Tag, Control, Govern
Define tagging standards, deploy guardrails, assess your governance maturity, and follow a guided roadmap from visibility to full control — included with every Guardian Pro subscription.
"Which resources are missing tags?"
Violations listed by account and resource
"Who owns this spend?"
See how much spend can’t be attributed to a team
"How mature is our AWS setup?"
Scored on tagging, controls, accounts and cost allocation
"What should we do next?"
A Now, Next, Later roadmap with one-click steps
Governance Maturity Score
One score out of 100 for how well your AWS organisation is governed, with the maturity level you are at and the areas pulling it down.
- Scores for tag governance, service control, account structure and cost allocation
- Maturity level shown as Visibility, Control or Optimise, with the points needed to reach the next one
- Capabilities you have in place for tagging, policy enforcement, and audit and assessment
- Reassessed daily, so you can see the score improve as you fix things
Governance score of 46 out of 100 at Control level, with scores for four dimensions and capability checks
A Guided Roadmap
The next steps to raise your score, in order, so you always know what to do next.
- Steps grouped into Now, Next and Later, each tagged with the maturity level it builds
- Points shown for every step, so you can see how much each one raises your score
- A "Do it" button on each step takes you straight to where you make the change
- Progress tracked as you go, with steps ticked off automatically
Governance roadmap with Now, Next and Later steps, points per step and Do it buttons
AI Tag Strategy Advisor
The AI strategy advisor analyses your existing infrastructure, resource patterns, and organisational structure to recommend a tagging standard tailored to your environment — not generic best practices.
- Analyses your deployed resources and existing tags to understand your current state
- Recommends tag keys, naming conventions, and enforcement rules based on your specific environment
- Generates a strategy you can review, adjust, and deploy as tag policies in one flow
- Strategy history tracks how your tagging approach evolves as your organisation grows
AI tag strategy advisor showing recommended tagging standard
Tag Governance
Define tagging standards, deploy them as AWS Tag Policies across your Organisation, and continuously monitor compliance. Guardian Pro evaluates every resource against your policies and surfaces violations with clear remediation guidance.
- Create tag policies with required keys, allowed values, and enforcement scope — deployed directly to your AWS Organisation
- Compliance score for every account, with violation counts and the spend you can’t attribute because of missing tags
- Auto-remediation applies missing or incorrect tags based on policy defaults — no manual tagging required
- Suppress false positives for resources that intentionally diverge from policy, with documented justification
Tag compliance showing the score, resources evaluated, violations per account and unattributable spend
Service Control Policies
Manage SCPs from a purpose-built interface with a template library for common governance patterns. Preview policy effects before deploying to ensure nothing breaks.
- Template library with ready-to-deploy guardrails: approved services, region restrictions, security baselines, and more
- Create, edit, and deploy SCPs to OUs or accounts directly from Guardian Pro — no AWS console switching
- Version history tracks every change to every policy so you can audit and roll back if needed
- Policy inventory gives a single view of all SCPs and tag policies across your entire organisation
SCP template library showing guardrail categories and deployment options