ASM integrations enable automatic discovery of APIs, services, and applications across cloud infrastructure and source code repositories. Scheduled pulls refresh the discovered Assets in Escape's ASM.

## Integration Categories

### Cloud Infrastructure

Cloud provider integrations allow APIs and services deployed on major platforms to be discovered automatically:

- **[AWS](<https://docs.escape.tech/documentation/asm/integrations/aws/index.md>)** - Cross-account IAM role (AssumeRole, recommended)
- **[AWS Account (Legacy)](<https://docs.escape.tech/documentation/asm/integrations/aws-account/index.md>)** - IAM access keys
- **[Azure](<https://docs.escape.tech/documentation/asm/integrations/azure/index.md>)** - Azure API Management instances
- **[GCP](<https://docs.escape.tech/documentation/asm/integrations/gcp/index.md>)** - API Gateway, serverless endpoints, DNS, and load balancer frontends
- **[Cloudflare](<https://docs.escape.tech/documentation/asm/integrations/cloudflare/index.md>)** - DNS zones and API Gateway schemas
- **[Akamai](<https://docs.escape.tech/documentation/asm/integrations/akamai/index.md>)** - Edge configurations and API definitions
- **[Kubernetes](<https://docs.escape.tech/documentation/asm/integrations/kubernetes/index.md>)** - Services, Ingresses, and Istio resources

### Source Code Repositories

Repository integrations enable API discovery from code by scanning for OpenAPI specifications, GraphQL schemas, and other API definition files:

- **[GitHub](<https://docs.escape.tech/documentation/asm/integrations/github/index.md>)** - Organization repositories and API schemas
- **[GitLab](<https://docs.escape.tech/documentation/asm/integrations/gitlab/index.md>)** - Group and project repositories
- **[Bitbucket](<https://docs.escape.tech/documentation/asm/integrations/bitbucket/index.md>)** - Workspace repositories

### API Documentation Platforms

- **[Postman](<https://docs.escape.tech/documentation/asm/integrations/postman/index.md>)** - Collections and API definitions

### Security Platforms

- **[Wiz](<https://docs.escape.tech/documentation/asm/integrations/wiz/index.md>)** - Network exposures and cloud resources with bi-directional enrichment (assets from Wiz, issues back to Wiz)

### Domains and Custom Sources

- **[Top Level Domains](<https://docs.escape.tech/documentation/asm/scope/#global-configuration-scope-rules>)**: Domain discovery and implicit scope allowlist rules
- **[Custom Integration](<https://docs.escape.tech/documentation/automate/custom-integrations/index.md>)**: Custom discovery sources configured with the Escape team

## How Discovery Works

1. **Connection** - Credentials are configured for the target platform
2. **Enumeration** - Resources are discovered through platform APIs
3. **Classification** - Discovered endpoints are classified as Assets in Escape's ASM
4. **Scheduled Sync** - Escape periodically refreshes discovered Assets while ASM scanning is enabled

## Private Networks

For internal infrastructure not accessible from the public internet, a [Private Location](</documentation/platform/private-location/>) can be configured to enable secure connectivity between Escape and private resources.