key,inventory_number,status,component_key,AFFunction,AFInventory Asset Type,AFLocation,AFPhysical Location,AFOS Name,AFOS Version,AFSoftware Name,AFSoftware Version,AFSoftware Patch Level,AFHardware Model,AFPublic,AFVirtual,AFURI,AFFQDN,AFIPv4 Address,AFIPv6 Address,AFMAC Address,AFNetBIOS Name,AFSerial Number,AFNetwork ID,AFVLAN ID,AFLabel,AFBaseline Configuration Name,AFIs Scanned,AFAllows Authenticated Scan,AFAuthenticated Scan,AFIn Latest Scan,AFEnd-of-Life,AFComments
alb,DEMO-AWS-ALB,Active,CMPN-AWSALB-GOV,Public-facing L7 application load balancer; TLS 1.2+ termination with AWS WAF in front,Load Balancer,AWS GovCloud (us-gov-west-1),us-gov-west-1,,,,,,,Yes,Yes,https://portal.meridian.example.com,portal.meridian.example.com,,,,,,vpc-demo-workload,,Public tier,,,,,,,Entry point for agency user and REST API traffic
web,DEMO-AWS-WEB-NGINX,Active,CMPN-AWSEC2-GOV,Web tier reverse proxy fronting the application service,Virtual Machine,AWS GovCloud (us-gov-west-1),us-gov-west-1,Ubuntu,22.04,nginx,1.24,,m6i.large,No,Yes,,,,,,,,vpc-demo-workload,,Application tier,DEMO-CIS-Ubuntu22,Yes,Yes,Yes,Yes,2027-04-30,Domain-joined to AWS Managed Microsoft AD
app,DEMO-AWS-APP-SPRINGBOOT,Active,CMPN-AWSEC2-GOV,Application tier hosting Meridian AI Platform business logic and API validation,Virtual Machine,AWS GovCloud (us-gov-west-1),us-gov-west-1,Amazon Linux,2023,Spring Boot,3.2,,m6i.xlarge,No,Yes,,,,,,,,vpc-demo-workload,,Application tier,DEMO-CIS-AL2023,Yes,Yes,Yes,Yes,,Domain-joined to AWS Managed Microsoft AD
inference,DEMO-AWS-EKS-GPU,Active,CMPN-AWSEKS-GOV,Model inference tier; EKS GPU node group serving self-hosted classification and generation models,Container Platform,AWS GovCloud (us-gov-west-1),us-gov-west-1,Amazon Linux,2023,Kubernetes,1.29,,g5.2xlarge,No,Yes,,,,,,,,vpc-demo-workload,,Application tier,DEMO-EKS-GPU-AMI,Yes,Yes,Yes,Yes,,No internet egress; model artifacts pulled from S3 over a VPC endpoint
workers,DEMO-AWS-EKS-WORKERS,Active,CMPN-AWSEKS-GOV,Asynchronous document-processing and embedding workers; chunk documents and generate tenant embeddings,Container Platform,AWS GovCloud (us-gov-west-1),us-gov-west-1,Amazon Linux,2023,Kubernetes,1.29,,m6i.2xlarge,No,Yes,,,,,,,,vpc-demo-workload,,Application tier,DEMO-EKS-AMI,Yes,Yes,Yes,Yes,,Writes vectors to the Aurora PostgreSQL vector store
bastion,DEMO-AWS-BASTION,Active,CMPN-AWSEC2-GOV,Management jumpbox reached only via SSM Session Manager; no inbound RDP,Bastion Host,AWS GovCloud (us-gov-west-1),us-gov-west-1,Windows Server,2022,,,,t3.medium,No,Yes,,,,,,DEMOBASTION,,vpc-demo-workload,,Management tier,DEMO-CIS-WS2022,Yes,Yes,Yes,Yes,2031-10-14,Administrative access via AWS Systems Manager Session Manager
rds-pg,DEMO-AWS-RDS-PG,Active,CMPN-AWSRDSPG-GOV,Primary application database holding document metadata and collaboration records,Managed Database,AWS GovCloud (us-gov-west-1),us-gov-west-1,,,PostgreSQL,15.4,,db.m6g.large,No,Yes,,,,,,,,vpc-demo-workload,,Data tier,,No,No,No,No,,Encrypted with AWS KMS; automated backups enabled
vector,DEMO-AWS-AURORA-VECTOR,Active,CMPN-AWSRDSPG-GOV,Vector store holding per-tenant document embeddings for retrieval-augmented inference,Managed Database,AWS GovCloud (us-gov-west-1),us-gov-west-1,,,Aurora PostgreSQL,15.4,pgvector,db.r6g.large,No,Yes,,,,,,,,vpc-demo-workload,,Data tier,,No,No,No,No,,Tenant-tagged embeddings; retrieval scoped to the requesting tenant only
audit,DEMO-AWS-AURORA-AUDIT,Active,CMPN-AWSAURORA-GOV,"Audit and inference log database recording user, administrative, and inference activity",Managed Database,AWS GovCloud (us-gov-west-1),us-gov-west-1,,,Aurora MySQL,8.0,,db.r6g.large,No,Yes,,,,,,,,vpc-demo-workload,,Data tier,,No,No,No,No,,Continuous backup; AWS KMS encrypted
s3-docs,DEMO-AWS-S3-DOCS,Active,CMPN-AWSS3-GOV,Agency customer document storage submitted for analysis,Object Storage,AWS GovCloud (us-gov-west-1),us-gov-west-1,,,,,,,No,Yes,,,,,,,,,,Data tier,,No,No,No,No,,Versioned and AWS KMS encrypted
s3-models,DEMO-AWS-S3-MODELS,Active,CMPN-AWSS3-GOV,Model artifact and version storage with object lock,Object Storage,AWS GovCloud (us-gov-west-1),us-gov-west-1,,,,,,,No,Yes,,,,,,,,,,Data tier,,No,No,No,No,,Object lock and versioning; pulled by the inference tier over a VPC endpoint
ecr,DEMO-AWS-ECR,Active,CMPN-AWSECR-GOV,Primary container registry with image signing and immutability,Container Registry,AWS GovCloud (us-gov-west-1),us-gov-west-1,,,,,,,No,Yes,,,,,,,,,,Application tier,,Yes,No,No,Yes,,Image scanning on push
msad,DEMO-AWS-MSAD,Active,CMPN-AWSDS-GOV,AWS Managed Microsoft AD directory service; compute hosts are domain-joined,Directory Service,AWS GovCloud (us-gov-west-1),us-gov-west-1,,,,,,,No,Yes,,,,,,,,vpc-demo-workload,,Management tier,,No,No,No,No,,Synchronized into Microsoft Entra ID by the Entra Connect host
entra-connect,DEMO-AZ-ENTRACONNECT,Active,CMPN-ENTRACONNECT-GOV,Hybrid identity sync host synchronizing AWS Managed Microsoft AD into Microsoft Entra ID,Virtual Machine,Azure Government (usgovvirginia),usgovvirginia,Windows Server,2022,Entra Connect,2.3,,Standard_D2s_v5,No,Yes,,,,,,DEMOENTRASYNC,,vnet-demo-app-spoke,,Management tier,DEMO-CIS-WS2022,Yes,Yes,Yes,Yes,2031-10-14,Reaches AWS over the inter-cloud IPsec VPN
az-sql,DEMO-AZ-SQL-AUTH,Active,CMPN-AZSQL-GOV,Authentication metadata database,Managed Database,Azure Government (usgovvirginia),usgovvirginia,,,Azure SQL Database,,,GP_Gen5_2,No,Yes,,,,,,,,vnet-demo-app-spoke,,Data tier,,No,No,No,No,,Transparent data encryption with automatic backup
az-appgw,DEMO-AZ-APPGW,Active,CMPN-AZAPPGW-GOV,Admin portal load balancer with WAF v2,Load Balancer,Azure Government (usgovvirginia),usgovvirginia,,,,,,WAF_v2,Yes,Yes,https://admin.meridian.example.com,admin.meridian.example.com,,,,,,vnet-demo-hub,,Public tier,,No,No,No,No,,Entra-enforced MFA with PIM just-in-time elevation
az-acr,DEMO-AZ-ACR,Active,CMPN-AZACR-GOV,Backup container registry with image signing and immutability,Container Registry,Azure Government (usgovvirginia),usgovvirginia,,,,,,,No,Yes,,,,,,,,,,Application tier,,Yes,No,No,Yes,,Mirror of the primary ECR registry
defender-sensor,DEMO-AZ-DEFENDER-SENSOR,Active,CMPN-AZACI-GOV,Microsoft Defender for Cloud sensor monitoring workloads in both clouds via the multi-cloud connector,Container Instance,Azure Government (usgovvirginia),usgovvirginia,,,Defender for Cloud,,,,No,Yes,,,,,,,,vnet-demo-hub,,Management tier,,No,No,No,No,,Cross-cloud workload protection for AWS GovCloud and Azure Government
