steampipe plugin install awssteampipe plugin install aws

aws_accessanalyzer_analyzer aws_account aws_acm_certificate aws_api_gateway_api_authorizer aws_api_gateway_api_key aws_api_gateway_authorizer aws_api_gateway_rest_api aws_api_gateway_stage aws_api_gateway_usage_plan aws_api_gatewayv2_api aws_api_gatewayv2_domain_name aws_api_gatewayv2_integration aws_api_gatewayv2_stage aws_appautoscaling_target aws_auditmanager_assessment aws_auditmanager_control aws_auditmanager_evidence aws_auditmanager_evidence_folder aws_auditmanager_framework aws_availability_zone aws_backup_plan aws_backup_protected_resource aws_backup_recovery_point aws_backup_selection aws_backup_vault aws_cloudcontrol_resource aws_cloudformation_stack aws_cloudfront_cache_policy aws_cloudfront_distribution aws_cloudfront_origin_access_identity aws_cloudfront_origin_request_policy aws_cloudtrail_trail aws_cloudtrail_trail_event aws_cloudwatch_alarm aws_cloudwatch_log_event aws_cloudwatch_log_group aws_cloudwatch_log_metric_filter aws_cloudwatch_log_resource_policy aws_cloudwatch_log_stream aws_cloudwatch_metric aws_codebuild_project aws_codebuild_source_credential aws_codecommit_repository aws_codepipeline_pipeline aws_config_configuration_recorder aws_config_conformance_pack aws_config_rule aws_cost_by_account_daily aws_cost_by_account_monthly aws_cost_by_record_type_daily aws_cost_by_record_type_monthly aws_cost_by_service_daily aws_cost_by_service_monthly aws_cost_by_service_usage_type_daily aws_cost_by_service_usage_type_monthly aws_cost_forecast_daily aws_cost_forecast_monthly aws_cost_usage aws_dax_cluster aws_directory_service_directory aws_dms_replication_instance aws_dynamodb_backup aws_dynamodb_global_table aws_dynamodb_metric_account_provisioned_read_capacity_util aws_dynamodb_metric_account_provisioned_write_capacity_util aws_dynamodb_table aws_ebs_snapshot aws_ebs_volume aws_ebs_volume_metric_read_ops aws_ebs_volume_metric_read_ops_daily aws_ebs_volume_metric_read_ops_hourly aws_ebs_volume_metric_write_ops aws_ebs_volume_metric_write_ops_daily aws_ebs_volume_metric_write_ops_hourly aws_ec2_ami aws_ec2_ami_shared aws_ec2_application_load_balancer aws_ec2_application_load_balancer_metric_request_count aws_ec2_application_load_balancer_metric_request_count_daily aws_ec2_autoscaling_group aws_ec2_capacity_reservation aws_ec2_classic_load_balancer aws_ec2_gateway_load_balancer aws_ec2_instance aws_ec2_instance_availability aws_ec2_instance_metric_cpu_utilization aws_ec2_instance_metric_cpu_utilization_daily aws_ec2_instance_metric_cpu_utilization_hourly aws_ec2_instance_type aws_ec2_key_pair aws_ec2_launch_configuration aws_ec2_load_balancer_listener aws_ec2_managed_prefix_list aws_ec2_network_interface aws_ec2_network_load_balancer aws_ec2_network_load_balancer_metric_net_flow_count aws_ec2_network_load_balancer_metric_net_flow_count_daily aws_ec2_regional_settings aws_ec2_reserved_instance aws_ec2_ssl_policy aws_ec2_target_group aws_ec2_transit_gateway aws_ec2_transit_gateway_route aws_ec2_transit_gateway_route_table aws_ec2_transit_gateway_vpc_attachment aws_ecr_repository aws_ecrpublic_repository aws_ecs_cluster aws_ecs_cluster_metric_cpu_utilization aws_ecs_cluster_metric_cpu_utilization_daily aws_ecs_cluster_metric_cpu_utilization_hourly aws_ecs_container_instance aws_ecs_service aws_ecs_task aws_ecs_task_definition aws_efs_access_point aws_efs_file_system aws_efs_mount_target aws_eks_addon aws_eks_addon_version aws_eks_cluster aws_eks_identity_provider_config aws_elastic_beanstalk_application aws_elastic_beanstalk_environment aws_elasticache_cluster aws_elasticache_parameter_group aws_elasticache_redis_metric_cache_hits_hourly aws_elasticache_redis_metric_curr_connections_hourly aws_elasticache_redis_metric_engine_cpu_utilization_hourly aws_elasticache_redis_metric_get_type_cmds_hourly aws_elasticache_redis_metric_list_based_cmds_hourly aws_elasticache_redis_metric_new_connections_hourly aws_elasticache_replication_group aws_elasticache_subnet_group aws_elasticsearch_domain aws_emr_cluster aws_emr_cluster_metric_is_idle aws_emr_instance_group aws_eventbridge_bus aws_eventbridge_rule aws_fsx_file_system aws_glacier_vault aws_glue_catalog_database aws_glue_catalog_table aws_glue_crawler aws_guardduty_detector aws_guardduty_finding aws_guardduty_ipset aws_guardduty_threat_intel_set aws_iam_access_advisor aws_iam_access_key aws_iam_account_password_policy aws_iam_account_summary aws_iam_action aws_iam_credential_report aws_iam_group aws_iam_policy aws_iam_policy_attachment aws_iam_policy_simulator aws_iam_role aws_iam_server_certificate aws_iam_user aws_iam_virtual_mfa_device aws_identitystore_group aws_identitystore_user aws_inspector_assessment_target aws_inspector_assessment_template aws_kinesis_consumer aws_kinesis_firehose_delivery_stream aws_kinesis_stream aws_kinesis_video_stream aws_kinesisanalyticsv2_application aws_kms_key aws_lambda_alias aws_lambda_function aws_lambda_function_metric_duration_daily aws_lambda_function_metric_errors_daily aws_lambda_function_metric_invocations_daily aws_lambda_layer aws_lambda_layer_version aws_lambda_version aws_macie2_classification_job aws_media_store_container aws_neptune_db_cluster aws_networkfirewall_rule_group aws_opensearch_domain aws_organizations_account aws_pinpoint_app aws_rds_db_cluster aws_rds_db_cluster_parameter_group aws_rds_db_cluster_snapshot aws_rds_db_event_subscription aws_rds_db_instance aws_rds_db_instance_metric_connections aws_rds_db_instance_metric_connections_daily aws_rds_db_instance_metric_connections_hourly aws_rds_db_instance_metric_cpu_utilization aws_rds_db_instance_metric_cpu_utilization_daily aws_rds_db_instance_metric_cpu_utilization_hourly aws_rds_db_instance_metric_read_iops aws_rds_db_instance_metric_read_iops_daily aws_rds_db_instance_metric_read_iops_hourly aws_rds_db_instance_metric_write_iops aws_rds_db_instance_metric_write_iops_daily aws_rds_db_instance_metric_write_iops_hourly aws_rds_db_option_group aws_rds_db_parameter_group aws_rds_db_snapshot aws_rds_db_subnet_group aws_redshift_cluster aws_redshift_cluster_metric_cpu_utilization_daily aws_redshift_event_subscription aws_redshift_parameter_group aws_redshift_snapshot aws_redshift_subnet_group aws_region aws_route53_domain aws_route53_record aws_route53_resolver_endpoint aws_route53_resolver_rule aws_route53_traffic_policy aws_route53_zone aws_s3_access_point aws_s3_account_settings aws_s3_bucket aws_sagemaker_app aws_sagemaker_domain aws_sagemaker_endpoint_configuration aws_sagemaker_model aws_sagemaker_notebook_instance aws_sagemaker_training_job aws_secretsmanager_secret aws_securityhub_hub aws_securityhub_product aws_securityhub_standards_subscription aws_serverlessapplicationrepository_application aws_servicequotas_default_service_quota aws_servicequotas_service_quota aws_servicequotas_service_quota_change_request aws_ses_email_identity aws_sfn_state_machine aws_sfn_state_machine_execution aws_sfn_state_machine_execution_history aws_sns_topic aws_sns_topic_subscription aws_sqs_queue aws_ssm_association aws_ssm_document aws_ssm_maintenance_window aws_ssm_managed_instance aws_ssm_managed_instance_compliance aws_ssm_parameter aws_ssm_patch_baseline aws_ssoadmin_instance aws_ssoadmin_managed_policy_attachment aws_ssoadmin_permission_set aws_tagging_resource aws_vpc aws_vpc_customer_gateway aws_vpc_dhcp_options aws_vpc_egress_only_internet_gateway aws_vpc_eip aws_vpc_endpoint aws_vpc_endpoint_service aws_vpc_flow_log aws_vpc_flow_log_event aws_vpc_internet_gateway aws_vpc_nat_gateway aws_vpc_network_acl aws_vpc_peering_connection aws_vpc_route aws_vpc_route_table aws_vpc_security_group aws_vpc_security_group_rule aws_vpc_subnet aws_vpc_vpn_connection aws_vpc_vpn_gateway aws_waf_rate_based_rule aws_waf_rule aws_wafregional_rule aws_wafv2_ip_set aws_wafv2_regex_pattern_set aws_wafv2_rule_group aws_wafv2_web_acl aws_wellarchitected_workload aws_workspaces_workspace

Table: aws_tagging_resource

You can assign metadata to your AWS resources in the form of tags. Each tag is a label consisting of a user-defined key and value. Tags can help you manage, identify, organize, search for, and filter resources. You can create tags to categorize resources by purpose, owner, environment, or other criteria.

Examples

Basic info

select
  name,
  arn,
  compliance_status,
  tags,
  region
from
  aws_tagging_resource;

List resources which are compliant with effective tag policy

select
  name,
  arn,
  tags,
  compliance_status
from
  aws_tagging_resource
where
  compliance_status;

Control examples

.inspect aws_tagging_resource

AWS Tagging Resource

Name	Type	Description
_ctx	jsonb	Steampipe context in JSON form, e.g. connection_name.
account_id	text	The AWS Account ID in which the resource is located.
akas	jsonb	Array of globally unique identifier strings (also known as) for the resource.
arn	text	The ARN of the resource.
compliance_status	boolean	Whether a resource is compliant with the effective tag policy.
keys_with_noncompliant_values	jsonb	These are keys defined in the effective policy that are on the resource with either incorrect case treatment or noncompliant values.
name	text	The name of the resource.
noncompliant_keys	jsonb	These tag keys on the resource are noncompliant with the effective tag policy.
partition	text	The AWS partition in which the resource is located (aws, aws-cn, or aws-us-gov).
region	text	The AWS Region in which the resource is located.
tags	jsonb	A map of tags for the resource.
tags_src	jsonb	A list of tags assigned to the parameter.
title	text	Title of the resource.