The taggercli helps with two main use cases:

• finding resources in your AWS account and compare it to a certain tagging schema (visualized in html report)
• applying a tagging schema to resources

Report Demo

Latest commit

pip install 'git+https://github.com/IT-EXPERTS-AT/tagger.git#egg=taggercli&subdirectory=taggercli'

Certain release
E.g. v1.0.0
pip install 'git+https://github.com/IT-EXPERTS-AT/[email protected]#egg=taggercli&subdirectory=taggercli'

We are working on a PyPi release!

The main commands are

• tagger report create
• tagger tag all

The report create command first scans your AWS account (specified in your configuration, see Configuration for more information) and compares the tags of found resources with tags specified in your configuration file. A html report is generated showing the results from the comparison.
If no region is specified via --region the default from the configuration file is used.

The tag all command first scans a given AWS region and your global resources. It displays a list of all the found resources and applies tags found in the configuration file.
If no region is specified via --region the default from the configuration file is used.

Please see the taggercore README for a list of supported resources.

Taggercli requires Python version 3.8 or higher

tagger config create creates a config file and writes the result to ~/.tagger/config.ini
The profile provided should be present in your AWS configuration file. Per default boto looks at ~/.aws/config for the profile. Please make sure the specified profile has all the required permissions.

The config.ini is also used to specify the given tag schema.
The config file is case-sensitive!

AWS Managed policies

• ReadOnlyAccess
• ResourceGroupsandTagEditorFullAccess

Custom policy
Even though ResourceGroupsandTagEditorFullAccess allows access to the Resource Groups Tagging API additional permissions for the individual resources are necessary to perform the tagging operation.

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "acm:AddTagsToCertificate",
                "apigateway:POST",
                "apigateway:PUT",
                "cloudfront:TagResource",
                "cloudtrail:AddTags",
                "cloudwatch:TagResource",
                "dynamodb:TagResource",
                "ec2:CreateTags",
                "elasticache:AddTagsToResource",
                "elasticbeanstalk:AddTags",
                "elasticloadbalancing:AddTags",
                "es:AddTags",
                "events:TagResource",
                "firehose:TagDeliveryStream",
                "iam:TagRole",
                "iam:TagUser",
                "kinesis:AddTagsToStream",
                "lambda:TagResource",
                "logs:TagLogGroup",
                "rds:AddTagsToResource",
                "route53:ChangeTagsForResource",
                "s3:PutBucketTagging",
                "sns:TagResource",
                "sqs:TagQueue"
            ],
            "Resource": [
                "*"
            ]
        }
    ]
}

Install dev dependencies:
pipenv install -e .[dev]

Run tests:
tox

Run black for code formatting:
tox -e format