AWS CloudTrail Resource Tagger

Automatically tags AWS resources based on CloudTrail events. When someone creates a resource in AWS, this tool automatically adds tags to identify the owner and creation time.

What it does

• Monitors CloudTrail events for resource creation
• Based on resource creation event it automatically tags those resources with owner and creation time
• Supports AWS services (EC2, S3, Lambda, RDS, EKS, SES, SQS, ECS, Bedrock, Kafka/MSK, Kinesis, Batch, ElastiCache, MemoryDB, Auto Scaling etc.)
• Runs as a scheduled Lambda function Of course. Here is the corrected text with suggestions for improvement.

Benefits

• Cost Management: Better cost allocation through consistent tagging.
• Resource Cleanup Reminders: Helps set reminders for removing unwanted resources created by users in a testing account.
• Efficiency: No manual tagging needed.

Table of Contents

• AWS CloudTrail Resource Tagger
  • Table of Contents
  • Architecture
  • Getting started
    • Pre-required tools
    • Install packages
    • Test locally
    • Deploy to AWS Lambda with scheduling
  • Supported AWS Services

Architecture

graph LR
    AE[Cron event] --> LF[Lambda Function] 
    
    CT[CloudTrail] --> LF

    LF --> AWS[Tag AWS Resources 'owner : created_at']
    
    AWS
    subgraph "Resource Tagged"
        direction TB
        AWS --> EC2[EC2]
        AWS --> S3[S3]
        AWS --> LAMBDA[LAMBDA]
        AWS --> IAM[IAM]
        AWS --> RDS[RDS]
        AWS --> EKS[EKS]
        AWS --> ELBV2[ELBV2]
    end

    AWS--> RG[Resource Group]

Loading

Getting started

Pre-required tools

pip install uv pytest prek

npm install -g serverless

Install packages

# Install project required python packages
uv sync

# start venv
poetry shell
# or
source .venv/bin/activte

Test locally

export AWS_PROFILE=<your-profile>

python -m src.main

Deploy to AWS Lambda with scheduling

# This will deploy the cloudformation stack and the source code via serverless through config `serverless.yml`
sls deploy

Supported AWS Services

The AWS Tagger automatically tags resources from the following AWS services:

• Compute: EC2, Lambda, ECS, EKS, Auto Scaling, Batch
• Storage/Database: S3, EFS, RDS/Aurora, DynamoDB, Redshift, ElastiCache, MemoryDB
• Streaming: Kinesis, Kafka (MSK)
• Networking: VPC, ELB, CloudFront, Route53
• Security: IAM, KMS, Secrets Manager, Cognito
• Monitoring: CloudWatch Logs, CloudWatch Alarms
• Development: API Gateway, Step Functions, CloudFormation
• Analytics: Glue, OpenSearch, Bedrock
• Mobile: Amplify