Skip to content

Developer Asset Index

Auto-generated by docs/context/gen-asset-index.py — do not hand-edit. Re-run it after adding or renaming an asset.

The single entry point for exploring the codebase. Every application and module links to its README.md on GitHub (source of how it works). For the code→name lookup see the Asset Glossary; for full descriptions and test detail see the Asset Catalog; for status / milestone / owner see the Asset Status table.

How the repo is laid out

Area What lives there
apps/ Standalone tools & Function Apps (evidence collection, drift, ticketing, reports)
modules/azure/ Terraform modules (the SnowOps Module Library)
modules/_contracts/ F0 cloud-agnostic interface contracts (Azure/AWS/GCP implement them)
policy/ OPA/Conftest, Kyverno, Azure Policy, Checkov bundles
live/ Terragrunt live-infra reference (F7)
gitops/ ArgoCD app-of-apps (F8)
pipelines/ Reusable GitHub Actions + Azure DevOps templates
tests/ Terratest + pipeline-integration suites
docs/runbooks/ Manual test + operational runbooks (published on this site)

Applications (apps/) — 24

Code Component Source
A1–A5 HubSpot CRM Automations apps/crm-automations/README.md
B1 GitHub Onboarder App apps/github-onboarder/README.md
B6 Client Prerequisite Checker apps/client-bootstrap/README.md
E0 Compliance Snapshot Collector apps/evidence-collector/README.md
E7 Ticket Platform Library apps/ticket-platform/README.md
F11 Module Registry & Versioning apps/module-registry/README.md
G1; discovery suite G0–G6 Discovery Auditor apps/discovery-auditor/README.md
H5 Service Principal Inventory apps/sp-inventory/README.md
I5 Defender Ticketer apps/defender-ticketer/README.md
I6 Patch Compliance Report apps/patch-compliance/README.md
K3 Sentinel SOAR Playbooks apps/soar-playbooks/README.md
K4 @snowops/post-incident-review apps/post-incident-review/README.md
L4 Automated Restore Drill apps/restore-drill/README.md
L5 RTO/RPO Doc Generator apps/rto-rpo-doc-generator/README.md
R2 Production Change Log apps/change-log/README.md
R4 @snowops/cab-automation apps/cab-automation/README.md
S1 Drift Detector apps/drift-detector/README.md
S2 Compliance Dashboard apps/compliance-dashboard/README.md
S4 Compliance Scorecard Generator apps/compliance-scorecard-generator/README.md
U3 Idle Resource Cleanup apps/cost-cleanup/README.md
V2 Diagram Generator apps/diagram-generator/README.md
V3 Runbook Generator apps/runbook-generator/README.md
V4 Compliance Manual Generator apps/compliance-manual/README.md
V5 Client Cloud Posture Report apps/posture-report/README.md

Azure Modules (modules/azure/) — 43

Code Component Source
B2 Azure Client Bootstrap Module modules/azure/client-bootstrap/README.md
B3 Subscription Baseline Module modules/azure/subscription-baseline/README.md
B4 Client State Backend Module modules/azure/client-state-backend/README.md
B5 Azure Resource PIM Module modules/azure/pim-azure-resources/README.md
F1 Azure Baseline Module modules/azure/baseline/README.md
F2 Network Hub Module modules/azure/network-hub/README.md
F3 Secure AKS Module modules/azure/aks-secure/README.md
F4 Container Registry Module modules/azure/acr/README.md
F5 Key Vault Module modules/azure/key-vault/README.md
F6 State Backend Module modules/azure/state-backend/README.md
F12 Brownfield Import Library modules/azure/import-blocks/README.md
H1 Entra ID Baseline Module modules/azure/aad-baseline/README.md
H2 Conditional Access Module modules/azure/conditional-access/README.md
H3 Entra PIM Templates Module modules/azure/pim-templates/README.md
H4 SCIM Provisioning Module modules/azure/scim-provisioning/README.md
H6 Entra Access Reviews Module modules/azure/access-reviews/README.md
H7 Break-Glass Account Module modules/azure/break-glass/README.md
J1 Log Analytics Module modules/azure/log-analytics/README.md
J2 Policy Diagnostics Module modules/azure/policy-diagnostics/README.md
J3 Microsoft Sentinel deployment modules/azure/sentinel/README.md
J4 Alert Rule Pack modules/azure/alert-rule-pack/README.md
J5 Managed Grafana + dashboards-as-code modules/azure/grafana-dashboards/README.md
J6 Audit Log Archive Module modules/azure/audit-log-archive/README.md
J7 Log Analytics Cost Strategy modules/azure/log-analytics-cost/README.md
K3 Sentinel SOAR playbooks modules/azure/sentinel-soar/README.md
L1 Azure Backup Policy Module modules/azure/backup-policy/README.md
L2 Cross-Region Replication Module modules/azure/cross-region-replication/README.md
M1 Encryption Policy Module modules/azure/encryption-policy/README.md
M2 Customer-Managed Key Module modules/azure/cmk/README.md
M3 TLS Policy Module modules/azure/tls-policy/README.md
M4 Microsoft Purview Baseline modules/azure/purview-baseline/README.md
M6 Data Residency Policy Module modules/azure/data-residency-policy/README.md
N1 Landing-Zone Connectivity Module modules/azure/landing-zone-connectivity/README.md
N2 Azure Firewall Premium Policy Module modules/azure/firewall-premium-policy/README.md
N3 WAF Policy Module modules/azure/waf-policy/README.md
N4 DDoS Protection Module modules/azure/ddos-protection/README.md
N5 Private Endpoint Policy Module modules/azure/private-endpoint-policy/README.md
N6 NSG Baseline Module modules/azure/nsg-baseline/README.md
S3 Auto-Remediation Playbooks modules/azure/auto-remediation-playbooks/README.md
U1 Budget Alert Module modules/azure/budget-alert/README.md
U2 Tag Policy Module modules/azure/tag-policy/README.md
U5 Cost Anomaly Alert Module modules/azure/cost-anomaly-alert/README.md
X8 Synthetic Monitoring modules/azure/synthetic-monitoring/README.md

Cloud-Agnostic Contracts (modules/_contracts/)

The F0 interface contracts every cloud implementation conforms to. See the Cloud-Agnostic Module Pattern.

Contract Source
cluster modules/_contracts/cluster
identity modules/_contracts/identity
kv modules/_contracts/kv
network modules/_contracts/network
object_store modules/_contracts/object_store
observability modules/_contracts/observability
registry modules/_contracts/registry