Perspectives: Asset vs Amazon Taggable Asset

Products

• CloudHealth

Issue/Introduction

Asset (gather tree) looks for specific assets, and then anything associated to it:

- If there is a volume tied to an EC2 instance, it would get picked up and classified with the same EC2 instance
- If there is a volume not associated to an EC2 instance, it would NOT get picked up
- It would not pick up anything for AwsAlexa, Neptune, Chime, Greengrass, etc.

 

Amazon Taggable Asset gets everything the platform supports without any associations (about 100 asset types):

- Volumes not associated to EC2 instances
- All the other asset types

Resolution

Asset (gather tree) includes:

   "AwsCacheCluster",
   "AwsInstance",
   "AwsKinesisStream",
   "AwsLambdaFunction",
   "AwsLoadBalancer",
   "AwsRdsInstance",
   "AwsRedshiftCluster",
   "AwsRoute53HostedZone",
   "AwsS3Bucket",
   "CloudFrontDistribution",
   "AwsSageMakerEndpoint",
   "AwsSagemakerNotebookInstance",
   "AwsDmsReplicationInstance",
   "AwsWorkspaceBundle",
   "AwsSagemakerTrainingJob"

 

Amazon Taggable Asset includes:

   "AwsAutoScalingGroup",
   "AwsCacheCluster",
   "AwsCloudtrailTrail",
   "AwsDmsReplicationInstance",
   "AwsDynamoDbTable",
   "AwsElasticFileSystem",
   "AwsElasticsearchDomain",
   "AwsEmrCluster",
   "AwsImage",
   "AwsInstance",
   "AwsKinesisStream",
   "AwsLambdaFunction",
   "AwsLoadBalancer",
   "AwsRdsInstance",
   "AwsRdsSnapshot",
   "AwsRdsSecurityGroup",
   "AwsRdsSubnetGroup",
   "AwsRedshiftCluster",
   "AwsRoute53HostedZone",
   "AwsS3Bucket",
   "AwsSageMakerEndpoint",
   "AwsSagemakerNotebookInstance",
   "AwsSagemakerTrainingJob",
   "AwsSecurityGroup",
   "AwsSnapshot",
   "AwsSpotRequest",
   "AwsVolume",
   "AwsVpc",
   "AwsVpcSubnet",
   "AwsWorkspace",
   "CloudFrontDistribution",
   "AwsDataPipelinePipeline",
   "AwsCloudDirectoryDirectory",
   "AwsDirectConnectConnection",
   "AwsDirectConnectVirtualInterface",
   "AwsCognitoUserPool",
   "AwsGlacierVault",
   "AwsKinesisVideoStream",
   "AwsCloudSearchDomain",
   "AwsCloudhsmHsm",
   "AwsRoute53HealthCheck",
   "AwsDynamoDbAcceleratorCluster",
   "AwsMachineLearningBatchPrediction",
   "AwsMachineLearningDatasource",
   "AwsMachineLearningEvaluation",
   "AwsMachineLearningMlModel",
   "AwsApiGatewayStage",
   "AwsEc2ApplicationLoadBalancer",
   "AwsEc2NetworkLoadBalancer",
   "AwsCodeBuildProject",
   "AwsDirectoryServiceDirectory",
   "AwsStorageGatewayFileShare",
   "AwsStorageGatewayTape",
   "AwsStorageGatewayVolumeGateway",
   "AwsIotAnalyticsChannel",
   "AwsIotAnalyticsPipeline",
   "AwsIotAnalyticsDatastore",
   "AwsIotAnalyticsDataset",
   "AwsCmCertificate",
   "AwsCmCertificateAuthority",
   "AwsAppStreamFleet",
   "AwsAppStreamImageBuilder",
   "AwsAlexaForBusinessDevice",
   "AwsAlexaForBusinessUser",
   "AwsSecretsManagerSecret",
   "AwsGlueDevelopmentEndpoint",
   "AwsGlueJob",
   "AwsGlueCrawler",
   "AwsOpsworksServer",
   "AwsGameliftFleet",
   "AwsLexBot",
   "AwsShieldProtection",
   "AwsShieldSubscription",
   "AwsWafRule",
   "AwsWafWebacl",
   "AwsSimpleEmailServiceDedicatedIp",
   "AwsElementalMediaLiveChannel",
   "AwsElementalMediaLiveInput",
   "AwsKinesisAnalyticsApplication",
   "AwsAppStreamUser",
   "AwsRoute53TrafficPolicy",
   "AwsMqBroker",
   "AwsPinpointApp",
   "AwsElementalMediaStoreContainer",
   "AwsSnowballJob",
   "AwsGreengrassDevice",
   "AwsSumerianBinary",
   "AwsIotDeviceDefenderDevice",
   "AwsEksCluster",
   "AwsVirtualPrivateCloudVpcEndpoint",
   "AwsVirtualPrivateCloudVpnConnection",
   "AwsCloudFormationStack",
   "AwsNatGateway",
   "AwsWorkspaceBundle",
   "AwsEcrRepository",
   "AwsChimeDialInConference",
   "AwsMskCluster",
   "AwsNeptuneCluster",
   "AwsNeptuneInstance",
   "AwsChimeAccount"