# Upbound Marketplace

> The Upbound Marketplace is the official package registry for Crossplane and Universal Crossplane (UXP). It provides a collection of packages that help platform engineers build internal cloud platforms and manage infrastructure as code using Kubernetes.

The Upbound Marketplace hosts four types of packages for extending Crossplane control planes:

## Providers

Providers bundle managed resources and controllers so Crossplane can manage external infrastructure resources. They enable declarative management of cloud provider APIs (AWS, GCP, Azure, etc.) and other services through Kubernetes custom resources.

- [Browse all Providers](https://marketplace.upbound.io/providers)
- [Provider Documentation](https://docs.upbound.io/manuals/uxp/concepts/packages/providers/)

### Official Providers

- [upbound/provider-aws-accessanalyzer](https://marketplace.upbound.io/providers/upbound/provider-aws-accessanalyzer): Continuously analyzes IAM and resource policies for overly permissive S3, IAM, KMS, and cross-account access paths; tune findings with archive rules for least-privilege and external-access (IAM Access Analyzer) governance.

- [upbound/provider-aws-account](https://marketplace.upbound.io/providers/upbound/provider-aws-account): Manages account-level contacts and communication preferences for billing, operations, and security notices, and controls which AWS Regions are available for resource creation in the account.

- [upbound/provider-aws-acm](https://marketplace.upbound.io/providers/upbound/provider-aws-acm): Requests and renews public TLS 1.2+ certificates (RSA/ECC), automates DNS-01 or email validation, and attaches them to ALB/NLB, API Gateway, and CloudFront for HTTPS and mutual-TLS patterns without manual PEM handling.

- [upbound/provider-aws-acmpca](https://marketplace.upbound.io/providers/upbound/provider-aws-acmpca): Runs a private certificate authority for issuing internal TLS and client certificates, defines issuance policies and permissions, and automates CA hierarchy and certificate lifecycle for workloads inside your org.

- [upbound/provider-aws-amp](https://marketplace.upbound.io/providers/upbound/provider-aws-amp): Hosts managed Prometheus workspaces to scrape metrics, store time series, and evaluate alerting rules so you can monitor Kubernetes and AWS services with familiar PromQL and Alertmanager workflows.

- [upbound/provider-aws-amplify](https://marketplace.upbound.io/providers/upbound/provider-aws-amplify): Builds and hosts full-stack web and mobile apps from Git (React, Next.js-friendly workflows), wires Cognito auth and serverless APIs, and manages preview branches and webhooks for CI/CD-style frontend delivery.

- [upbound/provider-aws-apigateway](https://marketplace.upbound.io/providers/upbound/provider-aws-apigateway): Publishes REST/OpenAPI-style APIs with custom domains, Lambda or Cognito JWT authorizers, stages, and integrations to Lambda, HTTP proxies, and AWS APIs; throttles traffic and fronts legacy HTTP backends behind one edge endpoint.

- [upbound/provider-aws-apigatewayv2](https://marketplace.upbound.io/providers/upbound/provider-aws-apigatewayv2): Delivers low-latency HTTP APIs and bidirectional WebSocket APIs with routes, JWT or Lambda auth, VPC links to private integrations, and custom domains for modern microservice and real-time workloads.

- [upbound/provider-aws-appautoscaling](https://marketplace.upbound.io/providers/upbound/provider-aws-appautoscaling): Applies target tracking, step, and scheduled scaling policies to ECS services, DynamoDB, Aurora, and other application resources so capacity follows demand without per-service custom autoscaler code.

- [upbound/provider-aws-appconfig](https://marketplace.upbound.io/providers/upbound/provider-aws-appconfig): Rolls out feature flags and configuration to applications using environments, deployment strategies, and validation so you can stage releases, run experiments, and avoid big-bang config changes.

- [upbound/provider-aws-appflow](https://marketplace.upbound.io/providers/upbound/provider-aws-appflow): Moves data between SaaS systems (e.g. Salesforce, Zendesk) and S3, Redshift, or Snowflake-bound sinks with scheduled or event-triggered flows, field mapping, and incremental CDC-style sync without custom ETL workers.

- [upbound/provider-aws-appintegrations](https://marketplace.upbound.io/providers/upbound/provider-aws-appintegrations): Connects third-party SaaS products into EventBridge so external events can drive automation and routing alongside native AWS event sources.

- [upbound/provider-aws-applicationinsights](https://marketplace.upbound.io/providers/upbound/provider-aws-applicationinsights): Observes .NET, SQL Server, and IIS stacks to surface application problems, anomalies, and dependency issues with guided diagnostics and CloudWatch integration for faster MTTR on business-critical apps.

- [upbound/provider-aws-appmesh](https://marketplace.upbound.io/providers/upbound/provider-aws-appmesh): Runs a service mesh that routes HTTP and gRPC between microservices with virtual nodes and gateways, applies retries and traffic shifting, and gives uniform observability across ECS, EKS, and EC2 backends.

- [upbound/provider-aws-apprunner](https://marketplace.upbound.io/providers/upbound/provider-aws-apprunner): Runs containerized web services and APIs from a container image or source repo with built-in load balancing, TLS, autoscaling, VPC connectivity, and GitHub connections for simple production hosting without managing clusters.

- [upbound/provider-aws-appstream](https://marketplace.upbound.io/providers/upbound/provider-aws-appstream): Streams desktop applications or full non-persistent desktops to browsers, manages fleets and images, and integrates with directories so software can be delivered securely without installing clients on end-user devices.

- [upbound/provider-aws-appsync](https://marketplace.upbound.io/providers/upbound/provider-aws-appsync): Exposes managed GraphQL (AppSync) APIs with DynamoDB/Lambda/OpenSearch resolvers, WebSocket subscriptions, AppSync caching, and Cognito/IAM fine-grained auth for mobile and web clients.

- [upbound/provider-aws-athena](https://marketplace.upbound.io/providers/upbound/provider-aws-athena): Runs serverless ANSI SQL (Presto/Trino engine) over S3 data lakes—Parquet, ORC, Iceberg, and Glue Data Catalog tables—with workgroups, saved queries, and governed access without provisioning query clusters.

- [upbound/provider-aws-autoscaling](https://marketplace.upbound.io/providers/upbound/provider-aws-autoscaling): Defines Auto Scaling groups with launch templates and mixed instances, attaches load balancers, implements lifecycle hooks and step scaling, and combines scheduled actions with dynamic policies to keep fleet size matched to load.

- [upbound/provider-aws-autoscalingplans](https://marketplace.upbound.io/providers/upbound/provider-aws-autoscalingplans): Builds predictive and dynamic scaling plans that coordinate capacity across EC2, ECS, DynamoDB, and related resources using a single strategy for applications with tightly coupled scaling signals.

- [upbound/provider-aws-backup](https://marketplace.upbound.io/providers/upbound/provider-aws-backup): Centralizes backup policies and vaults, selects resources by tag or ARN, enforces legal hold and vault lock, and supports copy jobs across Regions and accounts for ransomware-aware recovery.

- [upbound/provider-aws-batch](https://marketplace.upbound.io/providers/upbound/provider-aws-batch): Schedules containerized batch, ML, and HPC jobs on EC2, Fargate, and Spot compute environments with job queues, fair-share scheduling, and GPU instance types for CUDA/ML training offload.

- [upbound/provider-aws-bedrock](https://marketplace.upbound.io/providers/upbound/provider-aws-bedrock): Routes LLM inference through managed profiles to Anthropic, Amazon, Cohere, and other foundation models with quotas, monitoring, and failover between model variants (RAG-ready when paired with knowledge bases).

- [upbound/provider-aws-bedrockagentcore](https://marketplace.upbound.io/providers/upbound/provider-aws-bedrockagentcore): Hosts agent runtimes with secure HTTPS endpoints, long-horizon memory, gateways to tools and browsers, OAuth/API key credential providers, and workload identity for safe code execution and enterprise API access.

- [upbound/provider-aws-budgets](https://marketplace.upbound.io/providers/upbound/provider-aws-budgets): Sets monthly or usage budgets with alerts and automated actions such as IAM policy changes or SNS notifications when spend or forecast crosses thresholds.

- [upbound/provider-aws-ce](https://marketplace.upbound.io/providers/upbound/provider-aws-ce): Monitors Cost Explorer anomaly detection for unexpected spend patterns so finance and platform teams get early warning before bills spike.

- [upbound/provider-aws-chime](https://marketplace.upbound.io/providers/upbound/provider-aws-chime): Terminates SIP and PSTN voice into AWS, groups voice connectors, and configures origination, termination, logging, and streaming for telephony workloads that integrate with enterprise phone systems.

- [upbound/provider-aws-cloud9](https://marketplace.upbound.io/providers/upbound/provider-aws-cloud9): Provisions cloud IDE environments backed by EC2 with shared access controls so developers edit, run, and pair on code entirely in the browser.

- [upbound/provider-aws-cloudcontrol](https://marketplace.upbound.io/providers/upbound/provider-aws-cloudcontrol): Creates, updates, deletes, and reads the same resources exposed through CloudFormation across hundreds of AWS resource types using a uniform API when you need programmatic control beyond a single template.

- [upbound/provider-aws-cloudformation](https://marketplace.upbound.io/providers/upbound/provider-aws-cloudformation): Drives CloudFormation stacks and stack sets across accounts and Regions so large fleets of resources deploy and drift-correct from templates with delegated administration and instance-level overrides.

- [upbound/provider-aws-cloudfront](https://marketplace.upbound.io/providers/upbound/provider-aws-cloudfront): Accelerates HTTP/HTTPS and HTTP/2 content at the edge with signed URLs (Canned/Custom policies), OAI/OAC to S3, Lambda@Edge, CloudFront Functions, WAF integration, and VPC origins for private ALBs.

- [upbound/provider-aws-cloudsearch](https://marketplace.upbound.io/providers/upbound/provider-aws-cloudsearch): Indexes and searches structured text with managed scaling and access policies so legacy search workloads stay online without running your own search cluster.

- [upbound/provider-aws-cloudtrail](https://marketplace.upbound.io/providers/upbound/provider-aws-cloudtrail): Records CloudTrail management and data events into S3-backed trails and Lake event data stores for SOC2, ISO, and FedRAMP-style audit trails with Athena/SQL-friendly querying.

- [upbound/provider-aws-cloudwatch](https://marketplace.upbound.io/providers/upbound/provider-aws-cloudwatch): Raises composite and threshold alarms, publishes dashboards, and streams high-cardinality metrics to destinations so teams detect incidents and capacity issues early.

- [upbound/provider-aws-cloudwatchevents](https://marketplace.upbound.io/providers/upbound/provider-aws-cloudwatchevents): Routes events on EventBridge buses with content filtering, archives, API destinations, and SaaS partner integrations (Salesforce, Zendesk, etc.) for event-driven, near-real-time automation.

- [upbound/provider-aws-cloudwatchlogs](https://marketplace.upbound.io/providers/upbound/provider-aws-cloudwatchlogs): Retains and searches application logs in groups, ships streams to analytics destinations, turns log patterns into metrics, and enforces subscription filters for centralized security monitoring.

- [upbound/provider-aws-codebuild](https://marketplace.upbound.io/providers/upbound/provider-aws-codebuild): Runs managed CI builds in Docker with buildspec.yml, on-demand or webhook triggers, GitHub/CodeCommit sources, JUnit test reports, and Secrets Manager credentials for private npm/Maven feeds.

- [upbound/provider-aws-codecommit](https://marketplace.upbound.io/providers/upbound/provider-aws-codecommit): Stores Git repositories with branch policies, approval rule templates, and triggers that kick off pipelines when teams push or merge.

- [upbound/provider-aws-codepipeline](https://marketplace.upbound.io/providers/upbound/provider-aws-codepipeline): Models continuous delivery pipelines that sequence source, build, test, and deploy actions across accounts with custom actions and deployment gates.

- [upbound/provider-aws-codestarconnections](https://marketplace.upbound.io/providers/upbound/provider-aws-codestarconnections): Links GitHub, Bitbucket, and GitLab to AWS through hosted connections so CodePipeline and other services clone repos without long-lived personal tokens on build hosts.

- [upbound/provider-aws-codestarnotifications](https://marketplace.upbound.io/providers/upbound/provider-aws-codestarnotifications): Fans out build and deploy events to Chatbot, SNS, or other targets so teams get consistent notifications from CodeSuite tools.

- [upbound/provider-aws-cognitoidentity](https://marketplace.upbound.io/providers/upbound/provider-aws-cognitoidentity): Issues temporary AWS credentials to mobile and web users mapped through identity pools linked to SAML, OIDC, or social providers while scoping role assumptions with tags.

- [upbound/provider-aws-cognitoidp](https://marketplace.upbound.io/providers/upbound/provider-aws-cognitoidp): Runs managed user directories with hosted UI, MFA, passwordless flows, OAuth scopes, SAML federation, risk-based adaptive auth, and app clients for web and mobile sign-in.

- [upbound/provider-aws-configservice](https://marketplace.upbound.io/providers/upbound/provider-aws-configservice): Continuously records configuration snapshots, evaluates conformance packs and custom rules, aggregates multi-account views, streams findings to remediation, and proves compliance posture over time.

- [upbound/provider-aws-connect](https://marketplace.upbound.io/providers/upbound/provider-aws-connect): Operates cloud contact centers with call routing, queues, flows, Lex bots, telephony numbers, agent profiles, and storage hooks so you can run voice and chat support without legacy ACD hardware.

- [upbound/provider-aws-cur](https://marketplace.upbound.io/providers/upbound/provider-aws-cur): Delivers hourly or daily cost and usage reports to S3 in Parquet or CSV for finance warehouses, chargeback, and deep cost allocation analysis.

- [upbound/provider-aws-dataexchange](https://marketplace.upbound.io/providers/upbound/provider-aws-dataexchange): Publishes and subscribes to licensed datasets and revisions so analytics teams consume third-party data products with governed entitlements.

- [upbound/provider-aws-datapipeline](https://marketplace.upbound.io/providers/upbound/provider-aws-datapipeline): Orchestrates legacy ETL workflows that move and transform data between RDS, DynamoDB, S3, and EMR on a schedule when you still rely on Data Pipeline jobs.

- [upbound/provider-aws-datasync](https://marketplace.upbound.io/providers/upbound/provider-aws-datasync): Moves datasets between NFS, SMB, HDFS, S3, EFS, and FSx with bandwidth throttling and integrity checks for lift-and-shift and recurring sync jobs.

- [upbound/provider-aws-dax](https://marketplace.upbound.io/providers/upbound/provider-aws-dax): Adds an in-memory cache cluster in front of DynamoDB tables to serve microsecond reads for hot keys while keeping application code on the DynamoDB API.

- [upbound/provider-aws-deploy](https://marketplace.upbound.io/providers/upbound/provider-aws-deploy): Automates blue/green and rolling deployments to EC2, Lambda, and ECS with deployment groups, traffic shifting hooks, and rollback policies tied to load balancers.

- [upbound/provider-aws-detective](https://marketplace.upbound.io/providers/upbound/provider-aws-detective): Builds multi-account security graphs that fuse VPC Flow Logs, CloudTrail, and GuardDuty to speed incident triage with visual timelines and entity relationships.

- [upbound/provider-aws-devicefarm](https://marketplace.upbound.io/providers/upbound/provider-aws-devicefarm): Runs automated UI and load tests on real iOS and Android devices plus Selenium grids in the cloud with projects, device pools, and artifact uploads.

- [upbound/provider-aws-directconnect](https://marketplace.upbound.io/providers/upbound/provider-aws-directconnect): Brings private Layer-3 connectivity from your data center into AWS with dedicated connections, link aggregation, transit VIFs to cloud routers, and hosted interfaces for partner networks.

- [upbound/provider-aws-dlm](https://marketplace.upbound.io/providers/upbound/provider-aws-dlm): Snapshots EBS volumes on schedules with retention and copy rules so backups stay consistent without ad-hoc Lambda schedulers.

- [upbound/provider-aws-dms](https://marketplace.upbound.io/providers/upbound/provider-aws-dms): Replicates Oracle, SQL Server, PostgreSQL, MySQL, MariaDB, and other sources to S3, Aurora, or Redshift with replication instances, endpoints, and tasks supporting CDC (logical replication) and one-time cutovers with encryption.

- [upbound/provider-aws-docdb](https://marketplace.upbound.io/providers/upbound/provider-aws-docdb): Runs MongoDB 3.6–compatible document clusters (MongoDB API) with replica sets, global clusters, and snapshots for JSON/document workloads without self-managed MongoDB ops.

- [upbound/provider-aws-ds](https://marketplace.upbound.io/providers/upbound/provider-aws-ds): Hosts Microsoft AD or AD Connector directories in AWS, shares directories across accounts, and extends DNS with conditional forwarders for hybrid identity.

- [upbound/provider-aws-dsql](https://marketplace.upbound.io/providers/upbound/provider-aws-dsql): Provisions serverless Aurora DSQL distributed SQL clusters with peering for strongly consistent distributed SQL that autoscales without capacity planning (PostgreSQL-compatible client ecosystem).

- [upbound/provider-aws-dynamodb](https://marketplace.upbound.io/providers/upbound/provider-aws-dynamodb): Models key-value and document access patterns with single-table design, on-demand or RCU/WCU capacity, DynamoDB Streams to Kinesis, IAM fine-grained access, and PITR for low-latency NoSQL workloads.

- [upbound/provider-aws-ec2](https://marketplace.upbound.io/providers/upbound/provider-aws-ec2): Builds the core networking and compute surface: VPCs, subnets, routing, security groups and NACLs, load balancers and gateways, NAT and VPN endpoints, EC2 instances and launch templates, EBS volumes and snapshots, Elastic IPs, placement groups, and connectivity to Direct Connect and Transit Gateway.

- [upbound/provider-aws-ecr](https://marketplace.upbound.io/providers/upbound/provider-aws-ecr): Stores private OCI/Docker images with lifecycle rules, cross-Region replication, pull-through caches (Docker Hub, ECR Public), image scanning, and repository IAM for CI/CD and Kubernetes/ECS runtime pulls.

- [upbound/provider-aws-ecrpublic](https://marketplace.upbound.io/providers/upbound/provider-aws-ecrpublic): Publishes publicly readable OCI artifacts for open-source projects with repository policies that control anonymous pulls.

- [upbound/provider-aws-ecs](https://marketplace.upbound.io/providers/upbound/provider-aws-ecs): Runs Docker containers on AWS Fargate or EC2-backed capacity providers with task definitions, Cloud Map service discovery, rolling deployments, and Application Auto Scaling—container orchestration without self-managed Kubernetes.

- [upbound/provider-aws-efs](https://marketplace.upbound.io/providers/upbound/provider-aws-efs): Mounts POSIX file systems across AZs for Linux workloads with elastic throughput, replication to standby Regions, access points for multi-tenant namespaces, and backup policies.

- [upbound/provider-aws-eks](https://marketplace.upbound.io/providers/upbound/provider-aws-eks): Creates and upgrades Kubernetes control planes, registers managed node groups and Fargate profiles, installs add-ons, maps IAM access entries and pod identity, and wires OIDC identity providers for cluster authentication.

- [upbound/provider-aws-elasticache](https://marketplace.upbound.io/providers/upbound/provider-aws-elasticache): Runs Redis (OSS and Redis ACLs) and Memcached with replication groups, Valkey/Redis serverless options, global datastores, and subnet-isolated clusters for session stores, caching, and real-time leaderboards.

- [upbound/provider-aws-elasticbeanstalk](https://marketplace.upbound.io/providers/upbound/provider-aws-elasticbeanstalk): Deploys versioned Java/Tomcat, Node.js, Python, Docker, and .NET tiers from bundles with templates that provision ALB/ASG, rolling updates, and health checks—PaaS without hand-writing CloudFormation each release.

- [upbound/provider-aws-elasticsearch](https://marketplace.upbound.io/providers/upbound/provider-aws-elasticsearch): Operates legacy Elasticsearch 7.x–era managed domains (REST API) with access policies and SAML for teams still on the classic Elasticsearch service API before migrating to OpenSearch.

- [upbound/provider-aws-elastictranscoder](https://marketplace.upbound.io/providers/upbound/provider-aws-elastictranscoder): Transcodes uploaded media through pipelines and presets for formats and bitrates used in video-on-demand workflows.

- [upbound/provider-aws-elb](https://marketplace.upbound.io/providers/upbound/provider-aws-elb): Configures Classic Load Balancers with listeners, SSL negotiation policies, stickiness, proxy protocol, and instance attachments for workloads still on the EC2-Classic era pattern.

- [upbound/provider-aws-elbv2](https://marketplace.upbound.io/providers/upbound/provider-aws-elbv2): Manages Application and Network Load Balancers with listeners, rules, TLS certificates, target groups, slow-start settings, and trust stores for modern HTTP/gRPC and TCP traffic shaping.

- [upbound/provider-aws-emr](https://marketplace.upbound.io/providers/upbound/provider-aws-emr): Defines encryption and security configurations for EMR on EC2 so Apache Spark, Hive, HBase, and Hadoop jobs meet KMS envelope encryption and in-transit TLS requirements.

- [upbound/provider-aws-emrcontainers](https://marketplace.upbound.io/providers/upbound/provider-aws-emrcontainers): Submits Apache Spark jobs to EMR on Amazon EKS by registering virtual clusters that reuse your Kubernetes nodes while EMR schedules Spark executors on the data plane.

- [upbound/provider-aws-emrserverless](https://marketplace.upbound.io/providers/upbound/provider-aws-emrserverless): Runs Apache Spark and Hive SQL on serverless EMR with autoscaling workers and per-job billing—no YARN or cluster management.

- [upbound/provider-aws-evidently](https://marketplace.upbound.io/providers/upbound/provider-aws-evidently): Runs feature flags and A/B experiments with audience segments and metrics export to CloudWatch so product teams ship controlled rollouts.

- [upbound/provider-aws-firehose](https://marketplace.upbound.io/providers/upbound/provider-aws-firehose): Streams logs and metrics into S3 (Parquet/ORC), Redshift COPY, OpenSearch indexing, Splunk HEC, or HTTP endpoints with buffering, GZIP compression, and dynamic partitioning for near-real-time analytics.

- [upbound/provider-aws-fis](https://marketplace.upbound.io/providers/upbound/provider-aws-fis): Defines chaos experiments that inject CPU, network, and API faults across EC2, ECS, and EKS using approved templates for resilience testing.

- [upbound/provider-aws-fsx](https://marketplace.upbound.io/providers/upbound/provider-aws-fsx): Delivers SMB Windows File Server, NetApp ONTAP (NFS/SMB), or parallel Lustre for HPC and ML training with backups, FSx for Lustre data repository links to S3, and multi-AZ options.

- [upbound/provider-aws-gamelift](https://marketplace.upbound.io/providers/upbound/provider-aws-gamelift): Hosts dedicated game servers with fleets, builds, matchmaking queues, and routing aliases so session-based multiplayer scales with player demand.

- [upbound/provider-aws-glacier](https://marketplace.upbound.io/providers/upbound/provider-aws-glacier): Archives compliance and backup data in long-term vaults with write-once lock policies for legal hold retention.

- [upbound/provider-aws-globalaccelerator](https://marketplace.upbound.io/providers/upbound/provider-aws-globalaccelerator): Advertises static anycast IPs that route user traffic over the AWS backbone to healthy regional endpoints for multi-Region active-active designs.

- [upbound/provider-aws-glue](https://marketplace.upbound.io/providers/upbound/provider-aws-glue): Builds serverless Spark and Python ETL with Glue crawlers, Spark jobs, workflows, Schema Registry, and the Hive-compatible Glue Data Catalog for Iceberg/Delta-style lakehouse tables on S3.

- [upbound/provider-aws-grafana](https://marketplace.upbound.io/providers/upbound/provider-aws-grafana): Provisions Amazon Managed Grafana workspaces with SAML SSO, API keys, and data-source plugins to Prometheus, Amazon Managed Prometheus, CloudWatch, Elasticsearch, and InfluxDB.

- [upbound/provider-aws-guardduty](https://marketplace.upbound.io/providers/upbound/provider-aws-guardduty): Turns on intelligent threat detection across accounts, tunes suppression filters, and onboards member accounts for organization-wide coverage of malicious activity.

- [upbound/provider-aws-iam](https://marketplace.upbound.io/providers/upbound/provider-aws-iam): Defines users, roles, groups, instance profiles, OIDC and SAML providers, inline and managed policies, access keys, and service-linked roles that gate every AWS API call.

- [upbound/provider-aws-identitystore](https://marketplace.upbound.io/providers/upbound/provider-aws-identitystore): Manages users and groups inside IAM Identity Center so workforce access can be assigned to AWS accounts and cloud applications from a central directory.

- [upbound/provider-aws-imagebuilder](https://marketplace.upbound.io/providers/upbound/provider-aws-imagebuilder): Automates golden AMI and container image builds with recipes, pipelines, tests, and cross-Region distribution for compliant baselines.

- [upbound/provider-aws-inspector](https://marketplace.upbound.io/providers/upbound/provider-aws-inspector): Runs the classic Inspector assessment templates against EC2 instances for network reachability and CVE discovery before migrating to Inspector v2.

- [upbound/provider-aws-inspector2](https://marketplace.upbound.io/providers/upbound/provider-aws-inspector2): Enables the modern Inspector service across EC2, ECR, and Lambda for continuous vulnerability and network exposure scanning with a single account toggle.

- [upbound/provider-aws-iot](https://marketplace.upbound.io/providers/upbound/provider-aws-iot): Onboards IoT devices with X.509 certs, MQTT topics, fleet provisioning, Thing Shadows, and IoT Rules that route telemetry to Lambda, Kinesis, Timestream, and S3.

- [upbound/provider-aws-ivs](https://marketplace.upbound.io/providers/upbound/provider-aws-ivs): Broadcasts low-latency live video with ingest channels, recording layouts, and playback integration for interactive streaming apps.

- [upbound/provider-aws-kafka](https://marketplace.upbound.io/providers/upbound/provider-aws-kafka): Operates Apache Kafka (MSK) clusters and MSK Serverless with Kafka ACLs, IAM auth, MSK replication to mirror topics, and SASL/SCRAM for high-throughput event streaming.

- [upbound/provider-aws-kafkaconnect](https://marketplace.upbound.io/providers/upbound/provider-aws-kafkaconnect): Deploys managed Kafka Connect workers with custom JAR plugins for Debezium-style CDC and S3/Sink connectors between MSK and databases or data lakes without self-hosting Connect.

- [upbound/provider-aws-kendra](https://marketplace.upbound.io/providers/upbound/provider-aws-kendra): Indexes Confluence, SharePoint, S3, and web content with connectors and ML-powered semantic search, FAQs, synonyms, and relevance tuning for enterprise Q&A portals.

- [upbound/provider-aws-keyspaces](https://marketplace.upbound.io/providers/upbound/provider-aws-keyspaces): Runs Apache Cassandra–compatible tables (CQL API) with single-digit-ms reads, serverless throughput, and multi-Region replication for wide-column, high-scale workloads.

- [upbound/provider-aws-kinesis](https://marketplace.upbound.io/providers/upbound/provider-aws-kinesis): Captures gigabytes per second of streaming records with sharded streams and enhanced fan-out consumers for real-time analytics pipelines.

- [upbound/provider-aws-kinesisanalytics](https://marketplace.upbound.io/providers/upbound/provider-aws-kinesisanalytics): Runs legacy SQL applications over streaming data for teams still on Kinesis Analytics v1.

- [upbound/provider-aws-kinesisanalyticsv2](https://marketplace.upbound.io/providers/upbound/provider-aws-kinesisanalyticsv2): Executes Apache Flink jobs on managed clusters with snapshots for stateful stream processing over Kinesis and Kafka sources.

- [upbound/provider-aws-kinesisvideo](https://marketplace.upbound.io/providers/upbound/provider-aws-kinesisvideo): Ingests time-encoded media from cameras and IoT devices for computer-vision and playback pipelines with durable streams.

- [upbound/provider-aws-kms](https://marketplace.upbound.io/providers/upbound/provider-aws-kms): Creates and rotates customer-managed CMKs (AES-256, RSA, ECC), aliases, multi-Region keys, grants, and envelope encryption for S3, EBS, RDS, and application data at rest.

- [upbound/provider-aws-lakeformation](https://marketplace.upbound.io/providers/upbound/provider-aws-lakeformation): Centralizes data lake governance with Lake Formation permissions (table/column/LF-tags) on Glue Catalog tables backed by S3, Redshift Spectrum, and Athena.

- [upbound/provider-aws-lambda](https://marketplace.upbound.io/providers/upbound/provider-aws-lambda): Deploys Node.js, Python, Java, Go, and .NET Lambda functions with layers, function URLs, SQS/SNS/Kafka event source mappings, provisioned concurrency, and async invoke for event-driven serverless backends.

- [upbound/provider-aws-lexmodels](https://marketplace.upbound.io/providers/upbound/provider-aws-lexmodels): Builds conversational bots with intents, slot filling, and aliases for voice and chat assistants integrated with Connect, Chime, and messaging channels.

- [upbound/provider-aws-licensemanager](https://marketplace.upbound.io/providers/upbound/provider-aws-licensemanager): Tracks software entitlements and enforces license rules on EC2 and RDS resources so teams stay within purchased seats and vendor agreements.

- [upbound/provider-aws-lightsail](https://marketplace.upbound.io/providers/upbound/provider-aws-lightsail): Spins up simple VMs, containers, load-balanced web apps, static IPs, DNS, and object storage with fixed monthly pricing for prototypes and small production sites.

- [upbound/provider-aws-location](https://marketplace.upbound.io/providers/upbound/provider-aws-location): Adds maps, geocoding, route calculation, device trackers, and geofences to applications with managed map tiles and privacy-preserving location history.

- [upbound/provider-aws-macie2](https://marketplace.upbound.io/providers/upbound/provider-aws-macie2): Discovers sensitive data in S3, runs scheduled classification jobs, tunes findings filters, and extends coverage to member accounts for data-loss prevention.

- [upbound/provider-aws-mediaconvert](https://marketplace.upbound.io/providers/upbound/provider-aws-mediaconvert): Transcodes broadcast and OTT assets (H.264/HEVC/AV1) with job queues, captions/subtitles, and HDR for packaging to downstream CDNs and origins.

- [upbound/provider-aws-medialive](https://marketplace.upbound.io/providers/upbound/provider-aws-medialive): Encodes live channels with redundant inputs, multiplexes, and input security groups for contribution feeds into the Elemental live video stack.

- [upbound/provider-aws-mediapackage](https://marketplace.upbound.io/providers/upbound/provider-aws-mediapackage): Packages live streams into Apple HLS and MPEG-DASH endpoints with DRM (Widevine/FairPlay/PlayReady) hooks for CDN origin distribution.

- [upbound/provider-aws-mediastore](https://marketplace.upbound.io/providers/upbound/provider-aws-mediastore): Stores low-latency media segments behind container policies optimized for live production write workloads.

- [upbound/provider-aws-memorydb](https://marketplace.upbound.io/providers/upbound/provider-aws-memorydb): Delivers Redis-compatible clusters with multi-AZ durability, snapshots, and ACL users for ultra-fast in-memory workloads that need Redis APIs without self-managing nodes.

- [upbound/provider-aws-mq](https://marketplace.upbound.io/providers/upbound/provider-aws-mq): Runs managed Apache ActiveMQ or RabbitMQ brokers (AMQP 0.9.1, MQTT, STOMP) with maintenance windows and users—message-oriented middleware without operating brokers yourself.

- [upbound/provider-aws-neptune](https://marketplace.upbound.io/providers/upbound/provider-aws-neptune): Hosts property graph (Gremlin, openCypher) and RDF (SPARQL) graph databases with read replicas, global databases, and snapshots for identity graphs, fraud detection, and knowledge graphs.

- [upbound/provider-aws-networkfirewall](https://marketplace.upbound.io/providers/upbound/provider-aws-networkfirewall): Inserts stateful and stateless inspection between VPC subnets and the internet or Transit Gateway with centralized rule groups, TLS inspection, and flow logging.

- [upbound/provider-aws-networkmanager](https://marketplace.upbound.io/providers/upbound/provider-aws-networkmanager): Designs global Cloud WAN core networks with segments, attachments to VPCs and on-prem sites, and transit gateway integration for enterprise-wide routing.

- [upbound/provider-aws-networkmonitor](https://marketplace.upbound.io/providers/upbound/provider-aws-networkmonitor): Actively monitors network traffic between AWS VPC subnets and on-premises destinations using monitors and probes to measure packet loss and latency, and publishes metrics to CloudWatch for hybrid network visibility.

- [upbound/provider-aws-oam](https://marketplace.upbound.io/providers/upbound/provider-aws-oam): Shares CloudWatch telemetry sinks across accounts and OUs so centralized observability teams ingest metrics and logs without duplicating destinations.

- [upbound/provider-aws-opensearch](https://marketplace.upbound.io/providers/upbound/provider-aws-opensearch): Operates OpenSearch (Elasticsearch-compatible REST API) clusters with fine-grained access, SAML SSO, KMS encryption, and UltraWarm/cold tiers for log analytics, full-text search, and security SIEM.

- [upbound/provider-aws-opsworks](https://marketplace.upbound.io/providers/upbound/provider-aws-opsworks): Upbound's official Crossplane provider to manage Amazon Web Services (AWS)
opsworks services in Kubernetes.

- [upbound/provider-aws-organizations](https://marketplace.upbound.io/providers/upbound/provider-aws-organizations): Creates multi-account organizations, OUs, service control policies, and delegated admins so governance and security baselines roll out org-wide.

- [upbound/provider-aws-pinpoint](https://marketplace.upbound.io/providers/upbound/provider-aws-pinpoint): Orchestrates SMS, email, push, and voice campaigns with Pinpoint projects, segments, journeys, and analytics for targeted customer engagement.

- [upbound/provider-aws-qldb](https://marketplace.upbound.io/providers/upbound/provider-aws-qldb): Maintains cryptographically verifiable ledgers with journal streams for audit trails and compliance records that need immutable history.

- [upbound/provider-aws-quicksight](https://marketplace.upbound.io/providers/upbound/provider-aws-quicksight): Onboards QuickSight SPICE-backed BI with authors, groups, row-level security, and embedded dashboards fed from Athena, Redshift, RDS, and S3 data lakes.

- [upbound/provider-aws-ram](https://marketplace.upbound.io/providers/upbound/provider-aws-ram): Shares subnets, Transit Gateways, Route 53 rules, and other resources across accounts without duplicating infrastructure in every workload OU.

- [upbound/provider-aws-rds](https://marketplace.upbound.io/providers/upbound/provider-aws-rds): Provisions Aurora PostgreSQL, Aurora MySQL, RDS for PostgreSQL, MySQL, MariaDB, Oracle, and SQL Server with Multi-AZ, RDS Proxy connection pooling, automated backups, Performance Insights, and global databases for relational workloads.

- [upbound/provider-aws-redshift](https://marketplace.upbound.io/providers/upbound/provider-aws-redshift): Runs petabyte-scale columnar SQL analytics (PostgreSQL-compatible Redshift) with RA3 nodes, concurrency scaling, Spectrum to S3, enhanced VPC routing, and KMS encryption for regulated warehouses.

- [upbound/provider-aws-redshiftserverless](https://marketplace.upbound.io/providers/upbound/provider-aws-redshiftserverless): Serves on-demand Redshift SQL (serverless RPU scaling) with namespaces and workgroups, private VPC endpoints, and snapshots for dev/test clones.

- [upbound/provider-aws-resourcegroups](https://marketplace.upbound.io/providers/upbound/provider-aws-resourcegroups): Groups resources by tag or CloudFormation stack for bulk operations, cost allocation, and Systems Manager targeting.

- [upbound/provider-aws-rolesanywhere](https://marketplace.upbound.io/providers/upbound/provider-aws-rolesanywhere): Lets workloads outside AWS exchange X.509 certificates for IAM role sessions so servers and IoT devices obtain short-lived credentials without long-lived keys.

- [upbound/provider-aws-route53](https://marketplace.upbound.io/providers/upbound/provider-aws-route53): Hosts public and private DNS zones, health-checked routing policies, traffic flows, query logging, DNSSEC signing, and resolver hybrid settings for global traffic management.

- [upbound/provider-aws-route53profiles](https://marketplace.upbound.io/providers/upbound/provider-aws-route53profiles): Applies reusable DNS profiles and associations across VPCs so teams inherit consistent resolver rules and forwarding behavior.

- [upbound/provider-aws-route53recoverycontrolconfig](https://marketplace.upbound.io/providers/upbound/provider-aws-route53recoverycontrolconfig): Implements application recovery routing controls with safety rules and regional clusters so you can orchestrate failover during incidents with audited guardrails.

- [upbound/provider-aws-route53recoveryreadiness](https://marketplace.upbound.io/providers/upbound/provider-aws-route53recoveryreadiness): Models readiness checks and recovery groups that continuously validate capacity and dependencies before a disaster impacts production.

- [upbound/provider-aws-route53resolver](https://marketplace.upbound.io/providers/upbound/provider-aws-route53resolver): Extends DNS resolution into VPCs with inbound and outbound endpoints, conditional forwarding rules, firewall integration, and query logging for hybrid DNS.

- [upbound/provider-aws-rum](https://marketplace.upbound.io/providers/upbound/provider-aws-rum): Captures real user monitoring from web clients with session telemetry and metrics export to CloudWatch for front-end performance analytics.

- [upbound/provider-aws-s3](https://marketplace.upbound.io/providers/upbound/provider-aws-s3): Stores S3 objects with bucket policies, SSE-S3/SSE-KMS encryption, cross-Region replication, S3 Intelligent-Tiering and Glacier transitions, inventory, access logs, EventBridge notifications, S3 Object Lock (WORM), and fine-grained ACLs.

- [upbound/provider-aws-s3control](https://marketplace.upbound.io/providers/upbound/provider-aws-s3control): Governs multi-account S3 with Object Lambda access points, multi-Region access points, org-wide block public access, and Storage Lens visibility.

- [upbound/provider-aws-s3vectors](https://marketplace.upbound.io/providers/upbound/provider-aws-s3vectors): Stores and queries high-dimensional vector embeddings natively in S3, enabling semantic search and similarity lookups without a separate vector database.

- [upbound/provider-aws-sagemaker](https://marketplace.upbound.io/providers/upbound/provider-aws-sagemaker): Trains and deploys PyTorch, TensorFlow, XGBoost, and custom models via SageMaker Studio, notebooks, real-time/batch endpoints, Feature Store, Edge Manager, and MLflow-compatible tracking for end-to-end MLOps.

- [upbound/provider-aws-scheduler](https://marketplace.upbound.io/providers/upbound/provider-aws-scheduler): Schedules one-off and recurring invocations of Lambda, ECS, and other targets with flexible windows, time zones, and dead-letter handling beyond EventBridge rules.

- [upbound/provider-aws-schemas](https://marketplace.upbound.io/providers/upbound/provider-aws-schemas): Registers versioned event schemas and discoverers so producers and consumers agree on contracts for EventBridge-driven architectures.

- [upbound/provider-aws-secretsmanager](https://marketplace.upbound.io/providers/upbound/provider-aws-secretsmanager): Stores JSON secrets and rotates RDS, Redshift, and API keys via Lambda rotation, with resource policies so apps and Kubernetes workloads fetch credentials without plaintext in repos.

- [upbound/provider-aws-securityhub](https://marketplace.upbound.io/providers/upbound/provider-aws-securityhub): Aggregates findings from GuardDuty, Inspector, Firewall Manager, and partners with standards subscriptions, insights, and multi-account aggregation for a single security posture view.

- [upbound/provider-aws-serverlessrepo](https://marketplace.upbound.io/providers/upbound/provider-aws-serverlessrepo): Deploys curated serverless applications from the repository as CloudFormation stacks for reusable SAM patterns.

- [upbound/provider-aws-servicecatalog](https://marketplace.upbound.io/providers/upbound/provider-aws-servicecatalog): Publishes portfolios of approved products, constraints, and provisioning artifacts so lines of business self-serve infra from governed blueprints.

- [upbound/provider-aws-servicediscovery](https://marketplace.upbound.io/providers/upbound/provider-aws-servicediscovery): Registers services and instances for discovery across ECS, Lambda, and hybrid workloads using HTTP, private DNS, or public DNS namespaces.

- [upbound/provider-aws-servicequotas](https://marketplace.upbound.io/providers/upbound/provider-aws-servicequotas): Requests and tracks raises to AWS service limits so large launches are not blocked by default quotas.

- [upbound/provider-aws-ses](https://marketplace.upbound.io/providers/upbound/provider-aws-ses): Sends high-volume email with verified identities, DKIM, configuration sets, inbound receipt rules, and suppression lists for marketing and transactional mail.

- [upbound/provider-aws-sesv2](https://marketplace.upbound.io/providers/upbound/provider-aws-sesv2): Configures modern SESv2 resources such as dedicated IP pools, event destinations, and identity attributes for deliverability tuning.

- [upbound/provider-aws-sfn](https://marketplace.upbound.io/providers/upbound/provider-aws-sfn): Orchestrates workflows with Amazon States Language (JSON ASL)—parallel and map states, human approval tasks, ECS/Lambda activities, and Express workflows for high-throughput event processing.

- [upbound/provider-aws-signer](https://marketplace.upbound.io/providers/upbound/provider-aws-signer): Signs code artifacts and images with managed profiles and permissions for secure software distribution pipelines.

- [upbound/provider-aws-simpledb](https://marketplace.upbound.io/providers/upbound/provider-aws-simpledb): Upbound's official Crossplane provider to manage Amazon Web Services (AWS)
simpledb services in Kubernetes.

- [upbound/provider-aws-sns](https://marketplace.upbound.io/providers/upbound/provider-aws-sns): Fan-outs events to subscribers, mobile push endpoints, SMS, and FIFO topics with encryption and delivery policies for pub/sub messaging.

- [upbound/provider-aws-sqs](https://marketplace.upbound.io/providers/upbound/provider-aws-sqs): Buffers work with standard and FIFO queues, dead-letter queues, and redrive policies for reliable async processing between services.

- [upbound/provider-aws-ssm](https://marketplace.upbound.io/providers/upbound/provider-aws-ssm): Automates Patch Manager baselines, SSM Documents runbooks, Parameter Store (hierarchical config), Maintenance Windows, Session Manager, and hybrid activations across EC2, on-prem, and edge fleet.

- [upbound/provider-aws-ssoadmin](https://marketplace.upbound.io/providers/upbound/provider-aws-ssoadmin): Assigns permission sets and inline policies to IAM Identity Center accounts, wires managed policies, and configures attribute mappings for workforce SSO.

- [upbound/provider-aws-swf](https://marketplace.upbound.io/providers/upbound/provider-aws-swf): Hosts legacy Simple Workflow domains for long-running coordinated tasks that still rely on SWF deciders and activity workers.

- [upbound/provider-aws-timestreaminfluxdb](https://marketplace.upbound.io/providers/upbound/provider-aws-timestreaminfluxdb): Runs managed InfluxDB 3.x–compatible clusters with InfluxQL/Flux-style access patterns for high-cardinality time-series telemetry and scalable storage.

- [upbound/provider-aws-timestreamwrite](https://marketplace.upbound.io/providers/upbound/provider-aws-timestreamwrite): Creates Amazon Timestream databases and tables with SQL access, memory/magnetic retention tiers, and rollups for IoT and DevOps metrics at scale.

- [upbound/provider-aws-transcribe](https://marketplace.upbound.io/providers/upbound/provider-aws-transcribe): Trains custom language models (CLM) and vocabularies for low-latency speech-to-text (batch and streaming) with PII redaction for contact centers, broadcast, and compliance workflows.

- [upbound/provider-aws-transfer](https://marketplace.upbound.io/providers/upbound/provider-aws-transfer): Operates SFTP, FTPS, and FTP servers backed by S3 or EFS with per-user keys, workflows, and connectors for B2B file exchange without bespoke file servers.

- [upbound/provider-aws-verifiedaccess](https://marketplace.upbound.io/providers/upbound/provider-aws-verifiedaccess): Enforces zero-trust access to private HTTP apps with OIDC/SAML identity, device-trust providers for posture checks, and policy-driven identity-aware proxies and logging.

- [upbound/provider-aws-vpc](https://marketplace.upbound.io/providers/upbound/provider-aws-vpc): Subscribes to advanced VPC network performance metrics for capacity planning on large-scale data planes.

- [upbound/provider-aws-vpclattice](https://marketplace.upbound.io/providers/upbound/provider-aws-vpclattice): Connects services across VPCs and accounts with Lattice service networks, target groups, auth policies, and HTTP routing that abstracts east-west connectivity for microservices.

- [upbound/provider-aws-waf](https://marketplace.upbound.io/providers/upbound/provider-aws-waf): Defines legacy WAF Classic conditions and web ACLs for CloudFront or regional resources still on the original rule model.

- [upbound/provider-aws-wafregional](https://marketplace.upbound.io/providers/upbound/provider-aws-wafregional): Applies regional WAF Classic protections in front of Application Load Balancers for workloads not yet on WAFv2.

- [upbound/provider-aws-wafv2](https://marketplace.upbound.io/providers/upbound/provider-aws-wafv2): Protects HTTP/gRPC APIs and sites with AWS Managed Rules (CRS), rate-based rules, AWS Bot Control, CAPTCHA, and full request logging for CloudFront, ALB/API Gateway, and App Runner.

- [upbound/provider-aws-workspaces](https://marketplace.upbound.io/providers/upbound/provider-aws-workspaces): Prepares directories and IP allow lists for persistent Windows and Linux desktops delivered as a managed DaaS experience.

- [upbound/provider-aws-xray](https://marketplace.upbound.io/providers/upbound/provider-aws-xray): Collects distributed traces (OpenTelemetry-compatible SDKs) with sampling rules, service maps, and encryption so teams debug latency and errors across microservices.

- [upbound/provider-azapi](https://marketplace.upbound.io/providers/upbound/provider-azapi): Upbound's official Crossplane provider to manage Microsoft Azure API
resources in Kubernetes.

- [upbound/provider-azure-alertsmanagement](https://marketplace.upbound.io/providers/upbound/provider-azure-alertsmanagement): Defines alert rules, action groups, and smart detector baselines for Azure Monitor alerts across subscriptions and resources. Use it to route incidents to email, SMS, webhooks, or Logic Apps with consistent escalation paths.

- [upbound/provider-azure-analysisservices](https://marketplace.upbound.io/providers/upbound/provider-azure-analysisservices): Hosts Azure Analysis Services tabular and multidimensional models for BI workloads with scale-out query replicas. Integrates with Power BI and Azure Synapse for governed semantic layers.

- [upbound/provider-azure-apimanagement](https://marketplace.upbound.io/providers/upbound/provider-azure-apimanagement): Publishes REST and GraphQL APIs with policies, OAuth/JWT validation, rate limits, and caching at the edge. Fronts backends in VNets or multi-region deployments with developer portal and revision control.

- [upbound/provider-azure-appconfiguration](https://marketplace.upbound.io/providers/upbound/provider-azure-appconfiguration): Stores feature flags and key-value settings with point-in-time snapshots and environment labels. Lets apps pull dynamic configuration without redeploying containers or functions.

- [upbound/provider-azure-appplatform](https://marketplace.upbound.io/providers/upbound/provider-azure-appplatform): Runs Spring Cloud and custom microservices on Azure Spring Apps with managed Eureka, config server, and service bindings. Automates blue/green and VNet integration for Java-centric teams.

- [upbound/provider-azure-attestation](https://marketplace.upbound.io/providers/upbound/provider-azure-attestation): Verifies trusted execution environments and TPM quotes for confidential workloads. Issues signed attestation tokens consumable by policy engines and Azure confidential computing services.

- [upbound/provider-azure-authorization](https://marketplace.upbound.io/providers/upbound/provider-azure-authorization): Assigns Azure RBAC roles at subscription, resource group, and resource scope for users, groups, and managed identities. Keeps least-privilege posture aligned with policy and Conditional Access.

- [upbound/provider-azure-automation](https://marketplace.upbound.io/providers/upbound/provider-azure-automation): Runs PowerShell and Python runbooks, schedules jobs, and orchestrates hybrid workers across Azure and on-prem. Ideal for patch orchestration, drift remediation, and CMDB sync workflows.

- [upbound/provider-azure-azure](https://marketplace.upbound.io/providers/upbound/provider-azure-azure): Upbound's official Crossplane provider to manage Microsoft Azure
azure services in Kubernetes.

- [upbound/provider-azure-azurestackhci](https://marketplace.upbound.io/providers/upbound/provider-azure-azurestackhci): Manages Azure Stack HCI clusters, storage volumes, and virtual networks for on-premises cloud operations. Bridges Windows Admin Center workflows with ARM-style APIs for hybrid Kubernetes and VMs.

- [upbound/provider-azure-botservice](https://marketplace.upbound.io/providers/upbound/provider-azure-botservice): Registers Bot Framework channels, Direct Line keys, and Web Chat endpoints for conversational apps. Connects Azure Bot Service to Cognitive Services and App Insights for telemetry.

- [upbound/provider-azure-cache](https://marketplace.upbound.io/providers/upbound/provider-azure-cache): Deploys Azure Cache for Redis Enterprise tiers with clustering, persistence, and firewall rules. Caches session, leaderboard, and rate-limit state with low-latency access from App Service or AKS.

- [upbound/provider-azure-cdn](https://marketplace.upbound.io/providers/upbound/provider-azure-cdn): Configures Azure Front Door and CDN profiles with origins, rules engines, WAF integration, and custom domains. Accelerates static assets and APIs globally with health probes and traffic shaping.

- [upbound/provider-azure-certificateregistration](https://marketplace.upbound.io/providers/upbound/provider-azure-certificateregistration): Controls App Service certificate orders, domain validation, and auto-renew hooks against DNS providers. Automates TLS lifecycle for web apps without manual PEM uploads.

- [upbound/provider-azure-cognitiveservices](https://marketplace.upbound.io/providers/upbound/provider-azure-cognitiveservices): Provisions Language, Vision, Speech, and OpenAI-compatible endpoints with keys, private links, and content filters. Centralizes responsible AI configuration for apps calling Azure Cognitive Services.

- [upbound/provider-azure-communication](https://marketplace.upbound.io/providers/upbound/provider-azure-communication): Runs Azure Communication Services for SMS, voice, video, and chat with phone number procurement. Embeds real-time communications into SaaS apps with Teams interoperability options.

- [upbound/provider-azure-compute](https://marketplace.upbound.io/providers/upbound/provider-azure-compute): Manages Linux and Windows VMs, availability sets, proximity placement groups, extensions, and managed disks. Mirrors azurerm virtual machines and scale sets for fleet automation via Crossplane.

- [upbound/provider-azure-confidentialledger](https://marketplace.upbound.io/providers/upbound/provider-azure-confidentialledger): Hosts append-only ledgers with attested TEEs for tamper-evident audit trails. Useful for regulated workloads needing cryptographic verification of writes.

- [upbound/provider-azure-consumption](https://marketplace.upbound.io/providers/upbound/provider-azure-consumption): Surfaces cost exports, budgets, and usage details APIs for FinOps automation. Feeds chargeback reports and anomaly detection pipelines across subscriptions.

- [upbound/provider-azure-containerapp](https://marketplace.upbound.io/providers/upbound/provider-azure-containerapp): Runs serverless containers on Azure Container Apps with KEDA autoscaling, revisions, and ingress. Supports Dapr sidecars and managed environments for microservices without operating AKS.

- [upbound/provider-azure-containerregistry](https://marketplace.upbound.io/providers/upbound/provider-azure-containerregistry): Hosts private OCI registries with geo-replication, content trust, and webhook notifications. Integrates with AKS, App Service, and CI pipelines for image promotion.

- [upbound/provider-azure-containerservice](https://marketplace.upbound.io/providers/upbound/provider-azure-containerservice): Manages Azure Kubernetes Service clusters, node pools, maintenance windows, and add-ons. Aligns with azurerm_kubernetes_cluster for GitOps-driven platform engineering.

- [upbound/provider-azure-cosmosdb](https://marketplace.upbound.io/providers/upbound/provider-azure-cosmosdb): Provisions globally distributed Cosmos DB accounts with SQL, Cassandra, Mongo, Gremlin, and Table APIs. Configures autoscale RU/s, analytical store, and private endpoints for low-latency apps.

- [upbound/provider-azure-costmanagement](https://marketplace.upbound.io/providers/upbound/provider-azure-costmanagement): Defines cost allocation rules, exports to storage accounts, and anomaly subscriptions for Azure Cost Management. Helps teams attribute spend to tags, resource groups, and departments.

- [upbound/provider-azure-customproviders](https://marketplace.upbound.io/providers/upbound/provider-azure-customproviders): Registers custom resource providers that map ARM operations to webhooks or Logic Apps. Extends Azure Resource Manager with bespoke APIs for internal platforms.

- [upbound/provider-azure-dashboard](https://marketplace.upbound.io/providers/upbound/provider-azure-dashboard): Builds Azure Portal shared dashboards pinning metrics, logs, and resource views. Codifies operator visibility for SRE and NOC teams.

- [upbound/provider-azure-databoxedge](https://marketplace.upbound.io/providers/upbound/provider-azure-databoxedge): Configures Azure Stack Edge appliances for local caching, ML inferencing, and offline sync to Blob. Supports rugged edge sites needing Azure-consistent APIs.

- [upbound/provider-azure-databricks](https://marketplace.upbound.io/providers/upbound/provider-azure-databricks): Automates Azure Databricks workspaces, clusters, jobs, and metastore integrations. Pairs with Unity Catalog patterns for governed lakehouse analytics.

- [upbound/provider-azure-datafactory](https://marketplace.upbound.io/providers/upbound/provider-azure-datafactory): Orchestrates data integration pipelines, linked services, and triggers across Azure and SaaS sinks. Supports mapping data flows and Managed Virtual Network isolation.

- [upbound/provider-azure-datamigration](https://marketplace.upbound.io/providers/upbound/provider-azure-datamigration): Plans online and offline migrations for SQL Server, PostgreSQL, and MySQL into Azure-managed databases. Tracks cutover tasks and SKU recommendations.

- [upbound/provider-azure-dataprotection](https://marketplace.upbound.io/providers/upbound/provider-azure-dataprotection): Configures Azure Backup vaults, policies, and protected items for VMs, SQL, and file shares. Aligns with geo-redundant retention and soft-delete safeguards.

- [upbound/provider-azure-datashare](https://marketplace.upbound.io/providers/upbound/provider-azure-datashare): Shares datasets between tenants with invitation-based access and snapshot schedules. Enables cross-organization analytics without copying raw data repeatedly.

- [upbound/provider-azure-dbformariadb](https://marketplace.upbound.io/providers/upbound/provider-azure-dbformariadb): Upbound's official Crossplane provider to manage Microsoft Azure
dbformariadb services in Kubernetes.

- [upbound/provider-azure-dbformysql](https://marketplace.upbound.io/providers/upbound/provider-azure-dbformysql): Runs Azure Database for MySQL flexible servers with HA, private access, and read replicas. Simplifies relational backends for LAMP-style apps with automated patching.

- [upbound/provider-azure-dbforpostgresql](https://marketplace.upbound.io/providers/upbound/provider-azure-dbforpostgresql): Runs Azure Database for PostgreSQL flexible servers with Citus scale-out options and private networking. Supports pgvector and advanced security features for cloud-native apps.

- [upbound/provider-azure-desktopvirtualization](https://marketplace.upbound.io/providers/upbound/provider-azure-desktopvirtualization): Delivers Azure Virtual Desktop host pools, application groups, and FSLogix profiles. Streams full desktops or remote apps with Entra ID and conditional access integration.

- [upbound/provider-azure-devcenter](https://marketplace.upbound.io/providers/upbound/provider-azure-devcenter): Manages Azure Dev Center projects, Dev Box definitions, pools, and environment types for self-service developer workstations and deployment environments. Centralizes governance, networking, and image catalogs so platform teams can hand developers ready-to-code Dev Boxes on demand.

- [upbound/provider-azure-devices](https://marketplace.upbound.io/providers/upbound/provider-azure-devices): Registers IoT Hub devices, modules, and DPS enrollments for fleet onboarding at scale. Supports X.509 and symmetric keys with re-provisioning policies.

- [upbound/provider-azure-deviceupdate](https://marketplace.upbound.io/providers/upbound/provider-azure-deviceupdate): Manages over-the-air updates for IoT devices with staged deployments and compliance reporting. Pairs with IoT Hub for brownfield firmware rollouts.

- [upbound/provider-azure-devopsinfrastructure](https://marketplace.upbound.io/providers/upbound/provider-azure-devopsinfrastructure): Provisions Managed DevOps Pools that supply self-hosted agent capacity for Azure DevOps and GitHub Actions pipelines, backed by Azure VM Scale Sets. Ties pools to Dev Center projects for image, networking, and quota governance so CI/CD capacity scales without manually maintained build agents.

- [upbound/provider-azure-devtestlab](https://marketplace.upbound.io/providers/upbound/provider-azure-devtestlab): Creates labs with formulas, artifacts, and auto-shutdown policies for cost-conscious dev/test VMs. Accelerates inner-loop testing with reusable templates.

- [upbound/provider-azure-digitaltwins](https://marketplace.upbound.io/providers/upbound/provider-azure-digitaltwins): Models physical environments as live graphs with relationships, telemetry routes, and time-series insights. Powers smart-building and industrial twin scenarios.

- [upbound/provider-azure-elastic](https://marketplace.upbound.io/providers/upbound/provider-azure-elastic): Deploys Elastic Cloud on Azure clusters with autoscale tiers and SAML SSO. Indexes logs and metrics with Elastic Stack integrations for APM-style observability.

- [upbound/provider-azure-eventgrid](https://marketplace.upbound.io/providers/upbound/provider-azure-eventgrid): Defines Event Grid topics, domains, and subscriptions with filters and dead-letter destinations. Routes Azure-native and custom events to Functions, Logic Apps, or webhooks.

- [upbound/provider-azure-eventhub](https://marketplace.upbound.io/providers/upbound/provider-azure-eventhub): Streams high-throughput events through namespaces, hubs, and consumer groups with capture to Data Lake. Supports Kafka protocol endpoints for analytics pipelines.

- [upbound/provider-azure-fluidrelay](https://marketplace.upbound.io/providers/upbound/provider-azure-fluidrelay): Hosts Fluid Relay servers for real-time coauthoring and presence in web apps. Offloads operational burden for Microsoft Fluid Framework workloads.

- [upbound/provider-azure-guestconfiguration](https://marketplace.upbound.io/providers/upbound/provider-azure-guestconfiguration): Assigns Azure Policy guest configuration audits for OS baselines inside VMs. Reports drift against DSC or Chef-style policies for compliance dashboards.

- [upbound/provider-azure-hdinsight](https://marketplace.upbound.io/providers/upbound/provider-azure-hdinsight): Provisions HDInsight Hadoop, Spark, HBase, and Kafka clusters with metastores and autoscale rules. Supports enterprise security packages and VNet injection.

- [upbound/provider-azure-healthbot](https://marketplace.upbound.io/providers/upbound/provider-azure-healthbot): Configures Azure Health Bot instances with scenario templates and FHIR connectors. Enables triage chat experiences compliant with healthcare interoperability needs.

- [upbound/provider-azure-healthcareapis](https://marketplace.upbound.io/providers/upbound/provider-azure-healthcareapis): Deploys FHIR, DICOM, and MedTech services for clinical data exchange with SMART on FHIR auth. Supports private link and audit logging for HIPAA-style environments.

- [upbound/provider-azure-insights](https://marketplace.upbound.io/providers/upbound/provider-azure-insights): Wraps classic Application Insights components for custom metrics, availability tests, and smart detection. Feeds dashboards and workbooks alongside Log Analytics.

- [upbound/provider-azure-iotcentral](https://marketplace.upbound.io/providers/upbound/provider-azure-iotcentral): Runs IoT Central applications with device templates, rules, and data export to Azure Data Explorer. Accelerates vertical IoT SaaS without building custom device services.

- [upbound/provider-azure-keyvault](https://marketplace.upbound.io/providers/upbound/provider-azure-keyvault): Stores keys, secrets, and certificates with RBAC, private endpoints, and rotation policies. Integrates with App Service, AKS, and Functions for secretless patterns.

- [upbound/provider-azure-kusto](https://marketplace.upbound.io/providers/upbound/provider-azure-kusto): Creates Azure Data Explorer clusters and databases for high-volume log and telemetry analytics. Powers near-real-time dashboards with KQL and materialized views.

- [upbound/provider-azure-labservices](https://marketplace.upbound.io/providers/upbound/provider-azure-labservices): Upbound's official Crossplane provider to manage Microsoft Azure
labservices services in Kubernetes.

- [upbound/provider-azure-loadtestservice](https://marketplace.upbound.io/providers/upbound/provider-azure-loadtestservice): Runs Azure Load Testing JMeter-based suites against public or private endpoints. Captures client-side metrics and integrates with CI gates.

- [upbound/provider-azure-logic](https://marketplace.upbound.io/providers/upbound/provider-azure-logic): Orchestrates Logic Apps workflows with connectors to hundreds of SaaS systems. Ideal for B2B EDI, approval routing, and lightweight ETL without VMs.

- [upbound/provider-azure-logz](https://marketplace.upbound.io/providers/upbound/provider-azure-logz): Upbound's official Crossplane provider to manage Microsoft Azure
logz services in Kubernetes.

- [upbound/provider-azure-machinelearningservices](https://marketplace.upbound.io/providers/upbound/provider-azure-machinelearningservices): Manages Azure Machine Learning workspaces, compute clusters, endpoints, and datasets. Supports MLOps pipelines with model registry and drift monitoring.

- [upbound/provider-azure-maintenance](https://marketplace.upbound.io/providers/upbound/provider-azure-maintenance): Schedules maintenance configurations across subscriptions for VM and SQL patching windows. Reduces surprise reboots by aligning updates with change calendars.

- [upbound/provider-azure-managedidentity](https://marketplace.upbound.io/providers/upbound/provider-azure-managedidentity): Creates user-assigned managed identities and federated credentials for workload access to Azure AD–protected APIs. Enables passwordless access from Kubernetes and CI jobs.

- [upbound/provider-azure-management](https://marketplace.upbound.io/providers/upbound/provider-azure-management): Applies management group policies, subscriptions, and Blueprints-style artifacts for enterprise landing zones. Centralizes governance across the tenant hierarchy.

- [upbound/provider-azure-maps](https://marketplace.upbound.io/providers/upbound/provider-azure-maps): Uses Azure Maps geocoding, routing, traffic, and weather APIs with account keys and private links. Embeds location intelligence into mobile and logistics apps.

- [upbound/provider-azure-marketplaceordering](https://marketplace.upbound.io/providers/upbound/provider-azure-marketplaceordering): Accepts Azure Marketplace agreements and SaaS plans programmatically. Automates procurement flows for third-party ISV offers.

- [upbound/provider-azure-media](https://marketplace.upbound.io/providers/upbound/provider-azure-media): Upbound's official Crossplane provider to manage Microsoft Azure
media services in Kubernetes.

- [upbound/provider-azure-mixedreality](https://marketplace.upbound.io/providers/upbound/provider-azure-mixedreality): Upbound's official Crossplane provider to manage Microsoft Azure
mixedreality services in Kubernetes.

- [upbound/provider-azure-netapp](https://marketplace.upbound.io/providers/upbound/provider-azure-netapp): Runs Azure NetApp Files capacity pools and volumes with snapshot policies and dual-protocol access. Delivers enterprise NFS/SMB performance for HPC and SAP.

- [upbound/provider-azure-network](https://marketplace.upbound.io/providers/upbound/provider-azure-network): Defines VNets, subnets, NSGs, route tables, load balancers, and private link endpoints. Core networking layer for nearly every Azure landing zone pattern.

- [upbound/provider-azure-notificationhubs](https://marketplace.upbound.io/providers/upbound/provider-azure-notificationhubs): Broadcasts push notifications to iOS, Android, and Windows devices with tag-based routing. Supports APNs, FCM, and WNS with telemetry.

- [upbound/provider-azure-operationalinsights](https://marketplace.upbound.io/providers/upbound/provider-azure-operationalinsights): Configures Log Analytics workspaces, saved queries, and data export rules. Centralizes logs for Azure Monitor, Sentinel, and ITSM integrations.

- [upbound/provider-azure-operationsmanagement](https://marketplace.upbound.io/providers/upbound/provider-azure-operationsmanagement): Manages legacy Operations Management Suite solutions and hybrid worker links where still required. Prefer Azure Monitor for new designs.

- [upbound/provider-azure-oracle](https://marketplace.upbound.io/providers/upbound/provider-azure-oracle): Provisions Oracle Database@Azure Autonomous Databases, backups, and clones. Enables running Oracle workloads natively within Azure infrastructure.

- [upbound/provider-azure-orbital](https://marketplace.upbound.io/providers/upbound/provider-azure-orbital): Registers Azure Orbital ground stations and contacts for satellite data ingest. Targets aerospace workloads needing scheduled downlinks.

- [upbound/provider-azure-policyinsights](https://marketplace.upbound.io/providers/upbound/provider-azure-policyinsights): Queries policy compliance states and remediation tasks across scopes. Feeds dashboards for regulatory posture and auto-remediation jobs.

- [upbound/provider-azure-portal](https://marketplace.upbound.io/providers/upbound/provider-azure-portal): Configures shared dashboards and tenant-level portal settings where exposed via API. Supports operator customizations for Azure Portal experiences.

- [upbound/provider-azure-powerbidedicated](https://marketplace.upbound.io/providers/upbound/provider-azure-powerbidedicated): Runs Power BI Embedded capacities for app-owns-data embedding in SaaS products. Isolates SKU tiers for concurrent user loads and refresh schedules.

- [upbound/provider-azure-purview](https://marketplace.upbound.io/providers/upbound/provider-azure-purview): Deploys Microsoft Purview accounts for data catalog, lineage, and classification scans. Governs sensitive data across Azure and on-prem sources.

- [upbound/provider-azure-recoveryservices](https://marketplace.upbound.io/providers/upbound/provider-azure-recoveryservices): Configures Site Recovery replication, failover plans, and Azure Backup vault integrations for VMs and SQL. Delivers RPO/RTO objectives for DR drills.

- [upbound/provider-azure-relay](https://marketplace.upbound.io/providers/upbound/provider-azure-relay): Exposes Hybrid Connections and WCF relays for secure tunneling to on-prem services without inbound firewall holes. Bridges App Service and Functions to private endpoints.

- [upbound/provider-azure-resources](https://marketplace.upbound.io/providers/upbound/provider-azure-resources): Manages resource groups, locks, tags, and template deployments at ARM scope. Foundational for organizing workloads and enforcing naming standards.

- [upbound/provider-azure-search](https://marketplace.upbound.io/providers/upbound/provider-azure-search): Runs Azure AI Search indexes, skillsets, and semantic rankers for vector and keyword retrieval. Indexes Blob, SQL, and Cosmos data for Copilot-style apps.

- [upbound/provider-azure-security](https://marketplace.upbound.io/providers/upbound/provider-azure-security): Configures Microsoft Defender for Cloud plans, secure scores, and security contacts. Surfaces recommendations and regulatory compliance dashboards.

- [upbound/provider-azure-securityinsights](https://marketplace.upbound.io/providers/upbound/provider-azure-securityinsights): Deploys Microsoft Sentinel workspaces, analytics rules, and automation playbooks on Log Analytics. Correlates alerts across cloud and identity signals.

- [upbound/provider-azure-servicebus](https://marketplace.upbound.io/providers/upbound/provider-azure-servicebus): Runs Service Bus namespaces, queues, topics, and subscriptions with dead-lettering and sessions. Provides enterprise messaging between microservices and legacy apps.

- [upbound/provider-azure-servicefabric](https://marketplace.upbound.io/providers/upbound/provider-azure-servicefabric): Manages Service Fabric clusters and application packages for stateful microservices on Windows/Linux. Supports rolling upgrades and placement constraints.

- [upbound/provider-azure-servicelinker](https://marketplace.upbound.io/providers/upbound/provider-azure-servicelinker): Auto-wires connections from App Service, Functions, or Spring Apps to databases and caches. Injects connection strings via managed identities without manual secrets.

- [upbound/provider-azure-servicenetworking](https://marketplace.upbound.io/providers/upbound/provider-azure-servicenetworking): Configures Traffic Controller and service mesh–style routing for AKS and multi-cluster ingress. Aligns with application-layer traffic policies.

- [upbound/provider-azure-signalrservice](https://marketplace.upbound.io/providers/upbound/provider-azure-signalrservice): Hosts Azure SignalR Service for WebSocket scale-out to browsers and devices. Powers live dashboards and collaborative apps without sticky sessions.

- [upbound/provider-azure-solutions](https://marketplace.upbound.io/providers/upbound/provider-azure-solutions): Registers Log Analytics solution packs and gallery templates for monitoring scenarios. Extends workspace insights with domain-specific dashboards.

- [upbound/provider-azure-spring](https://marketplace.upbound.io/providers/upbound/provider-azure-spring): Manages Azure Spring Apps enterprise tiers with Tanzu components and service connectors. Focused on Spring Boot microservices with built-in CI/CD hooks.

- [upbound/provider-azure-sql](https://marketplace.upbound.io/providers/upbound/provider-azure-sql): Runs Azure SQL managed instances, elastic pools, and databases with threat detection and failover groups. Supports Entra-only auth and ledger tables for compliance.

- [upbound/provider-azure-storage](https://marketplace.upbound.io/providers/upbound/provider-azure-storage): Manages storage accounts, blob containers, file shares, queues, and tables with network rules and lifecycle policies. Foundational data plane for analytics and apps.

- [upbound/provider-azure-storagecache](https://marketplace.upbound.io/providers/upbound/provider-azure-storagecache): Deploys HPC Cache volumes to accelerate POSIX reads against Blob or NFS backends. Speeds hybrid workloads like rendering and chip simulation.

- [upbound/provider-azure-storagepool](https://marketplace.upbound.io/providers/upbound/provider-azure-storagepool): Upbound's official Crossplane provider to manage Microsoft Azure
storagepool services in Kubernetes.

- [upbound/provider-azure-storagesync](https://marketplace.upbound.io/providers/upbound/provider-azure-storagesync): Syncs Azure File shares to on-premises Windows servers with cloud tiering. Extends SMB namespaces for lift-and-shift file workloads.

- [upbound/provider-azure-streamanalytics](https://marketplace.upbound.io/providers/upbound/provider-azure-streamanalytics): Runs Stream Analytics jobs with SQL queries over Event Hubs, IoT Hub, and Blob inputs. Outputs to Power BI, SQL, and Functions for real-time analytics.

- [upbound/provider-azure-synapse](https://marketplace.upbound.io/providers/upbound/provider-azure-synapse): Orchestrates Synapse workspaces with SQL pools, Spark pools, and pipelines. Unifies big data and warehousing with deep integration to Power BI.

- [upbound/provider-azure-timeseriesinsights](https://marketplace.upbound.io/providers/upbound/provider-azure-timeseriesinsights): Upbound's official Crossplane provider to manage Microsoft Azure
timeseriesinsights services in Kubernetes.

- [upbound/provider-azure-web](https://marketplace.upbound.io/providers/upbound/provider-azure-web): Manages App Service plans, web apps, function apps, and slots with custom domains and certificates. Primary entry for hosting HTTP workloads on Azure PaaS.

- [upbound/provider-azuread](https://marketplace.upbound.io/providers/upbound/provider-azuread): Upbound's official Crossplane provider to manage Microsoft Azure Active Directory
resources in Kubernetes.

- [upbound/provider-databricks](https://marketplace.upbound.io/providers/upbound/provider-databricks): Upbound's official Crossplane provider to manage Databricks
resources in Kubernetes.

- [upbound/provider-family-aws](https://marketplace.upbound.io/providers/upbound/provider-family-aws): Supplies ProviderConfig and related CRDs so workload clusters authenticate to AWS APIs; pair with service-scoped provider-aws-* packages and the family provider for credentials wiring.

- [upbound/provider-family-azure](https://marketplace.upbound.io/providers/upbound/provider-family-azure): Ships ProviderConfig and authentication glue for the Azure family, wiring workload identities, service principals, and secret references used by other packages.

- [upbound/provider-family-gcp](https://marketplace.upbound.io/providers/upbound/provider-family-gcp): Provides ProviderConfig resources and authentication wiring for the GCP family, including workload identity federation and credential sources.

- [upbound/provider-family-gcp-beta](https://marketplace.upbound.io/providers/upbound/provider-family-gcp-beta): Upbound's official Crossplane provider to manage Google Cloud Platform (GCP)
config services in Kubernetes.

- [upbound/provider-family-oci](https://marketplace.upbound.io/providers/upbound/provider-family-oci): Upbound's official Crossplane provider to manage Oracle Cloud Infrastructure (OCI)
config services in Kubernetes.

- [upbound/provider-gcp-accesscontextmanager](https://marketplace.upbound.io/providers/upbound/provider-gcp-accesscontextmanager): Defines VPC Service Controls perimeters, access levels, and ingress/egress policies to constrain data exfiltration across Google Cloud services. Supports BeyondCorp-style context-aware access.

- [upbound/provider-gcp-activedirectory](https://marketplace.upbound.io/providers/upbound/provider-gcp-activedirectory): Manages Managed Microsoft AD domains, trusts, and peering for hybrid identity. Bridges on-prem AD with GCP workloads needing Kerberos-aware authentication.

- [upbound/provider-gcp-alloydb](https://marketplace.upbound.io/providers/upbound/provider-gcp-alloydb): Runs AlloyDB for PostgreSQL clusters with columnar engine, HA, and read pools. Targets demanding OLTP and analytics on Postgres-compatible APIs.

- [upbound/provider-gcp-apigee](https://marketplace.upbound.io/providers/upbound/provider-gcp-apigee): Hosts Apigee API proxies with policies, analytics, developer portals, and environment groups. Secures north-south traffic with OAuth, mTLS, and quota controls.

- [upbound/provider-gcp-appengine](https://marketplace.upbound.io/providers/upbound/provider-gcp-appengine): Deploys App Engine standard and flexible services with versions, traffic splits, and VPC connectors. Runs autoscaled web apps without managing VMs directly.

- [upbound/provider-gcp-artifact](https://marketplace.upbound.io/providers/upbound/provider-gcp-artifact): Configures Artifact Registry repositories for Docker, Maven, npm, and Python with IAM and cleanup policies. Replaces Container Registry for modern supply-chain workflows.

- [upbound/provider-gcp-beta-cloudplatform](https://marketplace.upbound.io/providers/upbound/provider-gcp-beta-cloudplatform): Upbound's official Crossplane provider to manage Google Cloud Platform (GCP)
cloudplatform services in Kubernetes.

- [upbound/provider-gcp-beta-compute](https://marketplace.upbound.io/providers/upbound/provider-gcp-beta-compute): Upbound's official Crossplane provider to manage Google Cloud Platform (GCP)
compute services in Kubernetes.

- [upbound/provider-gcp-beta-container](https://marketplace.upbound.io/providers/upbound/provider-gcp-beta-container): Upbound's official Crossplane provider to manage Google Cloud Platform (GCP)
container services in Kubernetes.

- [upbound/provider-gcp-beta-networksecurity](https://marketplace.upbound.io/providers/upbound/provider-gcp-beta-networksecurity): Upbound's official Crossplane provider to manage Google Cloud Platform (GCP)
networksecurity services in Kubernetes.

- [upbound/provider-gcp-beyondcorp](https://marketplace.upbound.io/providers/upbound/provider-gcp-beyondcorp): Orchestrates BeyondCorp Enterprise connectors and application resources for zero-trust access. Integrates with Identity-Aware Proxy policies.

- [upbound/provider-gcp-bigquery](https://marketplace.upbound.io/providers/upbound/provider-gcp-bigquery): Manages BigQuery datasets, tables, routines, and reservations for SQL analytics at scale. Supports partitioning, clustering, and IAM data policies.

- [upbound/provider-gcp-bigtable](https://marketplace.upbound.io/providers/upbound/provider-gcp-bigtable): Runs Cloud Bigtable instances, clusters, and tables for wide-column workloads with low latency. Powers IoT, ads, and personalization use cases.

- [upbound/provider-gcp-binaryauthorization](https://marketplace.upbound.io/providers/upbound/provider-gcp-binaryauthorization): Enforces deploy-time attestations for GKE and Cloud Run images via attestors and policy rules. Blocks unsigned or vulnerable container images.

- [upbound/provider-gcp-certificatemanager](https://marketplace.upbound.io/providers/upbound/provider-gcp-certificatemanager): Issues and rotates Google-managed TLS certificates with DNS authorization and load balancer bindings. Simplifies HTTPS for multi-tenant hostnames.

- [upbound/provider-gcp-cloud](https://marketplace.upbound.io/providers/upbound/provider-gcp-cloud): Aggregates shared controllers and helpers for the GCP provider family. Usually complements focused subpackages rather than direct application use.

- [upbound/provider-gcp-cloudbuild](https://marketplace.upbound.io/providers/upbound/provider-gcp-cloudbuild): Defines Cloud Build triggers, worker pools, and build histories for CI/CD on GCP. Connects to Artifact Registry and Secret Manager for pipelines.

- [upbound/provider-gcp-cloudfunctions](https://marketplace.upbound.io/providers/upbound/provider-gcp-cloudfunctions): Deploys first-generation Cloud Functions with HTTP and background triggers. Prefer Cloud Functions (2nd gen) for new workloads when available.

- [upbound/provider-gcp-cloudfunctions2](https://marketplace.upbound.io/providers/upbound/provider-gcp-cloudfunctions2): Runs Cloud Functions (2nd gen) on Cloud Run with concurrency, larger instances, and Eventarc triggers. Ideal for event-driven microservices.

- [upbound/provider-gcp-cloudidentity](https://marketplace.upbound.io/providers/upbound/provider-gcp-cloudidentity): Manages Google Workspace / Cloud Identity groups and membership for access control automation. Syncs directory data for IAM bindings.

- [upbound/provider-gcp-cloudiot](https://marketplace.upbound.io/providers/upbound/provider-gcp-cloudiot): Upbound's official Crossplane provider to manage Google Cloud Platform (GCP)
cloudiot services in Kubernetes.

- [upbound/provider-gcp-cloudplatform](https://marketplace.upbound.io/providers/upbound/provider-gcp-cloudplatform): Covers organization, folder, and project-level settings exposed via API for landing zones. Supports org policies and shared billing metadata.

- [upbound/provider-gcp-cloudquotas](https://marketplace.upbound.io/providers/upbound/provider-gcp-cloudquotas): Adjusts consumer quota preferences and adjuster requests for service limits. Helps unblock scale-ups for networking and compute SKUs.

- [upbound/provider-gcp-cloudrun](https://marketplace.upbound.io/providers/upbound/provider-gcp-cloudrun): Runs fully managed Cloud Run services and jobs with request autoscaling and VPC egress controls. Supports HTTP, gRPC, and Eventarc triggers.

- [upbound/provider-gcp-cloudscheduler](https://marketplace.upbound.io/providers/upbound/provider-gcp-cloudscheduler): Schedules HTTP and Pub/Sub jobs with cron syntax and retry policies. Ideal for periodic ETL and maintenance hooks.

- [upbound/provider-gcp-cloudtasks](https://marketplace.upbound.io/providers/upbound/provider-gcp-cloudtasks): Queues asynchronous tasks with rate limits, OIDC headers, and App Engine routing. Decouples bursty workloads from synchronous APIs.

- [upbound/provider-gcp-composer](https://marketplace.upbound.io/providers/upbound/provider-gcp-composer): Provisions Cloud Composer (Airflow) environments with PyPI packages, networking, and data lineage. Orchestrates data pipelines across BigQuery and GCS.

- [upbound/provider-gcp-compute](https://marketplace.upbound.io/providers/upbound/provider-gcp-compute): Manages Compute Engine VMs, instance groups, disks, forwarding rules, and firewall policies. Core IaaS layer for nearly every GCP architecture.

- [upbound/provider-gcp-container](https://marketplace.upbound.io/providers/upbound/provider-gcp-container): Registers GKE clusters, node pools, addons, and fleet memberships. Aligns with google_container_* Terraform resources for platform teams.

- [upbound/provider-gcp-containeranalysis](https://marketplace.upbound.io/providers/upbound/provider-gcp-containeranalysis): Stores vulnerability scan notes and occurrences for images in Artifact Registry. Feeds policy gates in CI/CD pipelines.

- [upbound/provider-gcp-containerattached](https://marketplace.upbound.io/providers/upbound/provider-gcp-containerattached): Attaches non-GCP Kubernetes clusters to Google fleet management for consistent policy and observability. Supports hybrid and multi-cloud footprints.

- [upbound/provider-gcp-containeraws](https://marketplace.upbound.io/providers/upbound/provider-gcp-containeraws): Registers AWS-hosted clusters with Anthos/GKE attached clusters APIs for unified fleet operations. Extends Google multi-cloud control planes.

- [upbound/provider-gcp-containerazure](https://marketplace.upbound.io/providers/upbound/provider-gcp-containerazure): Registers Azure-hosted Kubernetes clusters for Anthos fleet visibility and config sync. Bridges AKS workloads into Google multi-cloud tooling.

- [upbound/provider-gcp-datacatalog](https://marketplace.upbound.io/providers/upbound/provider-gcp-datacatalog): Indexes datasets and tags for discoverability with policy tags and lineage hooks. Supports BigQuery column-level governance.

- [upbound/provider-gcp-dataflow](https://marketplace.upbound.io/providers/upbound/provider-gcp-dataflow): Runs Dataflow jobs for batch and streaming Apache Beam pipelines on managed workers. Integrates with Pub/Sub, BigQuery, and Cloud Storage.

- [upbound/provider-gcp-datafusion](https://marketplace.upbound.io/providers/upbound/provider-gcp-datafusion): Hosts visual ETL pipelines in Cloud Data Fusion with wrangler transforms and wrangler macros. Targets analyst-friendly data prep.

- [upbound/provider-gcp-datalossprevention](https://marketplace.upbound.io/providers/upbound/provider-gcp-datalossprevention): Defines inspect templates, de-identification transforms, and discovery jobs for sensitive data. Feeds DLP scanning across Storage and BigQuery.

- [upbound/provider-gcp-dataplex](https://marketplace.upbound.io/providers/upbound/provider-gcp-dataplex): Manages Dataplex lakes, zones, and assets for unified metadata and governance. Powers data mesh patterns across BigQuery and GCS.

- [upbound/provider-gcp-dataproc](https://marketplace.upbound.io/providers/upbound/provider-gcp-dataproc): Runs Dataproc clusters for Spark, Hive, and Presto with autoscaling and component gateways. Ideal for ephemeral big data jobs on GCS-backed data lakes.

- [upbound/provider-gcp-datastore](https://marketplace.upbound.io/providers/upbound/provider-gcp-datastore): Upbound's official Crossplane provider to manage Google Cloud Platform (GCP)
datastore services in Kubernetes.

- [upbound/provider-gcp-datastream](https://marketplace.upbound.io/providers/upbound/provider-gcp-datastream): Replicates Oracle and MySQL changes to BigQuery and Cloud Storage with minimal latency. Supports private connectivity and stream validation.

- [upbound/provider-gcp-developerconnect](https://marketplace.upbound.io/providers/upbound/provider-gcp-developerconnect): Links GitHub and GitLab repositories to Google Cloud for secure build and deployment insights. Supports developer metrics and policy automation.

- [upbound/provider-gcp-dialogflowcx](https://marketplace.upbound.io/providers/upbound/provider-gcp-dialogflowcx): Builds Dialogflow CX agents with flows, intents, and fulfillment webhooks. Powers virtual agents with multi-turn conversation design.

- [upbound/provider-gcp-dns](https://marketplace.upbound.io/providers/upbound/provider-gcp-dns): Manages Cloud DNS managed zones, records sets, and DNSSEC for public and private zones. Integrates with load balancers and GKE Ingress.

- [upbound/provider-gcp-documentai](https://marketplace.upbound.io/providers/upbound/provider-gcp-documentai): Processes invoices, forms, and contracts with Document AI processors and human review workflows. Extracts structured fields for downstream systems.

- [upbound/provider-gcp-essentialcontacts](https://marketplace.upbound.io/providers/upbound/provider-gcp-essentialcontacts): Registers org and project contacts for billing, technical, and security notifications. Ensures incidents reach the right on-call rotations.

- [upbound/provider-gcp-eventarc](https://marketplace.upbound.io/providers/upbound/provider-gcp-eventarc): Routes CloudEvents from Pub/Sub, Audit Logs, and third parties to Cloud Run and GKE destinations. Enables event-driven automation without polling.

- [upbound/provider-gcp-filestore](https://marketplace.upbound.io/providers/upbound/provider-gcp-filestore): Provides managed NFS file shares for GKE and Compute Engine with HA tiers. Supports enterprise workloads needing POSIX semantics.

- [upbound/provider-gcp-firebaserules](https://marketplace.upbound.io/providers/upbound/provider-gcp-firebaserules): Defines Firebase security rules for Realtime Database and Storage access patterns. Codifies client-side auth constraints server-side.

- [upbound/provider-gcp-firestore](https://marketplace.upbound.io/providers/upbound/provider-gcp-firestore): Manages Cloud Firestore databases, documents, and indexes. Provides a serverless NoSQL document database with real-time synchronization.

- [upbound/provider-gcp-gemini](https://marketplace.upbound.io/providers/upbound/provider-gcp-gemini): Configures Gemini API resources and enterprise settings for generative AI workloads on Vertex. Supports model access policies and usage telemetry.

- [upbound/provider-gcp-gke](https://marketplace.upbound.io/providers/upbound/provider-gcp-gke): Focuses on GKE-specific resources such as addons and configuration beyond the core container API. Complements google_container_cluster definitions.

- [upbound/provider-gcp-gkehub](https://marketplace.upbound.io/providers/upbound/provider-gcp-gkehub): Registers fleet hosts, memberships, and feature configs for multi-cluster services mesh and config sync. Centralizes policy across GKE clusters.

- [upbound/provider-gcp-healthcare](https://marketplace.upbound.io/providers/upbound/provider-gcp-healthcare): Manages Healthcare API datasets, FHIR stores, DICOM stores, and consent resources. Supports HIPAA-aligned clinical data exchange.

- [upbound/provider-gcp-iam](https://marketplace.upbound.io/providers/upbound/provider-gcp-iam): Creates IAM roles, service accounts, workload identity pools, and policy bindings. Foundation for least-privilege access across projects.

- [upbound/provider-gcp-iap](https://marketplace.upbound.io/providers/upbound/provider-gcp-iap): Configures Identity-Aware Proxy access controls and tunnel resources for TCP forwarding. Adds context-aware auth in front of internal apps.

- [upbound/provider-gcp-identityplatform](https://marketplace.upbound.io/providers/upbound/provider-gcp-identityplatform): Runs Firebase Authentication / Identity Platform tenants with SAML, OIDC, and MFA. Manages user directories for B2C apps.

- [upbound/provider-gcp-kms](https://marketplace.upbound.io/providers/upbound/provider-gcp-kms): Manages Cloud KMS keys, key rings, import jobs, and crypto operations. Encrypts data at rest across GCP services with HSM-backed keys.

- [upbound/provider-gcp-logging](https://marketplace.upbound.io/providers/upbound/provider-gcp-logging): Configures log buckets, sinks, exclusions, and linked BigQuery datasets. Centralizes audit and app logs for SIEM pipelines.

- [upbound/provider-gcp-memcache](https://marketplace.upbound.io/providers/upbound/provider-gcp-memcache): Runs Memorystore for Memcached clusters with VPC peering and maintenance windows. Caches session and catalog data with low latency.

- [upbound/provider-gcp-memorystore](https://marketplace.upbound.io/providers/upbound/provider-gcp-memorystore): Runs Memorystore for Redis clusters with HA, persistence options, and AUTH. Supports Redis Cluster mode for large working sets.

- [upbound/provider-gcp-mlengine](https://marketplace.upbound.io/providers/upbound/provider-gcp-mlengine): Legacy AI Platform Training and Prediction resources for model hosting. Prefer Vertex AI for new deployments when possible.

- [upbound/provider-gcp-modelarmor](https://marketplace.upbound.io/providers/upbound/provider-gcp-modelarmor): Manages Model Armor templates and floor settings for AI safety and security guardrails. Provides prompt and response sanitization for generative AI workloads.

- [upbound/provider-gcp-monitoring](https://marketplace.upbound.io/providers/upbound/provider-gcp-monitoring): Defines alerting policies, notification channels, uptime checks, and dashboards in Cloud Monitoring. Feeds SLO burn alerts and incident workflows.

- [upbound/provider-gcp-networkconnectivity](https://marketplace.upbound.io/providers/upbound/provider-gcp-networkconnectivity): Builds Network Connectivity Center spokes, hubs, and VPC spokes for hybrid connectivity. Coordinates Cloud VPN and Interconnect attachments.

- [upbound/provider-gcp-networkmanagement](https://marketplace.upbound.io/providers/upbound/provider-gcp-networkmanagement): Runs Connectivity Tests and latency monitoring to troubleshoot reachability across VPCs and peers. Validates firewall and routing intent.

- [upbound/provider-gcp-networksecurity](https://marketplace.upbound.io/providers/upbound/provider-gcp-networksecurity): Deploys Cloud Armor edge policies, TLS inspection, and secure web gateway resources. Protects HTTP(S) frontends with WAF rules.

- [upbound/provider-gcp-networkservices](https://marketplace.upbound.io/providers/upbound/provider-gcp-networkservices): Configures service meshes, gateways, and HTTP routes for multi-cluster traffic management. Aligns with Gateway API style resources.

- [upbound/provider-gcp-notebooks](https://marketplace.upbound.io/providers/upbound/provider-gcp-notebooks): Provisions Vertex AI Workbench and legacy Notebook instances with GPUs and VPC-SC perimeter controls. Supports collaborative ML experimentation.

- [upbound/provider-gcp-osconfig](https://marketplace.upbound.io/providers/upbound/provider-gcp-osconfig): Applies patch deployments, guest policies, and OS inventory for VMs. Automates CVE remediation across Compute Engine fleets.

- [upbound/provider-gcp-oslogin](https://marketplace.upbound.io/providers/upbound/provider-gcp-oslogin): Links OS Login profiles and SSH keys to IAM principals for Linux VM access. Replaces shared sudo accounts with audited access.

- [upbound/provider-gcp-privateca](https://marketplace.upbound.io/providers/upbound/provider-gcp-privateca): Runs Certificate Authority Service pools and certificates for private PKI. Issues mTLS certs for mesh and service identities.

- [upbound/provider-gcp-pubsub](https://marketplace.upbound.io/providers/upbound/provider-gcp-pubsub): Manages Pub/Sub topics, subscriptions, schemas, and snapshots with ordering keys and dead lettering. Backbone for event-driven GCP architectures.

- [upbound/provider-gcp-redis](https://marketplace.upbound.io/providers/upbound/provider-gcp-redis): Alias Memorystore Redis resources when exposed separately; provides managed Redis compatible with open clients for cache tiers.

- [upbound/provider-gcp-secretmanager](https://marketplace.upbound.io/providers/upbound/provider-gcp-secretmanager): Stores secrets with versioning, rotation hooks, and IAM. Integrates with Cloud Run, GKE, and Build for secretless deployments.

- [upbound/provider-gcp-servicenetworking](https://marketplace.upbound.io/providers/upbound/provider-gcp-servicenetworking): Allocates private service connection peering for managed services like Cloud SQL and Vertex. Enables RFC1918 access from VPC consumers.

- [upbound/provider-gcp-sourcerepo](https://marketplace.upbound.io/providers/upbound/provider-gcp-sourcerepo): Hosts Cloud Source Repositories mirrors and IAM for CI triggers. Bridges Git workflows with Cloud Build.

- [upbound/provider-gcp-spanner](https://marketplace.upbound.io/providers/upbound/provider-gcp-spanner): Runs Cloud Spanner instances and databases with horizontal scaling and external consistency. Targets globally distributed OLTP workloads.

- [upbound/provider-gcp-sql](https://marketplace.upbound.io/providers/upbound/provider-gcp-sql): Manages Cloud SQL for MySQL, PostgreSQL, and SQL Server with HA, read replicas, and IAM DB auth. Primary relational datastore for apps.

- [upbound/provider-gcp-storage](https://marketplace.upbound.io/providers/upbound/provider-gcp-storage): Configures Cloud Storage buckets, notifications, and IAM for object lifecycle and analytics. Foundational for data lakes and static assets.

- [upbound/provider-gcp-storagetransfer](https://marketplace.upbound.io/providers/upbound/provider-gcp-storagetransfer): Orchestrates Storage Transfer Service jobs between S3, Azure Blob, and GCS. Supports recurring syncs for migration projects.

- [upbound/provider-gcp-tpu](https://marketplace.upbound.io/providers/upbound/provider-gcp-tpu): Provisions Cloud TPU nodes and slices for JAX/TensorFlow training. Accelerates large ML models with high-bandwidth interconnects.

- [upbound/provider-gcp-vertexai](https://marketplace.upbound.io/providers/upbound/provider-gcp-vertexai): Manages Vertex AI datasets, endpoints, models, and batch predictions. Central hub for custom training and feature store integration.

- [upbound/provider-gcp-vpcaccess](https://marketplace.upbound.io/providers/upbound/provider-gcp-vpcaccess): Creates VPC Access connectors for Cloud Run and Functions to reach private RFC1918 endpoints. Bridges serverless and hybrid networks.

- [upbound/provider-gcp-workflows](https://marketplace.upbound.io/providers/upbound/provider-gcp-workflows): Runs Workflows definitions with HTTP, Pub/Sub, and connector steps for orchestration. Lightweight alternative to Dataflow for control-plane automation.

- [upbound/provider-helm](https://marketplace.upbound.io/providers/upbound/provider-helm): The Helm Crossplane provider enables resource management of Helm Releases
on Kubernetes Clusters, typically provisioned by Crossplane.

- [upbound/provider-kubernetes](https://marketplace.upbound.io/providers/upbound/provider-kubernetes): The Crossplane Kubernetes provider enables management of Kubernetes Objects.

- [upbound/provider-oci-core](https://marketplace.upbound.io/providers/upbound/provider-oci-core): Upbound's official Crossplane provider to manage Oracle Cloud Infrastructure (OCI)
core services in Kubernetes.

- [upbound/provider-oci-database](https://marketplace.upbound.io/providers/upbound/provider-oci-database): Upbound's official Crossplane provider to manage Oracle Cloud Infrastructure (OCI)
database services in Kubernetes.

- [upbound/provider-oci-identity](https://marketplace.upbound.io/providers/upbound/provider-oci-identity): Upbound's official Crossplane provider to manage Oracle Cloud Infrastructure (OCI)
identity services in Kubernetes.

- [upbound/provider-oci-kms](https://marketplace.upbound.io/providers/upbound/provider-oci-kms): Upbound's official Crossplane provider to manage Oracle Cloud Infrastructure (OCI)
kms services in Kubernetes.

- [upbound/provider-oci-objectstorage](https://marketplace.upbound.io/providers/upbound/provider-oci-objectstorage): Upbound's official Crossplane provider to manage Oracle Cloud Infrastructure (OCI)
objectstorage services in Kubernetes.

- [upbound/provider-opentofu](https://marketplace.upbound.io/providers/upbound/provider-opentofu): Crossplane provider to manage OpenTofu workspaces.

- [upbound/provider-terraform](https://marketplace.upbound.io/providers/upbound/provider-terraform): Crossplane provider to manage Terraform workspaces.

- [upbound/provider-upbound](https://marketplace.upbound.io/providers/upbound/provider-upbound): Upbound's official Crossplane provider to manage Upbound services in Kubernetes.

- [upbound/provider-vault](https://marketplace.upbound.io/providers/upbound/provider-vault): Provider Vault is a Crossplane provider for Hashicorp Vault.


## Configurations

Configurations compose managed resources into higher-level APIs that can be consumed by users of your internal cloud platform. They package Composite Resource Definitions (XRDs) and Compositions to create platform-specific abstractions.

- [Browse all Configurations](https://marketplace.upbound.io/configurations)
- [Configuration Documentation](https://docs.upbound.io/manuals/uxp/concepts/packages/configurations/)

### Official Configurations

No official configurations found.

## Functions

Functions allow you to define reusable executable logic to compose resources and perform operations in your control plane. They enable dynamic, programmatic composition of resources beyond what static YAML templates can achieve.

- [Browse all Functions](https://marketplace.upbound.io/functions)
- [Function Documentation](https://docs.upbound.io/manuals/uxp/concepts/packages/functions/)

### Official Functions

- [upbound/function-auto-ready](https://marketplace.upbound.io/functions/upbound/function-auto-ready): A composition function that automatically detects when resources are ready, with resource-specific health checks for standard Kubernetes resources
- [upbound/function-claude](https://marketplace.upbound.io/functions/upbound/function-claude): No description available
- [upbound/function-claude-status-transformer](https://marketplace.upbound.io/functions/upbound/function-claude-status-transformer): No description available
- [upbound/function-go-templating](https://marketplace.upbound.io/functions/upbound/function-go-templating): A Go templating composition function
- [upbound/function-openai](https://marketplace.upbound.io/functions/upbound/function-openai): No description available
- [upbound/function-patch-and-transform](https://marketplace.upbound.io/functions/upbound/function-patch-and-transform): A patch & transform composition function

## Add-ons

Add-ons extend your UXP cluster with additional control plane capabilities. They can install MCP servers, monitoring tools, and other operational components.

- [Browse all Add-ons](https://marketplace.upbound.io/addons)
- [Add-on Documentation](https://docs.upbound.io/manuals/uxp/concepts/packages/add-ons/)

### Official Add-ons

No official add-ons found.

## Optional

- [Upbound Documentation](https://docs.upbound.io/)
- [Getting Started Guide](https://docs.upbound.io/getstarted)
- [Crossplane Documentation](https://docs.crossplane.io/)