Sherpa
AWS inventory

Who owns what you're running on AWS?

Sherpa lists the resources across your AWS accounts, with who owns each one, what changed since yesterday and which versions are past end of support.

After you sign up, a member of the Sherpa team contacts you within one business day to discuss your AWS environment and the right way to start.

Sherpa

What are we running that nobody owns?

214 resources have no owner, across 5 accounts.

TypeCountAccountsNext step
Servers (EC2) 38 4 add an owner tag
Databases (RDS) 6 2 add an owner tag
Storage buckets (S3) 170 5 add an owner tag
Sherpa mascot holding a map
How it works

From a long list to clear answers.

Before: a long list of resource IDs. With Sherpa, scanned daily, it becomes four answers: resources with no owner, what changed, what's out of support and what's outside CloudFormation.
What Sherpa shows

What can we find out about our resources?

  • No owner

    • Resources missing an owner tag.
    • Grouped by type, account and region.
  • What changed

    • Configuration changes since the last scan.
    • Changes made without a stack update stand out.
  • Out of support

    • Lambda runtimes and database versions past end of support.
    • Plan upgrades before they become urgent.
  • Outside CloudFormation

    • Servers, functions and databases not managed by CloudFormation.
    • The workloads outside your infrastructure as code.
One place

Who owns it, what does it cost, and is it exposed?

Example
Example: one chat answers from inventory, cost and security at once.

An untagged resource is a cost and a security question too. Ask once, get all three.

The basics

Are the basics turned on in every account?

Example table: each AWS account in a row, with CloudTrail, AWS Config, GuardDuty, Security Hub, password policy and root MFA marked on or off.

Sherpa's foundation score shows, account by account, whether the basics are in place.

The problem

Why don't teams know what they run?

200+

AWS services, and every team creates its own resources.

Source: AWS.

Resources outlive the projects and people who created them. Without an owner, nobody turns them off.

Sherpa mascot in sunglasses, giving a thumbs up

Find out what you're running this week.

After you sign up, a member of the Sherpa team contacts you within one business day to discuss your AWS environment and the right way to start.

Questions

Questions we get asked.

What is a cloud asset inventory?

A record of the resources in your cloud accounts: what they are, where they run, who owns them and what changed. Sherpa keeps this inventory for your AWS accounts.

How do I find untagged AWS resources?

Ask Sherpa, "What are we running that nobody owns?" It lists resources missing an owner tag, by type, account and region.

Does Sherpa change our tags or resources?

Sherpa never applies a fix; your team does. Sherpa shows what's missing, such as an owner tag, and writes the fix. Your team decides what to change.

How often is the inventory updated?

Every day.

Still have a question?

Contact us