Turbot Guardrails

Turbot Guardrails is an enterprise cloud governance and compliance automation platform that provides continuous enforcement of security policies, access controls, and compliance requirements across multi-cloud environments. It functions as a cloud management database (CMDB) and policy engine that monitors, validates, and automatically remediates cloud infrastructure to maintain desired security and compliance states.

Category	Vulnerability management
Direction	Query source
Sign-in	Access Key and Secret Key, Turbot Profile
Query languages	SQLite
Tables	14
Query templates	61
Website	turbot.com

Before you start

Huntbase can sign in to Turbot Guardrails with any of these methods: Access Key and Secret Key, Turbot Profile. Pick one, create the credential in Turbot Guardrails, then keep it to hand for the Connect step.

Access Key and Secret Key

Turbot Guardrails workspace access key and secret key pair.

1. Log in to Guardrails and click your user name (or avatar) at the top right to open your user profile.
2. Open the Access Keys tab and click Create Access Key.
3. Copy both keys into a secure location. The secret is only available this one time.

Watch out for

• The access key acts with your own Guardrails permissions, and you can only create keys for yourself. Create them as a user with only the access you want Huntbase to have.

For the vendor's own instructions, see Turbot Guardrails access key documentation.

tip

Use a dedicated, read-only credential for Huntbase where the product allows it. Huntbase only needs to read.

Connect Turbot Guardrails

1. Go to Connections and click New connection, or click New connection on the Turbot Guardrails product page.
2. On Product, pick Turbot Guardrails and choose the Owner.
3. On Details, give the connection a Name and, optionally, a Description.
4. On Connect, fill in the settings and credentials described below.
5. On Verify, review the summary and click Create & check.

For everything else on the setup page — saving a draft, I'll do this later, and what each check result means — see Connections.

Settings

Where your Turbot Guardrails lives:

Field	Required	Notes
Workspace URL	No	The URL of your Guardrails workspace, such as https://turbot-acme.cloud.turbot.com.
Turbot Profile	No
Skip SSL/TLS Certificate Verification	No

Credentials

Choose a Method, enter a Credential label (for example Production), then fill in the fields for that method.

Access Key and Secret Key

Field	Required	Notes
Access Key	Yes	Secret — not shown again after you save it.
Secret Key	Yes	Secret — not shown again after you save it.

Turbot Profile

No fields — choose this method to connect without credentials.

Query it

Once connected, Turbot Guardrails can serve these languages in a query tab, and Scout can use it when you ask in Auto:

Language	Use it for
SQLite	SQL over the 14 tables listed below, alongside every other connected source.

Example: SQLite

Extract All Controls — Retrieve all controls from the guardrails system for a comprehensive overview.

select
  *
from
  guardrails_control;

Turbot Guardrails ships with 61 query templates. Find them in Library › Queries — see Query templates.

Tables

Turbot Guardrails adds 14 tables. Browse their columns from Schema in the query bar's ⋯ menu.

All 14 tables

Table	Contains
guardrails_active_grant	All active grants of resources by Turbot Guardrails.
guardrails_control	Controls show the current state of checks in the Turbot Guardrails workspace.
guardrails_control_type	Control types define the types of controls known to Turbot Guardrails.
guardrails_grant	All grants of resources by Turbot Guardrails.
guardrails_mod_version	Module versions in Turbot Guardrails organization.
guardrails_notification	Notifications from the Turbot Guardrails CMDB.
guardrails_policy_setting	Policy settings defined in the Turbot Guardrails workspace.
guardrails_policy_type	Policy types define the types of controls known to Turbot Guardrails.
guardrails_policy_value	Policy value define the value of policy known to Turbot Guardrails.
guardrails_query	Query Turbot Guardrails.
guardrails_resource	Resources from the Turbot Guardrails CMDB.
guardrails_resource_type	Resource types define the types of resources known to Turbot Guardrails.
guardrails_smart_folder	Smart folders allow policy settings to be attached as groups to resources.
guardrails_tag	All tags discovered on cloud resources by Turbot Guardrails.

Next steps

• Connections — health, credentials and settings after you connect
• Query languages — syntax, parameters and time ranges
• Chatting with Scout — ask questions without writing a query
• All integrations — the rest of the catalog