Hi @Kevin King,
So the CSP is AWS, and AWS has some resources that are untaggable. Then we also noticed that there are some resources that are tagged with AppID in the AWS console, but in AppID value show as "not set" in Cloudability, and not in the CUR file as well, so we opened a case with AWS and they confirmed that some resources do not support cost allocation and what that means is that even though they are tagged on the aws console with an AppID, it won't show up in Cloudability;
for example route53 ENIs, Access analyzer.
untaggable AWS resources like Textract, AWS config, secrets.
------------------------------
Jesie Mbiatem
FinOps Engineer
TIAA
------------------------------
Original Message:
Sent: Thu March 06, 2025 10:16 AM
From: Kevin King
Subject: Categorizing Untaggable resources in Cloudability
Not sure of the CSP in use, but curious to know how is the group identifying the resources that can not be tagged at all?
It's been said, typically the rule in CLDY has been if the CSP is passing a resource ID, then this should be a taggable resource.
However, we recently uncovered in our environment this is not the case. Products Names containing Amazon Bedrock display a resource ID but not all of them are taggable.
For example resource IDs containing:
- "foundation-model" or "inference-profile" can not be tagged with an APP-ID.
- "application-inference-profile" and "guardrail" can be tagged with an APP-ID.
------------------------------
Kevin King
Original Message:
Sent: Thu March 06, 2025 09:09 AM
From: Varad Rajeev Muthal
Subject: Categorizing Untaggable resources in Cloudability
Hello @Jesie Mbiatem I'll get back to you with appropriate solution on it.
Thanks!
- Varad
------------------------------
Varad Rajeev Muthal
Original Message:
Sent: Thu February 27, 2025 01:55 PM
From: Jesie Mbiatem
Subject: Categorizing Untaggable resources in Cloudability
I noticed that a large number our untaggable resources are currently showing up under AppID-"Not Set" in Cloudability, as it should because of the business mapping set up. But this makes it difficult to distinguish between resources that can be tagged but aren't and resources that cannot be tagged at all.
I was wondering if there is way to categorize untaggable resources separately, perhaps by using business mapping to assign them an identifier like "untaggable" instead of "not set". This would help us differentiate between truly untagged resources and those that simply don't support tagging.
I'd love to hear your thoughts, suggestion, or any alternative solution you might recommend.
Thank you
------------------------------
Jesie Mbiatem
FinOps Engineer
TIAA
------------------------------