automated-security-response-on-aws
automated-security-response-on-aws copied to clipboard
Published
20 hours ago •
aws-solutions
aws-solutions
Solution tagging
AWS recommends tagging all infrastructure to allow for identification and grouping of resource costs. The sharr solution does not have any tagging enabled, which leads to Security Hub reporting that resources deployed as part of the solution have no tags.
Describe the feature you'd like
A simple change can be applied in the solution_deploy.ts file that will tag all resources provisioned by the stacks, using the solution name, version and ID parameters:
// Tag the stacks in the solution
cdk.Tags.of(app).add('sharr:solution-name', SOLUTION_NAME);
cdk.Tags.of(app).add('sharr:version', SOLUTION_VERSION);
cdk.Tags.of(app).add('sharr:solution-id', SOLUTION_ID);
Additional context
I have implemented this in my custom version of the solution and have been able to generate a cost report with the tags to monitor how much the solution costs.
