Inventory is the starting point
An asset record brings together the provider identity, account or project, region, service type, lifecycle details, ownership context, and available security evidence. Use it to confirm that Nova is describing the intended resource before following its findings or relationships.
Review an asset with context
- Confirm provider, account, region, service, and stable resource identity.
- Check owner, business service, environment, and approved classification when available.
- Review related findings, external exposure, data sensitivity, identities, and reachable relationships.
- Check the evidence time and source health before using the asset state in a decision.
- Record ownership gaps and unexpected assets as work to validate, not as confirmed malicious activity.
Understand inventory limitations
A resource can be missing because its account is outside scope, the provider service is not included, collection is delayed, access changed, or the resource was created and removed between observations. Compare the expected scope with source health before concluding that the resource does not exist.