds and what it may change, before you connect anything.

  • AWS: The cloud most of our customers run on, and the one CoverOps covers most deeply: read-only by default, keyless, and the only cloud where an approved fix can be applied for you, with a rollback.
  • Azure: Read-only through a service principal with three built-in reader roles on your subscription. CoverOps finds and prices the waste; your team applies the fixes it describes.
  • Google Cloud: Read-only through a service account with four predefined viewer roles on your project.
  • DigitalOcean: Read-only through a custom-scoped API token that only reads.
  • Oracle Cloud: Read-only through a dedicated API user in a group whose policy has read verbs only.