FAQ
Installation & Setup
How do I install CloudQuery?
CloudQuery can be installed on macOS, Linux, and Windows. See our platform-specific getting started guides:
Do I need to authenticate with CloudQuery?
You only need to run cloudquery login
if you’re using:
- Commercial/premium integrations
- CloudQuery Platform
- Private integrations from GitHub
For open-source integrations, no authentication is required.
What’s the difference between CloudQuery CLI and CloudQuery Platform?
- CloudQuery CLI: Open-source command-line tool that runs on your infrastructure
- CloudQuery Platform: Managed service with web UI, built-in dashboards, and enterprise features
Choose CLI for full control and self-hosting, or Platform for managed infrastructure and additional features.
Licensing & Pricing
Is CloudQuery free to use?
Yes! CloudQuery has a strong open-source foundation with many integrations available for free. We also offer:
- Community Support: Free community support via our Community Forum
- Business Support: $4k/month for prioritized support and SLA
- Enterprise Support: $25k/month for custom development and dedicated support
What’s the difference between Community and Business/Enterprise support?
- Community: Public forum, GitHub issues, documentation
- Business: Private Slack/Teams channel, 24-hour SLA, up to 2 hours/month TAM
- Enterprise: Private Slack/Teams channel, 12-hour SLA, up to 4 hours/month TAM, custom development
Do I need a license for offline usage?
If you’re using CloudQuery in an air-gapped environment, you’ll need an offline license for commercial integrations. Contact our sales team to obtain an offline license file.
Data & Security
Does CloudQuery access any application data in my cloud?
No. CloudQuery cloud provider integrations like AWS, GCP and Azure generally only access metadata and configuration data. Some tables like aws_cloudwatch_metrics
and aws_cloudwatch_logs
can be used to sync log and metric data, but only if you select these tables.
Where is my data stored?
Your data never leaves your infrastructure. CloudQuery runs entirely on your systems and sends data only to your chosen destinations (databases, data warehouses, etc.).
What permissions does CloudQuery need?
CloudQuery requires read-only access to your cloud resources. We recommend using:
- AWS: IAM roles with read-only policies
- GCP: Service accounts with Viewer role
- Azure: Service principals with Reader role
Is my data sent to CloudQuery servers?
No, your cloud data is never sent to CloudQuery servers. We only collect:
- Anonymous usage statistics (can be disabled)
- Error reports to help improve the product
- Licensing validation data for commercial integrations
Performance & Troubleshooting
Why is my sync taking so long?
Large cloud estates can take time to sync. Try these optimizations:
- Use specific table names instead of wildcards (
*
) - Skip slow tables you don’t need (see skip_tables lists)
- Adjust concurrency settings
- See our performance tuning guide
What happens when I run two (or more) syncs? Will the second sync remove resources that no longer exist from the database?
There are currently three types of write
modes in destination integrations: overwrite-delete-stale
, overwrite
, and append
. The default is overwrite-delete-stale
.
- In
overwrite-delete-stale
data will be upserted based on primary keys and stale data will be deleted by deleting any data fetched by the same previous source configuration. - In
overwrite
data will be upserted based on primary keys and it will be up to the user to setup recurring task to delete stale data. - In
append
, old rows are never deleted or updated - every sync adds new rows.
In overwrite
and append
mode, you can distinguish between rows from different syncs by inspecting the _cq_sync_time
column.
Can I run multiple syncs in parallel?
Yes, but each integration configuration must have a unique name
. If names aren’t unique, different integrations may overwrite each other’s data. Also ensure no two integrations fetch the same account/table/region combination.
What should I do if I get authentication errors?
Common solutions:
- Verify your credentials are correct and have read-only permissions
- Check that your authentication method is properly configured
- Ensure your credentials haven’t expired
- Run with
--log-level debug
for detailed error information
Integrations
Which cloud providers are supported?
CloudQuery supports 100+ integrations including:
- Cloud Providers: AWS, Google Cloud, Azure, DigitalOcean, Linode
- SaaS Applications: GitHub, GitLab, Slack, Jira, Salesforce
- Databases: PostgreSQL, MySQL, MongoDB, Redis
- Security Tools: Okta, Auth0, CrowdStrike, SentinelOne
See all available integrations at hub.cloudquery.io.
Can I sync data from multiple accounts/regions?
Yes! You can sync from multiple:
- AWS accounts and regions
- GCP projects and regions
- Azure subscriptions and regions
Each configuration should have a unique name and target different resources.
What destinations are supported?
CloudQuery supports 50+ destinations including:
- Databases: PostgreSQL, MySQL, SQLite, ClickHouse
- Data Warehouses: BigQuery, Snowflake, Redshift, Databricks
- Data Lakes: S3, GCS, Azure Blob Storage
- Analytics: Elasticsearch, Grafana, Tableau
See all destinations at hub.cloudquery.io.
Getting Help
Where can I get help?
- Community Forum: community.cloudquery.io
- GitHub Issues: github.com/cloudquery/cloudquery
- Documentation: Check our troubleshooting guide
- Support: Business and Enterprise customers get dedicated support channels
How do I report a bug?
- Check if the issue already exists on GitHub
- If not, create a new issue with:
- Steps to reproduce
- Expected vs actual behavior
- Logs with
--log-level debug
- Your configuration (remove sensitive data)