hey, scan agent updates database directly, however the scan agent usually (per design) sits in a network remote to the ipam (different datacenter, etc) - so ideally we could use https to send update/scan to ipam API instead of using SQL (and having to open this inter-datacenter)