Cost Allocation Tagging Enforcer
CloudFormation: AWS Config rule with Lambda auto-remediation that tags untagged resources and sends a weekly digest of still-untagged resources.
Cost Allocation Tagging Enforcer
Untagged resources make cost allocation impossible and cleanup risky. This CloudFormation stack deploys an AWS Config rule that detects resources missing required cost tags, attempts auto-remediation via Lambda, and sends a weekly email digest of everything still untagged — broken down by service and region.
What Is Included
A CloudFormation template that creates an AWS Config rule for tag compliance, a Lambda function that applies default tags to remediable resources (EC2, RDS, S3), and a second Lambda triggered weekly by EventBridge to compile and email the non-compliant resource report via SES.
Developer Experience
- Required tag keys are a CloudFormation parameter — configure for your org
- Auto-remediation applies sensible defaults; manual review list for the rest
- Weekly digest grouped by service and region for easy follow-up
- Works across all regions from a single stack deployment
What You Get
tagging-enforcer.yaml— CloudFormation templatedeploy.sh.env.exampleREADME.md
Requirements
AWS account with AWS Config enabled, SES configured for digest emails, permissions to deploy CloudFormation (Config, Lambda, EventBridge, IAM). Config must be enabled in each region you want to monitor.