Back to All Checks
Low AppSync Regional

AWS AppSync GraphQL APIs should be tagged

Description

Flags AWS AppSync GraphQL APIs that have no user-defined tags. Tags help with ownership attribution, cost allocation, and incident triage; untagged APIs are operationally opaque.

Remediation

Apply at least one user-defined tag to every AppSync GraphQL API.

Steps

  1. Open the AWS AppSync console and select the GraphQL API.
  2. Open Settings, then Tags.
  3. Add at least one tag with a non-aws: prefixed key (e.g. Owner, Environment, CostCenter).
  4. Save the changes.
Start Your Free Security Check