Self-hosted, multi-account AWS asset inventory

You are paying for AWS resources you don’t use

Resource Atlas is a self-hosted AWS asset inventory for multiple AWS accounts: one searchable view of the resources that drive your bill, across every account you own, deployed inside your own AWS account so nothing about your infrastructure ever leaves it.

Sign up, download the bundle and deploy it into your own AWS account. 21 days of Enterprise Capacity, then free forever on Community.

▸ Findings

Find unused AWS resources across multiple accounts

[ WASTE ]

Stop paying for idle resources

Idle instances, unattached volumes and forgotten endpoints in accounts nobody checks show up in the scan next to everything else — so they stop being anonymous line items on the bill.

[ MULTI-ACCOUNT ]

Multi-account AWS inventory

From two AWS accounts to three hundred, the whole estate reads as one searchable inventory instead of a login-by-login tour of the console.

[ SELF-HOSTED ]

Self-hosted in your AWS account

You deploy Resource Atlas into an AWS account you own. Inventory data stays in your infrastructure — nothing about your estate is shipped to anyone else's cloud.

▸ Coverage

22 AWS resource types, scanned in every account

The resources that drive your bill, read with a read-only role in each connected account and listed side by side.

Compute4

  • EC2 Instances
  • Lambda Functions
  • ECS Clusters
  • EKS Clusters

Storage & Databases4

  • S3 Buckets
  • EBS Volumes
  • RDS Databases
  • DynamoDB Tables

Network & Delivery9

  • VPCs
  • Elastic IP Addresses
  • Route 53 Hosted Zones
  • CloudFront Distributions
  • API Gateways
  • Load Balancers
  • Load Balancer Listeners
  • Target Groups
  • SSL Certificates

Messaging3

  • SQS Queues
  • SNS Topics
  • SNS Subscriptions

Identity1

  • IAM Users

Operations1

  • CloudWatch Log Groups

More resource types are added over time.

▸ Process

Deploy a self-hosted AWS inventory in three steps

[ 01 ]

Deploy

Install Resource Atlas into the AWS account you choose. It runs on your infrastructure, under your controls.

[ 02 ]

Connect accounts

Point it at the AWS accounts you want inventoried — 2 on Community, up to 300 on Enterprise. They don't need to share an AWS Organization.

[ 03 ]

Read the ledger

Browse and search what you run in one place, account by account or all at once.

▸ FAQ

Frequently asked questions

What is Resource Atlas?

Resource Atlas is a self-hosted AWS asset inventory. You deploy it into an AWS account you own, connect the other AWS accounts you run, and it scans them into one searchable inventory of the resources that drive your bill — so you can see what you run, and what you are paying for but no longer use.

How much does Resource Atlas cost? Is there a free plan?

Every new account starts with a 21-day trial at Enterprise capacity, no credit card required. When the trial ends, the account moves automatically to Community, which is free forever for up to 2 AWS accounts. Pro is $996 / year for up to 15 accounts, Business is $3,996 / year for up to 75, and Enterprise, for up to 300, is priced on request. You can subscribe to any plan at any time, during the trial or after it. Separately, Resource Atlas runs inside your own AWS account, which usually costs about $25 USD a month.

Is Resource Atlas self-hosted? Where is my inventory data stored?

Yes. Resource Atlas is deployed with Terraform into an AWS account you choose, and runs inside your own VPC behind an internal load balancer. Your inventory data is stored in that account and never leaves your infrastructure.

Does Resource Atlas send any of my AWS data outside my account?

No. Scanning, storage and the web app all run inside your own AWS account. The only outside service Resource Atlas talks to is the Resource Atlas licensing service: it sends your licence key and gets back your plan and account limit, and it checks whether a new release is available. No account IDs, resource details or scan results are ever sent.

Does Resource Atlas change anything in the AWS accounts it scans?

No. Apart from the read-only role created in each account during setup, Resource Atlas only reads. That role has the AWS-managed ReadOnlyAccess policy and trusts only the Resource Atlas backend in your own deployment account, so it can read your inventory and nothing else.

Can I inventory multiple AWS accounts? Do they need to be in one AWS Organization?

Yes — a multi-account AWS inventory is what Resource Atlas is built for, and the accounts do not need to share an AWS Organization. The account you deploy into is scanned out of the box. For each additional account, a script in the bundle creates a read-only IAM role and you add the account ID in the app. Community covers 2 AWS accounts for free; Pro covers 15, Business 75 and Enterprise up to 300.

How to add AWS accounts →

Which AWS resource types does Resource Atlas scan?

22 resource types in every connected AWS account.

See the resource types →

Which AWS regions does Resource Atlas scan?

The region you deploy Resource Atlas to, in every connected account. Global resources appear in full wherever you deploy: IAM users, CloudFront distributions and Route 53 hosted zones. S3 buckets are listed from every region, each tagged with its own region, and ACM certificates come from your deployment region plus us-east-1. Everything else, such as EC2 instances, Lambda functions, RDS databases and VPCs, is regional, so only resources in your deployment region appear.

How does Resource Atlas help find unused AWS resources?

Every scanned resource in every connected AWS account sits in the same searchable inventory. Idle instances, unattached volumes and endpoints in accounts nobody checks show up next to everything else, instead of hiding as anonymous line items on the AWS bill.

What do I need to deploy Resource Atlas?

An AWS account to deploy into, a VPC with two private subnets in different availability zones with outbound internet access (e.g. through a NAT gateway), Terraform 1.3 or later, and AWS CLI v2. The deployment commands currently assume macOS.

Read the deployment guide →

Why do the private subnets need outbound internet access?

Two reasons. Resource Atlas checks your licence and subscription with the Resource Atlas licensing service on a regular basis. It also checks for software updates, so new versions of the app can be easily downloaded and deployed from inside Resource Atlas.

▸ Pricing

Pick your capacity

No credit card required. Every account starts with 21 days of Enterprise Capacity; if you don’t subscribe before the trial ends, your deployment automatically falls back to the Community plan (2 AWS accounts, free forever).

[ Pro ]

15

AWS accounts

$996 / year

For small teams getting started with cross-account visibility.

  • · Up to 15 AWS accounts
  • · All resource inventory features
  • · Self-hosted in your AWS account
  • · Regular software updates
  • · Email support

[ Business ]

75

AWS accounts

$3,996 / year

For growing teams managing tens of AWS accounts.

  • · Up to 75 AWS accounts
  • · All resource inventory features
  • · Self-hosted in your AWS account
  • · Regular software updates
  • · Email support

[ Enterprise ]

300

AWS accounts

Contact us

For organisations with hundreds of AWS accounts.

  • · Up to 300 AWS accounts
  • · All resource inventory features
  • · Self-hosted in your AWS account
  • · Regular software updates
  • · Email support

[ Community ]

Free forever

Up to 2 AWS accounts. Community is the automatic fallback after your 21-day Enterprise Trial ends — there is no separate download. Stay on Community by simply not subscribing. Email support is included with paid plans.