1. Home
  2. Analyze
  3. Manage Tags and Resources

Manage Tags and Resources

Tags and Resources allows you to create a consistent tag structure across all of your Cloud Platforms (Azure and AWS) that are synchronized with PyraCloud.

Maintaining a consistent tag structure allows you to aggregate resource information from all of your Cloud Platforms to provide better governance, cost analysis, and chargeback. A consistent structure also allows you to deploy a more flexible Cloud Platform structure that fits your business.

Here is an example of a Tag approach that is not consistent

Figure 1 – Tag Strucure that is not Consistent

As you can see from the three examples above, the administrators managing the different cloud platforms and subscriptions had the same intent, but did their tagging differently.

This would make aggregating information within each platform or outside each platform difficult. To solve this, you can use Tags and Resources to apply a consistent tag naming standard to all resources across all platforms. You just define the naming standard you want and add/move those resources to that new naming standard. Once done, the Tags module will allow you to clean up the old tags.

Here is an example of how PyraCloud solves the problem:

Figure 2 – Consistent Tagging with PyraCloud

Throughout the rest of this article, we will show you how to use Tags and Resources to drive a consistent standard within your business.

There are two ways to get to the Tags and Resources . You can navigate to Tags and Resources through the Menu Navigation or by the Resource Stats tile.

There are two menu items called Tags and Resources that you can click on:

Figure 3 – Resources and Tags Menu

Each menu item will take you to the respective management pages.

Dashboard Tile

Alternatively, there is a dashboard tile that shows your Resource Stats. These stats are pulled from Tags and Resources . If you click on this tile, it will take you to Resources.

Figure 4 – Navigating to TRM from Dashboard Tile

The tile displays three sets of information:

  • Resources: This is the total number of resources we are synchronizing from all of Cloud Platforms connected to TRM.
  • Tagged: This is the percentage of resources that have at least one tag on them.
  • Tag Conflict: This is the number of open conflict reported on the system.

Tags

Tags is a management page that allows you to view and manage the tag structure used, or to be used, by your Cloud Platforms.

Tags do not need to exist within your Cloud Platforms to create them within the Tags module. Tags will show up if they have been already applied to resources from the Cloud Platforms you are synchronizing with PyraCloud.

Once you apply tags to resources, by default, they will synchronize back to the resource’s Cloud Platform. This functionality can be disabled and will be described in this section of the document.

Figure 5 – Tags Main Page

There are a number items on the Tags Page as explained below:

  • Navigation Links: Quick links to Resources, Resource Rules, Cloud Tenant Setup, Custom Groups, Budgets and Consumption Overview
  • Resource Stats tile: These are common stats about your synchronized resources.
    • Cloud Resources: The total number of cloud resources that are tagged within the Tags and Resources.
    • Users: The total number of cloud users resources that are tagged within the Tags and Resources.
  • Most Used Tags tile: This tile talks about the most actively used tags in the system, sorted in a descending manner.
  • Tag Conflicts Tile: This tile informs about the conflicts in tagging that exists within the system.
  • Sync Health tile: Upon clicking, you will be presented with a window that will show you all of your Cloud Subscriptions being synchronized with Tags and Resources.
  • Multi-select options: When you select one or more tags in the list, you will see a couple more options appear “Clear Selection” and “Delete Tag(s). You can delete a single tag or multiple tags. If you wanted to start over and recreate your tag structure, select all tags and delete them. All tags will be removed from resources.
  • Quick Add Tag: You can create a new Tag Key and Value. You can also use an existing Key, but add a new value.
  • Search by Tag Key field: Quickly find the Tag Key you are looking for by typing it in to this field. This field uses type-ahead, so you should start seeing results as you type.
  • Tags column: This column is used to display the Tag Keys and Values in a collapsed view.
  • Resources column: This column is used to display the number of resources, out of the total number of resources, synchronized to Resources. E.g., <#resource with key:value> (of <total resources from all subscriptions>).
  • Actions column: This column is a quick link column to view and edit tags.

Tag Details Page

As mentioned above, clicking on View in the Actions column will open up the Tag Details Page. Within this page you can make edits to your tag.

Figure 6 – Tag Details Page

There are a number items on the Tag Details Page as explained below:

  • Tag: This is the Tag Key and Value you are editing e.g. ‘_department:hr’
  • Key: The Tag Key you are on e.g. _department. This field cannot be changed. If you wanted to change the Tag Key for these resources, you will have to create a new Tag Key, select all resources in this Tag Key and then assign a new Tag Key:Value to the resources. Once complete, delete this Tag Key:Value.
  • Value: The Tag Value you are on e.g. ‘hr’. This field is editable. You can change the Tag Key’s Value, as long as it’s not a duplicate within the same Tag Key. Changing the Tag Value will update all of the resources listed.
  • Resource Count: This is the total number of resources with this Tag e.g. 19.
  • Advanced Search: This allows you to filter down the resource list on this Tag, based on more properties related to the resources, so you can make quick decisions based on the results.
  • Result(s) found: This field will show the number of resource in the list. If you are filtering the results through Advanced Search on item 10 or the column filter on item 11, this number will change showing the resulting number of resources based on your filtering. (In this case 19)
  • Single or Multi-Select Column: You can select a single resource or multiple resources to take action.
  • Actions column: Click on the “View” to learn more about the resource on this list.

Resources

Resources is a management page that allows you to view all of the resources that are synchronized from your Cloud Platforms Subscriptions.

You can view the properties of each resource to identify them properly. You can also apply Tags to individual or multiple resources at a time. By default, Tags will synchronize back to the Cloud Platform. You can turn this feature off.

PyraCloud will always pull the updated Tag information from the Resource on every synchronization cycle. The Resources page also supports search/filtering, so you can quickly find the resources you would like to address.

Figure 7 – Resources Main Page

There are a number items on the Resources Page as explained below:

  • Navigation Links: Quick links to Tags, Resource Rules, Cloud Tenant Setup, Custom Groups, Budgets, and Consumption Overview.
  • Resource Stats tile: These are common stats about your synchronized resources.
    • Cloud Resources: The total number of cloud resources that are tagged within the Tags and Resources.
    • Users: The total number of cloud users resources that are tagged within the Tags and Resources.
  • Most Used Tags tile: This tile talks about the most actively used tags in the system, sorted in descending order.
  • Tag Conflicts Tile: This tile informs about the conflicts in tagging that exists within the system.
  • Sync Health tile: Upon clicking, you will be presented with a window that will show you all of your Cloud Subscriptions being synchronized with the Tags and Resources.
  • Advanced Search: This allows you to filter down the resource list based on properties related to the resources, so you can make quick decisions based on the results.
  • Add Virtual Resource : This functionality allows you to add virtual resources within PyraCloud, so you can visualize and track their costs within PyraCloud. Please see section Virtual Resources below.
  • Single or Multi-Select Column: You can select a single resource or multiple resources to take action. When you select a resource you will see the “Key” and “Value” fields appear
    • Enter the Tag Key:Value and click the “+ Add Tag” button to add different tags to the selected resource(s).
  • Resource List: This is a list of all of your resources, either in filtered or unfiltered view.

Note: In un-filtered view, you will find all of the resources synchronizing from your Cloud Platform Subscriptions. If you suspect any resources are missing, check the “Sync Health” tile and validate all of your subscriptions exist.

  • Export: The export button will start a .xlsx download of the list in view, including all of the pages.
  • Action “View”: Click on “View” to see more details about the resources.

Missing Permissions for Reading and Tagging AWS Resources

PyraCloud displays a banner if you have not granted the required permissions to read and/or tag AWS resources.

Figure 8 – Resources Page showing banner for missing AWS Resource types

You may see the following messages for the following scenarios –

Scenario 1 – Missing read permissions. This means that PyraCloud is not able to read information about AWS Resources. For e.g.

  • We detect that you are missing 79 AWS Resource types.

Scenario 2 – Missing write-back Permissions. This means that PyraCloud is not able to tag AWS Resource types. For e.g.

  • We detect that you are not able to tag 15 AWS Resource types.

Scenario 3 – Missing read and write-back permissions. This means that PyraCloud is not able to read information about AWS Resources and tag AWS Resource types. For e.g.

  • We detect that you are missing 79 AWS Resource types and you are not able to tag 15 AWS Resource types.

When clicking further on the “Show Details” link, the user is navigated to a modal, showing details of the resource type, AWS account and AWS region they are missing permissions for, and the impact on the PyraCloud environment.

Figure 9 – Missing permissions modal in Resources

This modal explains the permissions that are missing for each resources type within an AWS account and region. For e.g. in the third row, we are missing permissions for RedShiftReservedNodes in the ap-northeast region for account swo-test. In order to remediate the missing permission, please follow the steps here.

Please Note: The link in the Actions column will navigate you to the appropriate AWS account in question. However, due to caching within the AWS UI, you may be navigated to the last visited region for that account. Therefore make sure you locate the PyraCloud stack as mentioned here.

Resource Details Page

There are a number items on the Resource Details Page as explained below:

As mentioned above, clicking on View in the Actions column will open up the Resource Details Page. Within this page you can make edits to your resource.

Figure 10 – Resource Details Page
  • Resource Details: Common properties of all resources are listed in this section. In addition, we will also display some extended properties, based on resource type. Common resource properties include: Name, Cloud Platform, Subscription Name, Location, and Resource Type.
  • Groups: This is the list of all custom groups the resource is a part of. A resource can be part of more than one group. The table also displays the allocation of the cost of that resource across the different groups. Filtering by Custom Groups will reflect this cost allocation across costs on the Consumption and the Budget pages.
  • Related Resources Tab: This Section will include resources that depend on this resource as a parent. Not all dependent resources will show up on this list, as some resources can be shared. If the resource was created by the parent, it will show on this list. Child resources do not inherit Tags from the parent resource.
  • Software Tab: This section will include software that has been assigned to this resource.
  • Audit Log Tab: This section will show the history and audit trail of this resource.
  • Tag List: This is the list of all the Tags actively applied to this resource.
    • Value: This is the Tag Value that is applied to this resource. The Tag Key and Value create a unique Tag that is applied to this resource. The same value may exist multiple times on a Resource, but only if the Tag Key is unique.
    • Status: When adding, changing, or removing the Tag, we actively show the status of that change in this column. If you just added the Tag, you will see a “pending” status until the Tag has been applied to the Tag. The “pending” status may take longer, if we are synchronizing that Tag back to the Cloud Platform Subscription’s resource.
    • Platform Sync: Platform Sync has two states
      • On – when Platform Sync is on, the Tag will synchronize back to the Cloud Platform Subscription’s Resource.
      • Off – when Platform Sync is off, the Tag will only exist within PyraCloud. If you actively change the sync status from On to Off, the Tag will be removed from the Cloud Platform.

Note: PyraCloud will always pull in Tags from the Cloud Platform, no matter what state all the existing Tags on this resource are in.

  • Actions: If you no longer require the Tag be applied to this resource, you can “Remove Tag” from the resource by Viewing the tag and deleting it from the Tag Details page.
  • Add Tag: When you would like to “+Add Tag” to a resource, click this button and add the Tag to this resource. You must specify the Tag Key, Value and the Platform Sync state. Once complete, save the new Tag.

Virtual Resources

Virtual Resources are any resources that are not automatically discovered from your existing cloud environments like Azure, AWS, Office365, Adobe etc, but have a cost associated with them. Examples of virtual resources include full-time employees assigned to certain projects, Virtual Machines from specific providers (like Redhat etc), or any intangible resource that has a cost.

Virtual Resources are associated with cloud resources (that have been discovered from Azure/AWS etc.), and inherit some of their properties from the resource they are associated with. For example they automatically inherit the tags and custom groups of the resource they are associated with. This also means that, when the tags or custom groups on the original resource change, then they are automatically updated on the child virtual resource.

Adding Virtual Resources

Adding a virtual resource can be performed by clicking on the ‘Add Virtual Resource’ button within the Resources landing page. Clicking on this will navigate you to a screen requesting for more information as shown below:

Figure 11 – Adding a Virtual Resource

The information here is as summarized below –

  • Provider – This is the name of the Virtual Provider to track the virtual resource against, while measuring your costs for the virtual resource. The value entered here will appear in various searches within PyraCloud for the filter name ‘Provider’. This is a mandatory field.
  • Resource Name – This field describes the name of the virtual resource. The name here will appear in searches within PyraCloud for the filter name ‘Resource Name’. This is a mandatory field.
  • Quantity – Quantity is the amount of resources that you have for that resource name. This is a mandatory field.
  • Date – This is the date that you would like to track your virtual resources from. This is a mandatory field.
  • Currency – Currency in which you would like to track the costs of your virtual resources in. This is a mandatory field.
  • Unit Cost – This is the cost per unit of the virtual resource. The total cost of the virtual resource will be calculated by multiplying unit cost with quantity.

Visualizing Virtual Resources in Resources and Resource Details

Virtual resources will appear in Resources just like any other resource. They can be searched for by using the Advanced Search filter “Resource Type” as shown below:

Figure 12 – Virtual Resources as filters within Resources

Virtual Resources in Resource Details

Virtual Resources inherit their tags and custom groups from the resource they are associated to (as mentioned above). Therefore their tags and custom groups cannot be modified.

Figure 13 – Virtual Resource Tags and Groups cannot be Modified

The parent resource the virtual resource is attached to can be viewed within the Related Resources tab within Resource Details.

What are Tag Conflicts?

PyraCloud will Synchronize with your Cloud Platform on a set interval. This means there is a chance the Tags you see within PyraCloud are out of date (by hours). We try to Synchronize often, to prevent this, but in some cases changes will be made in Azure or AWS in between Sync cycles.

When the addition/removal/change of a Tag is made to the same Tag Key, this will cause a conflict. (Since the Cloud Platform will only allow for a single Tag Key and any value on a resource.) If the same Tag Key is added or changed on both platforms, in between sync cycles, the PyraCloud Tag Key:Value will overwrite the Cloud Platform’s Tag Key:Value.

We realize the Cloud Platform Tag change may have been intentional, so we save this as a conflict. This Conflict will allow you to accept the change proposed by the user from the Cloud Platform or leave in place the PyraCloud change that was made.

If you ignore this conflict, the conflict notification will expire. To avoid Tag Conflicts, you can always manually run a synchronization on your subscription.

Figure 14 – Tag Conflicts

Tag Conflicts Page

There are a number items on the Resource Details Page as explained below:

  • Navigation links: Quick links to Resources, Tags, Cloud Tenant Setup, Custom Groups, Budgets and Consumption Overview
  • Resource Stats tile: These are common stats about your synchronized resources.
    • Cloud Resources: The total number of cloud resources that are tagged within the Tags and Resources.
    • Users: The total number of cloud users resources that are tagged within the Tags and Resources.
  • Most Used Tags tile: This tile talks about the most actively used tags in the system, sorted in descending order.
  • Tag Conflicts tile: This tile informs about the conflicts in tagging that exists within the system.
  • Sync Health tile: Upon clicking, you will be presented with a window that will show you all of your Cloud Subscriptions being synchronized with the Tags and Resources.

If you have conflics, you will see a table which lists all of the Tags that are in conflict, from the Tag perspective.

Figure 15 – Tag Conflicts Table
  • Conflict column: This is the Tag that was applied and that is now in conflict on a resource. If you click on the Tag name, it will take you to the Tags page, in Tag Edit view.
  • Cloud Platform column: This is the resource’s Cloud Platform impacted by the Tag Conflict.
  • Conflicts column: The total number of conflicts related to this Tag.
  • Actions column: Click on “View to go to the Resource Details Page.

How to Resolve a Tag Conflict

Click on the > next to the tag to open up more details about the error.

Figure 16 – Show Conflict Details

Select the action you want to take and click on “Update Changes”.

Figure 17 – Update Changes

What is the Sync Health Window?

Clicking on the Sync Health tile will take you to the Sync Health window. The Sync Health window will show you all of the Cloud Platform Subscriptions you are synchronizing with PyraCloud. It will also show you the synchronization status state and allow you to run a synchronization process.

Figure 18 – Sync Health Window

There are a number items on the Sync Health Windows as explained below:

  • Subscription Name: This is a list of all the Cloud Platform Subscriptions being synchronized with PyraCloud. If you are missing any Subscriptions, please reach out to Support or your SoftwareONE Account Team.
  • Cloud Platform: This is the cloud platform that the resource was synchronized from i.e. Microsoft Azure, Office 365 or Amazon Web Services.
  • Finished at: This is the time the last synchronization ran and how long the synchronization took, based on the start/stop times.
  • Status: This is the Subscription Synchronization Status. In normal conditions, the state should either be “Running” or “Success” if you see an error, it may be due to a number of reasons which include:
    • Invalid or expired credentials – Contact support if this occurs.
    • Expired/unused tenant – If this is the case, contact Support to have the Cloud Platform Subscription removed.
    • Cloud Platform is inaccessible – If the Cloud Platform API is unavailable, an error may occur. Contact Support to get a status update.
  • Access Level: This access level has been set for a synchronization process against a particular subscription. The different values for this are –
    • Read with/without tags- This sync option only synchronizes resources with or without their tags from the cloud provider.
    • Read/Write – This sync option synchronizes all resources in read and write mode.
  • Actions Column: you have two options under this column:
    • Sync : If you recently made changes in your Cloud Platform Subscription and you don’t want to wait for the next Synchronization cycle, either click to synchronize the Subscription in question or click on 5 to synchronize all Subscriptions.
    • Configure – This allows you to configure the subscription as part of Cloud Tenant Setup.
  • Sync All: This synchronizes all subscriptions.
  • Close: Click close to return to previous screen.
Updated on October 13, 2020

Was this article helpful?

Related Articles