# MachineImages Object

> Source: https://truto.one/docs/api-reference/unified-cloud-infrastructure-api/machineimages/

Schema for the `MachineImages` resource in **Unified Cloud Infrastructure API**.

## Properties

- **`id`** _(string, required)_
  Truto's stable unified identifier for this object. Opaque; use provider_id to address the object in the provider's own console or API.
- **`provider_id`** _(string)_
  The provider's own identifier, passed through verbatim — a full ARN, resource id, or self-link. Never truncated, prefixed, or normalized.
- **`provider`** _(string)_
  Which cloud this object was read from.
  Allowed: `aws`, `azure`, `gcp`
- **`account`** _(string)_
  The account, subscription or project this object belongs to.
- **`region`** _(string)_
  Where the object is located. 'global' denotes genuinely global resources (e.g. IAM, GCP VPC networks) rather than a guessed region. A substituted region (when none is derivable) is flagged in unreadable_fields.
- **`native_type`** _(string)_
  The provider's own type string, unmodified — for example 'AWS::S3::Bucket', 'aws_iam_role', 'Microsoft.Sql/servers'. Used for display and drill-down.
- **`tags`** _(object)_
  Key-value pairs exactly as the customer set them: no case folding, key/value normalization, or merging of separate provider concepts. An empty object means no tags; tags that could not be read appear in unreadable_fields instead.
- **`collected_at`** _(string)_
  When Truto actually read this object from the provider, in UTC ISO 8601 with the offset present — not the request time, and not a provider timestamp.
- **`updated_at`** _(string)_
  When the object was last modified at the provider, in UTC ISO 8601. Null when the provider does not record one - see unreadable_fields.
- **`created_at`** _(string)_
  When the object was created at the provider, in UTC ISO 8601. Null when the provider does not record one - see unreadable_fields.
- **`unreadable_fields`** _(array<object>)_
  Fields on this object that could not be read, and why. An empty array means everything was read. Use this to tell a real value from a missing one.
  - **`field`** _(string)_
    The property on this resource that could not be read.
  - **`reason`** _(string)_
    Why the field could not be read. available_on_get: Not read on list to keep the list fast; call GET for this resource's id to get it.
    Allowed: `not_supported_by_provider`, `not_configured`, `permission_denied`, `not_collected`, `collection_error`, `partially_collected`, `available_on_get`
  - **`detail`** _(string)_
    Explanation of the reason, where one adds anything.
- **`remote_data`** _(object)_
  Raw data returned from the remote API call.
- **`image_id`** _(string)_
  The provider's own image id, verbatim (an ami- id on AWS).
- **`name`** _(string)_
  The image's name, verbatim.
- **`description`** _(string)_
  The image's description, verbatim.
- **`state`** _(string)_
  Image state, normalised. disabled: kept but cannot be launched; deregistered: deleted (the provider shows it for a short while). The provider's own value is in remote_data.
  Allowed: `pending`, `available`, `failed`, `disabled`, `deregistered`, `unknown`
- **`is_public`** _(boolean)_
  Whether anyone, in any account, can launch the image.
- **`shared_with_accounts`** _(array<string>)_
  Accounts the image is shared with. Not collected on AWS (see unreadable_fields).
- **`architecture`** _(string)_
  Instruction set architecture, verbatim (x86_64, arm64).
- **`os_family`** _(string)_
  Operating system family. linux_unix covers Linux and other Unix-like systems; unknown when the provider does not say. The provider's own value is in remote_data.
  Allowed: `windows`, `linux_unix`, `macos`, `unknown`
- **`root_device_type`** _(string)_
  What the root disk is. block_volume: a persistent block volume (EBS on AWS); instance_store: a disk on the host, lost when the machine stops. The provider's own value is in remote_data.
  Allowed: `block_volume`, `instance_store`, `unknown`
- **`virtualization_type`** _(string)_
  Virtualization type, verbatim (hvm, paravirtual on AWS).
- **`boot_mode`** _(string)_
  Firmware the image boots with. uefi_preferred: UEFI where the machine type supports it, else BIOS. Null when the image does not set one. The provider's own value is in remote_data.
  Allowed: `bios`, `uefi`, `uefi_preferred`, `unknown`
- **`requires_metadata_token`** _(boolean)_
  Whether machines launched from the image require metadata-service session tokens by default (on AWS, imdsSupport v2.0).
- **`encryption_at_rest`** _(boolean)_
  Whether every disk snapshot in the image is encrypted. Null for an image with no snapshot-backed disk (instance-store).
- **`source_image_id`** _(string)_
  The image this one was copied from, verbatim. Null when it was not copied.
- **`deprecated_at`** _(string)_
  When the image is or was deprecated. Null when no deprecation is set.
- **`last_launched_at`** _(string)_
  When a machine was last launched from the image, as the provider records it (on AWS this lags by up to 24 hours).

## Methods

- [GET /unified/cloud-infrastructure/machine_images/{id}](/docs/api-reference/unified-cloud-infrastructure-api/machineimages/get) — Get Machine images
- [GET /unified/cloud-infrastructure/machine_images](/docs/api-reference/unified-cloud-infrastructure-api/machineimages/list) — List Machine images