Open Connector
Share an Infra project with Guard

Share an Infra project with Guard

Select project inventory and approved labels, deliver it to a Guard asset group, and confirm the resource identities.

Share inventory for one Infra project with a Guard asset group to associate infrastructure with its security records. Choose explicit label keys so internal metadata does not enter the receiving inventory by default.

Before you begin

The following conditions must be satisfied:

  • An Infra–Guard connection exists.
  • An Infra Organization Admin and a Guard Administrator can approve the selected project and asset group.
  • The source project contains the resources you want to associate with Guard.

Select inventory and labels

  1. In Console, open Organization → Connector → Connections → Connection → Sharing. Select Edit sharing.
  2. For the Infra-to-Guard direction, select the source project and receiving Guard asset group. Select Resource inventory.
  3. In Label keys, select the exact keys needed by Guard, such as service and owner_team. Leave the selection empty to share no labels.
  4. Select Save changes. In Grants, open the pending selection and compare its project ID, group ID, categories, and label keys with the intended scope.
  5. As each product administrator, select Approve for that product's side. After both approvals, select Activate grant for the reviewed revision.

For an initial draft connection, use Overview → Activate connection after the grant approvals instead of activating a replacement grant.

Confirm the first inventory result

  1. In Connection → Overview, confirm the active grant revision and a successful Infra-to-Guard synchronization after activation.
  2. In Activity, open that synchronization result. Compare resource IDs, project IDs, and shared label keys with Infra's source records.
  3. In Resources, select a pilot resource and follow Confirm a resource relationship to associate its existing Guard asset.
  4. In Guard, open the mapped asset. Confirm that the source link returns to the intended Infra resource and that the observation time matches the exchange.

If a resource is absent, inspect its project against the active selection before requesting another synchronization. If a label is absent, compare Label keys with the source key; adding a label selection requires grant review.

Inventory does not establish an agent identity, verified scan ownership, or traffic protection. For a public application, continue with Protect an Infra service with Guard.