# Cloud Security Query Orders

This document provides details on the query order fields and directions that are supported by each provider for each operation. Orders can be used to specify the direction of the results of an operation, such as ordering by a specific field in ascending or descending order. If a provider or operation does not support ordering, it will not be listed here.

## Query Cloud Resource Inventory

| Field | AWS Cloud Security | CrowdStrike Falcon® Insight EDR | Microsoft Defender for Cloud | Palo Alto Networks Cortex Cloud Security |
|  --- | --- | --- | --- | --- |
| cloud.account.name |  | asc, desc |  |  |
| device.created_time |  |  | asc, desc |  |
| device.first_seen_time |  |  |  | asc, desc |
| device.name |  |  |  | asc, desc |


## Query Compliance Findings

| Field | AWS Cloud Security | CrowdStrike Falcon® Insight EDR | Microsoft Defender for Cloud | Palo Alto Networks Cortex Cloud Security |
|  --- | --- | --- | --- | --- |
| actor.authorizations.policy.desc |  | asc, desc |  |  |
| actor.authorizations.policy.uid |  | asc, desc |  |  |
| cloud.provider | asc, desc |  |  |  |
| compliance.control |  | asc, desc |  |  |
| compliance.requirements |  | asc, desc |  |  |
| compliance.standards |  | asc, desc |  |  |
| finding_info.first_seen_time |  |  |  | asc, desc |
| finding_info.title | asc, desc |  |  |  |
| severity_id | asc, desc | asc, desc |  |  |
| start_time |  | asc, desc |  |  |
| status | asc, desc |  |  |  |
| time | asc, desc | asc, desc |  |  |