Skip to main content
Version: v4.2.24

🏷️ InvenTag

Professional AWS™ Cloud Governance Platform - Comprehensive resource inventory, compliance checking, and BOM generation

Automated Release Python 3.8+ License: MIT

✨ Key Features​

  • 🛡️ Production Safety & Security - Enterprise-grade security validation and compliance standards (SOC 2, PCI, HIPAA, GDPR)
  • 📊 Professional BOM Generation - Excel/Word/Google Docs reports with logical column ordering and service-specific sheets
  • 🔍 Multi-Account Discovery - Comprehensive resource scanning across multiple AWS accounts with parallel processing
  • 🌐 Advanced Analysis Suite - Network security analysis, cost optimization, and security posture assessment
  • 🏷️ Tag Compliance Checking - Automated validation against organizational tagging policies
  • 🔄 State Management - Change tracking with delta detection and professional changelog generation
  • 🚀 CI/CD Ready - Easy integration with automated workflows and S3 upload support
  • ⚡ Flexible Deployment - Cross-account roles, interactive setup, and comprehensive credential management

🚀 Quick Start​

# Clone and setup
git clone https://github.com/habhabhabs/inventag-aws.git
cd inventag-aws
pip install -r requirements.txt

# Generate professional BOM reports with production safety
./inventag.sh --create-excel --create-word \
  --enable-production-safety --security-validation

💼 Enterprise Examples​

# Multi-account BOM with comprehensive analysis
./inventag.sh --accounts-file accounts.json \
  --create-excel --create-word \
  --enable-network-analysis --enable-security-analysis \
  --compliance-standard soc2 --s3-bucket enterprise-reports

# Interactive multi-account setup with advanced features
./inventag.sh --accounts-prompt \
  --create-excel --create-google-docs \
  --enable-cost-analysis --generate-changelog

# Cross-account role with production safety
./inventag.sh --cross-account-role InvenTagRole \
  --create-excel --enable-production-safety \
  --security-validation --audit-output security-audit.json

# CI/CD integration with comprehensive reporting
./inventag.sh --accounts-file accounts.json \
  --create-excel --create-word \
  --s3-bucket reports-bucket --s3-key-prefix daily-reports/ \
  --max-concurrent-accounts 8 --per-account-reports

🏗️ Project Structure​

inventag-aws/
├── README.md                    # Project overview
├── inventag/                    # Core Python package
│   ├── cli/                     # Unified CLI interface
│   ├── core/                    # Core orchestration
│   ├── discovery/               # Resource discovery
│   ├── compliance/              # Security & compliance
│   ├── reporting/               # BOM generation
│   └── state/                   # Change management
├── docs/                        # Complete documentation
├── examples/                    # Configuration examples
├── config/                      # Default configurations
├── scripts/                     # Standalone tools
└── tests/                       # Comprehensive test suite

🛡️ Security & Compliance​

InvenTag includes enterprise-grade security features:

  • Read-Only Enforcement - All operations are strictly read-only by default
  • Compliance Standards - Built-in support for SOC 2, PCI, HIPAA, GDPR
  • Audit Logging - Comprehensive audit trails for all operations
  • Risk Assessment - Automated security risk evaluation
  • Production Safety - Real-time monitoring and validation

See Production Safety Guide for complete details.

🔗 Support & Community​

📄 License​

MIT License - see the LICENSE file for details.

InvenTag - Professional AWS™ cloud governance made simple

AWS™ is a trademark of Amazon Web Services, Inc. InvenTag is an independent tool and is not affiliated with, endorsed by, or sponsored by Amazon Web Services, Inc.