Tagging Rules

The Tag Rules report allows you to more easily enforce your tagging policy across your AWS deployment.  You can create rules that will ensure your running resources contain specific tag keys and values.  CloudCheckr will run these rules against your Detailed Billing Report and show you each resource that is not adhering to your rule(s) within the Improperly Tagged Resources report.


Creating Tag Rules

To create a new rule:

  1. Go to the left navigation pane and choose Cost > Tags (from Detailed Billing).
  2. Click the New Rule button.
  3. Provide a name for your rule, which CloudCheckr will use when it reports on the improperly tagged resources.
  4. Define your tag rules.
  5. Process/reprocess the Detailed Billing Report for the month where the rules apply.

You must define a tag key for each tag rule. You can only enter one tag key in the Tag Key text field. If you want to create a rule that looks for multiple tag keys, click Add Another.

Tagging rules provide flexibility around matching tag values. Type one or more tag values into the Tag Values text field. Separate multiple values with a comma. You can also select the Require Any Tag Value checkbox and CloudCheckr will compare your resources against only the tag key. 

Example 1:

When comparing your resources versus this rule:

  • Any resource that does not have the Environment tag key will be flagged.
  • Any resource that has Environment as its tag key but does not have Production as its tag value will be flagged.

Example 2:

When comparing your resources versus this rule:

  • Any resource that does not have the Environment tag key will be flagged.
  • Any resource that has Environment tag key, but does not have Production, QA, or Development as its tag value will be flagged.

Example 3:

When comparing your resources versus this rule, any resource that does not have the Environment tag key will be flagged.

Rule Refinement

You can also refine your rules by region, resource type, and/or account list(s). Click the binoculars icons to see the complete list of options. Once you have selected a rule, click the Create Rule button at the bottom of the page.  You can add as many rules to your account as you want.

Improperly Tagged Resources Report

CloudCheckr will apply Tagging Rules to your account billing information whenever the Detailed Billing Report is processed or Reprocessed.  Resources that both adhere to and fail to tagging rules are published here.

You can apply filters to this report with combinations of rule, resource type, and AWS Account ID. You can also choose to view the current resources that fail the selected rule (existing violations), or view assets previously improperly tagged, but have since been resolved. The resulting table displays items that can be expanded.  Expanding a resource displays information on the broken tagging rule, the exception to the rule, as well as Date/Time stamp of discovery and repair.  You can export the table to a CSV file.

You can also enable a daily Improperly Tagged Resources email in your email settings.


How did we do?