MachineImages Object
Relationships
graph LR
MachineImages -->|"account"| Accounts
Properties
Truto's stable unified identifier for this object. Opaque; use provider_id to address the object in the provider's own console or API.
Instruction set architecture, verbatim (x86_64, arm64).
Firmware the image boots with. uefi_preferred: UEFI where the machine type supports it, else BIOS. Null when the image does not set one. The provider's own value is in remote_data.
biosuefiuefi_preferredunknown
When Truto actually read this object from the provider, in UTC ISO 8601 with the offset present — not the request time, and not a provider timestamp.
When the object was created at the provider, in UTC ISO 8601. Null when the provider does not record one - see unreadable_fields.
When the image is or was deprecated. Null when no deprecation is set.
The image's description, verbatim.
Whether every disk snapshot in the image is encrypted. Null for an image with no snapshot-backed disk (instance-store).
The provider's own image id, verbatim (an ami- id on AWS).
Whether anyone, in any account, can launch the image.
When a machine was last launched from the image, as the provider records it (on AWS this lags by up to 24 hours).
The image's name, verbatim.
The provider's own type string, unmodified — for example 'AWS::S3::Bucket', 'aws_iam_role', 'Microsoft.Sql/servers'. Used for display and drill-down.
Operating system family. linux_unix covers Linux and other Unix-like systems; unknown when the provider does not say. The provider's own value is in remote_data.
windowslinux_unixmacosunknown
Which cloud this object was read from.
awsazuregcp
The provider's own identifier, passed through verbatim — a full ARN, resource id, or self-link. Never truncated, prefixed, or normalized.
Where the object is located. 'global' denotes genuinely global resources (e.g. IAM, GCP VPC networks) rather than a guessed region. A substituted region (when none is derivable) is flagged in unreadable_fields.
Raw data returned from the remote API call.
Whether machines launched from the image require metadata-service session tokens by default (on AWS, imdsSupport v2.0).
What the root disk is. block_volume: a persistent block volume (EBS on AWS); instance_store: a disk on the host, lost when the machine stops. The provider's own value is in remote_data.
block_volumeinstance_storeunknown
Accounts the image is shared with. Not collected on AWS (see unreadable_fields).
The image this one was copied from, verbatim. Null when it was not copied.
Image state, normalised. disabled: kept but cannot be launched; deregistered: deleted (the provider shows it for a short while). The provider's own value is in remote_data.
pendingavailablefaileddisabledderegisteredunknown
Key-value pairs exactly as the customer set them: no case folding, key/value normalization, or merging of separate provider concepts. An empty object means no tags; tags that could not be read appear in unreadable_fields instead.
Fields on this object that could not be read, and why. An empty array means everything was read. Use this to tell a real value from a missing one.
Explanation of the reason, where one adds anything.
The property on this resource that could not be read.
Why the field could not be read. available_on_get: Not read on list to keep the list fast; call GET for this resource's id to get it.
not_supported_by_providernot_configuredpermission_deniednot_collectedcollection_errorpartially_collectedavailable_on_get
When the object was last modified at the provider, in UTC ISO 8601. Null when the provider does not record one - see unreadable_fields.
Virtualization type, verbatim (hvm, paravirtual on AWS).