lyft
Add a relationship to AWS nodes that support tagging
Description:
We'd like to track down resources in our AWS infrastructure that should be tagged, but aren't. The issue right now is that it's very difficult to query for this in cartography, because not all nodes with a [RESOURCE] relationship are taggable, and even some that are taggable aren't tagged in cartography because we're not pulling in the tags.
It would be ideal to add an analysis job to resourcegroupstaggingapi.py that adds a [SUPPORTS_TAGGING] relationship to each node type we support.
In this case, I believe the following query could return untagged resources:
MATCH (:AWSAccount)-[:RESOURCE]-(r)-[:SUPPORTS_TAGGING]
WHERE NOT (r)-[:TAGGED]-(:Tag)
RETURN r
I'm now remembering that you need connected nodes for relationships, so the above relationship won't really work.
I know it may be a bit meta, but maybe we could have (Feature) nodes, that describe the feature type as the ID, and have a ()-[:SUPPORTS]-(Feature{id: "tags"}) relationship?