Supported Resources
Supported Resource Types
Below is a list of all AWS resource types (asset types) that CloudYali currently supports.
info
This list is reconciled with the collected set defined in code
(snapshotservice/cloud/aws_resources.go). CloudYali's inventory is scoped to cost-relevant
resource types: a type is collected if the resource itself carries an AWS charge
(provisioned / metered / retained-storage / monthly-fee) or is required to attribute one via the
Cost & Usage Report ARN join. Free configuration resources are intentionally not collected.
Global AWS Resources
| Resource Type | Tag Support |
|---|---|
| AWS::CloudFront::Distribution | |
| AWS::CloudWatch::Dashboard | |
| AWS::GlobalAccelerator::Accelerator | |
| AWS::Route53::HostedZone | |
| AWS::Route53RecoveryControl::Cluster | |
| AWS::S3::Bucket | |
| AWS::SavingsPlans::SavingsPlan | |
| AWS::Shield::Protection |
Regional AWS Resources
| Resource Type | Tag Support |
|---|---|
| AWS::ACMPCA::CertificateAuthority | |
| AWS::APIGateway::RestApi | |
| AWS::APS::Workspace | |
| AWS::AmazonMQ::Broker | |
| AWS::Amplify::App | |
| AWS::ApiGatewayV2::Api | |
| AWS::AppRunner::Service | |
| AWS::AppStream::Fleet | |
| AWS::AppStream::ImageBuilder | |
| AWS::AppSync::GraphQLApi | |
| AWS::Athena::WorkGroup | |
| AWS::Backup::BackupVault | |
| AWS::Bedrock::ProvisionedModelThroughput | |
| AWS::CloudHSM::Cluster | |
| AWS::CloudTrail::Trail | |
| AWS::CloudWatch::Alarm | |
| AWS::CloudWatchLogs::LogGroup | |
| AWS::CodeBuild::Project | |
| AWS::CodePipeline::Pipeline | |
| AWS::CognitoIdentityProvider::UserPool | |
| AWS::Comprehend::Endpoint | |
| AWS::Config::ConfigurationRecorder | |
| AWS::DAX::Cluster | |
| AWS::DMS::ReplicationInstance | |
| AWS::DRS::SourceServer | |
| AWS::DataSync::Task | |
| AWS::DirectConnect::Connection | |
| AWS::DirectoryService::Directory | |
| AWS::DocDB::DBCluster | |
| AWS::DocDB::DBInstance | |
| AWS::DynamoDB::Backup | |
| AWS::DynamoDB::GlobalTable | |
| AWS::DynamoDB::Table | |
| AWS::EC2::Address | |
| AWS::EC2::CapacityReservation | |
| AWS::EC2::ClientVpnEndpoint | |
| AWS::EC2::Fleet | |
| AWS::EC2::Host | |
| AWS::EC2::Image | |
| AWS::EC2::Instance | |
| AWS::EC2::InternetGateway | |
| AWS::EC2::NatGateway | |
| AWS::EC2::ReservedInstance | |
| AWS::EC2::Snapshot | |
| AWS::EC2::TransitGateway | |
| AWS::EC2::TransitGatewayPeeringAttachment | |
| AWS::EC2::TransitGatewayVpcAttachment | |
| AWS::EC2::VerifiedAccessEndpoint | |
| AWS::EC2::Volume | |
| AWS::EC2::VpcEndpoint | |
| AWS::EC2::VpnConnection | |
| AWS::EC2::VpnGateway | |
| AWS::ECR::Repository | |
| AWS::ECRPublic::Repository | |
| AWS::ECS::Cluster | |
| AWS::ECS::Service | |
| AWS::EFS::AccessPoint | |
| AWS::EFS::FileSystem | |
| AWS::EKS::Cluster | |
| AWS::ELB::LoadBalancer | |
| AWS::ELBV2::Listener | |
| AWS::ELBV2::LoadBalancer | |
| AWS::ELBV2::TargetGroup | |
| AWS::EMR::Cluster | |
| AWS::EMRServerless::Application | |
| AWS::ElastiCache::CacheCluster | |
| AWS::ElastiCache::GlobalReplicationGroup | |
| AWS::ElastiCache::ReplicationGroup | |
| AWS::ElastiCache::ReservedCacheNode | |
| AWS::ElastiCache::ServerlessCache | |
| AWS::ElastiCache::Snapshot | |
| AWS::FMS::Policy | |
| AWS::FSx::FileSystem | |
| AWS::Glacier::Vault | |
| AWS::Glue::Crawler | |
| AWS::Glue::Job | |
| AWS::Grafana::Workspace | |
| AWS::GuardDuty::Detector | |
| AWS::KMS::CustomKeyStore | |
| AWS::KMS::Key | |
| AWS::KafkaConnect::Connector | |
| AWS::Kendra::Index | |
| AWS::Kinesis::Stream | |
| AWS::KinesisAnalyticsV2::Application | |
| AWS::KinesisFirehose::DeliveryStream | |
| AWS::Lambda::Function | |
| AWS::Lightsail::Instance | |
| AWS::MSK::Cluster | |
| AWS::MWAA::Environment | |
| AWS::MemoryDB::Cluster | |
| AWS::Neptune::DBCluster | |
| AWS::NetworkFirewall::Firewall | |
| AWS::OSIS::Pipeline | |
| AWS::OpenSearchServerless::Collection | |
| AWS::OpenSearchService::Domain | |
| AWS::Personalize::Campaign | |
| AWS::RDS::DBCluster | |
| AWS::RDS::DBClusterSnapshot | |
| AWS::RDS::DBInstance | |
| AWS::RDS::DBInstanceAutomatedBackup | |
| AWS::RDS::DBProxy | |
| AWS::RDS::DBSnapshot | |
| AWS::RDS::GlobalCluster | |
| AWS::RDS::ReservedDBInstance | |
| AWS::Redshift::Cluster | |
| AWS::Redshift::ClusterSnapshot | |
| AWS::Redshift::ReservedNode | |
| AWS::RedshiftServerless::Workgroup | |
| AWS::Route53::HealthCheck | |
| AWS::Route53Resolver::ResolverEndpoint | |
| AWS::SES::DedicatedIpPool | |
| AWS::SFN::Activity | |
| AWS::SFN::StateMachine | |
| AWS::SNS::Topic | |
| AWS::SQS::Queue | |
| AWS::SageMaker::App | |
| AWS::SageMaker::Domain | |
| AWS::SageMaker::Endpoint | |
| AWS::SageMaker::NotebookInstance | |
| AWS::SecretsManager::Secret | |
| AWS::StorageGateway::Gateway | |
| AWS::Synthetics::Canary | |
| AWS::Timestream::InfluxDBInstance | |
| AWS::Transfer::Server | |
| AWS::WAF::WebACL | |
| AWS::WAFv2::WebACL | |
| AWS::WorkSpaces::Workspace |
Dependent resource types
These are collected as sub-resources of a parent type rather than listed independently, and appear in the inventory alongside their parent.
| Resource Type | Collected as a dependent of |
|---|---|
| AWS::ECR::LifecyclePolicy | AWS::ECR::Repository |