Tag Explorer

Tagging has become the industry standard for effectively managing cloud infrastructure at scale. The Tag Explorer feature of InsightCloudSec allows you to audit and identify resources that contain (or do not contain) one or more tag keys. Tag Explorer supports many of the resources used today across compute, containers, storage, network, and identity management resource types.

Tag Explorer assists teams of all types (operations, IT, security, and development) identifying the resources that require specific actions. Effective tagging can help identify resources for a variety of automation activities. Tags built to help guide automation can help flag resources to opt in or opt out of automated tasks or to identify specific versions of resources to generate reporting, revise, or remove.

Using Tag Explorer

The Tag Explorer allows you to add new tag configurations as well as view a breakdown of your tagged (or untagged) resources.

Tag Explorer is found under the main navigation menu under Resource.

Adding a New Tag Configuration

If no tag configurations exist in the Tag Explorer, select Get Started to create your first tag configuration. If tags already exist, click the Add New button to add a new one.
Enter one or more tag keys in the input.

The Tag Configuration window will appear on the right side. From there, you can input the tag keys of interest. This will return a resource table listing tag values for each tag key. If the tag key does not exist, the value will be empty. You can override this behavior by using checkboxes to return only resources containing (or missing) all input tag keys.

If you wish to focus on specific resource types--e.g., Instances, Database Instances, and Big Data Instances--you can select those resource types from the drop-down list. Otherwise, all taggable resources will be returned. Tag keys are case-sensitive and a maximum of ten tags can be supplied.

Select whether you want to filter only for resources having the tags or only for resources not having the tags. (You can select only one.)
Select the resource types from the drop down list.
Select Create to finish. Note: Resource tags are harvested every three hours.

Viewing Your Tagged (or Untagged) Resources

Return to the Tag Explorer main page (under Resource from the left-side menu). Clicking on the name of a tag configuration from the list will display a list of resources that have that tag configuration.

You can focus your results by clicking ‘Scopes’ in the top right corner of the dialog window. The Scope Configuration window will appear on the right side. You can filter the result set by Cloud Accounts or Badges.

For Clouds, check the box for each cloud account you’d like to include. You can use the search bar to help find your target clouds.

For Badges, click on the “Select Badges” text box and a drop-down list will appear with all available badges from your list of clouds. Selecting the badge Environment: Production, for example, will automatically scope all cloud accounts with that badge.

Tag Explorer’s output is a visual breakdown of tagged (or untagged) resources--shown graphically at the top, and listed with detail below. You can search this list in InsightCloudSec or download a CSV of this data for your reporting/distribution purposes.

In the example below, the scoped resources show that:

8.7% are tagged with Name, 91.3% are not tagged with Name
1.0% are tagged with Environment, 99.0% are not tagged with Environment