Resource Hierarchy


All resources in Turbot are arranged into a hierarchy. Each resource has one parent, and zero or more children.

The Resource Hierarchy may be many levels deep, but has 3 general tiers:

Tier Purpose
Turbot Root node of the hierarchy.
Folders Hierarchy of folders defined in Turbot. Typically used to separate resources by business unit.
Discoverable Resources Resources discovered from various sources such as cloud providers, servers and other services.

Resource Hierarchy

Turbot Root

Turbot Root is the top level resource of the entire hierarchy, and all other resources are descendants of this node. This resource is the target for various controls and policies used by the Turbot system.


Folders provide a high level arrangement of resources in Turbot. Common models for folders include:

Model Example
Business Unit R&D, Commercial, Admin
Compliance GxP production, GxP Development, PCI, Commercial
Environment Development, Testing, Production

A typical hierarchy might look something like the following:

  {Company Folder} (Folder)
     {Top Level Folder} (Folder)
         {Intermediate Folder} (Folder)

Smart Folders

Smart Folders are a collection of Policy Settings that can be attached to folders. They do not affect the resource hierarchy described above, but are part of the Policy Hierarchy.

Discoverable Resources

The vast majority of resources in Turbot are created to represent resources in other tools or systems. Cloud providers, operating systems, SaaS tools - virtually any system can be a source of Turbot Resources.

All discovered resources are added to the Turbot Resource Hierarchy. Mods define the structure of these resources, Turbot simply ensures they are valid and structured according to their definition.

AWS Account 1111 is added as a discoverable resource, providing Turbot with permission to query it's resources. The AWS mods in Turbot then crawl and discover all resources in that AWS account (e.g. S3 buckets, IAM users, EC2 instances) and add them to the Turbot Resource Hierarchy.