Foundry.
Features: inventory and compliance

Every account, one place to look.

Foundry describes what is in each AWS account it knows about, stores it, and evaluates it. The inventory is as fresh as the last scan, and this page says what that does and does not cover.

Illustration: a machinist's tool wall with every tool hanging in its own place, and one bench drawer open under an amber lamp.
Inventory

Org-wide inventory

A scan walks every account and region pair Foundry knows, eight at a time, and runs 132 discoverers over each. Regions default to us-east-1, us-east-2, and us-west-2. A scan starts from the console or an agent tool and runs inside the API process.

Accounts come from AWS Organizations account discovery, and Foundry reads Control Tower status. In each account it acts only as that account's own automation role, through assume-role with an external ID.

  • Query the inventory and see the facets of a result
  • Open a resource to see its properties, related resources, and history
  • Find resources with no tags, or that are about to expire

Global resource types such as IAM roles are listed in each scanned region and stored once per region.

Compliance

Compliance packs

Foundry carries 129 compliance packs holding 979 rules over 28 resource types, evaluated against the stored inventory. A pack scores by account and resource, and each failing resource gets a finding that names the rule.

What is there

129 packs, 979 rules, one finding per failing resource, and a score per pack.

How far it reaches

Each rule carries an ID, a resource type, a description, and a condition. About half read properties no discoverer collects yet, so coverage is partial.

Advisor

Advisor checks

102 checks, written in house in the style of Trusted Advisor, run over the inventory. Each produces findings with a severity, the affected resources, and an estimated saving where one applies.

Advisor checks
Security46 checks
Cost24 checks
Service limits14 checks
Fault tolerance13 checks
Performance5 checks
Screens

On screen

Captures of the running console with fictional StrataForge Robotics data. No real AWS account or cost appears.

Foundry's inventory table of resources across StrataForge's AWS accounts, with type, account, region, and owner, product, and service tags.Foundry's inventory table of resources across StrataForge's AWS accounts, with type, account, region, and owner, product, and service tags.
Inventory: every resource, with its account, region, and tags.
A security group's detail page with its inbound and outbound rules and the related resources that use it.A security group's detail page with its inbound and outbound rules and the related resources that use it.
A resource's rules, properties, and related resources.
The compliance page: finding counts by severity, tag coverage at 98 percent, and links to the taxonomy, tag compliance, chargeback, and enforcement screens.The compliance page: finding counts by severity, tag coverage at 98 percent, and links to the taxonomy, tag compliance, chargeback, and enforcement screens.
Compliance: findings and tag coverage at a glance.
The advisor page: findings in cost, security, performance, fault tolerance, and service limit categories, with estimated monthly savings.The advisor page: findings in cost, security, performance, fault tolerance, and service limit categories, with estimated monthly savings.
Advisor: findings by category, with estimated savings.

← Back to features

Contact

Questions about this tool?

Write to Renkara Media Group and a person will answer.

Email contact@renkara.com