# What is AppRegistry? With AppRegistry, you create applications to store associated resources. You can create attribute groups that describe the context of your applications based on metadata you provide. You can create tags that assign metadata to applications and attribute groups and associate resources with applications. You can also share applications and attribute groups to accounts, organizations, and organizational units. The following video (06:57) shows how you can create application in AppRegistry. [![AWS Videos](http://img.youtube.com/vi///https://www.youtube.com/embed/Ln9U9WWXnZg/0.jpg)](http://www.youtube.com/watch?v=//https://www.youtube.com/embed/Ln9U9WWXnZg) **Note** The console shown in the video might differ from the console available today. ## AWS service integrations The following AWS services integrate with AppRegistry: + **AWS Billing** With [Billing](https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/billing-what-is.html), you can use [cost allocation tags](https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/custom-tags.html) to analyze cost trends for your applications and resources. + **Amazon CloudWatch** With [CloudWatch](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/WhatIsCloudWatch.html), you can use a feature called [Application Insights](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/cloudwatch-application-insights.html) to monitor application resources and detect issues with applications. + **AWS Management Console** With the [AWS Management Console](https://aws.amazon.com/console/), you can access and view your applications and associated resources. + ** AWS Resource Access Manager (AWS RAM)** With [AWS RAM](https://docs.aws.amazon.com/ram/latest/userguide/what-is.html), you can [share applications and attribute groups](https://docs.aws.amazon.com/ram/latest/userguide/working-with.html) through AWS Organizations. + **AWS Resilience Hub** With [Resilience Hub](https://docs.aws.amazon.com/resilience-hub/latest/userguide/what-is.html), you can [collect application resources](https://docs.aws.amazon.com/resilience-hub/latest/userguide/applications.html) to create a resiliency policy. + **AWS Resource Groups** With [Resource Groups](https://docs.aws.amazon.com/ARG/latest/userguide/resource-groups.html), you can use tags to [share applications and attribute groups](https://docs.aws.amazon.com/ARG/latest/userguide/integrated-services-list.html), as well as organize application resources. + **AWS Service Catalog** With [Service Catalog](https://docs.aws.amazon.com/servicecatalog/latest/adminguide/introduction.html), you can [create provisioned products](https://docs.aws.amazon.com/servicecatalog/latest/adminguide/provisioned-products.html), which are CloudFormation stacks, that you can associate with applications. + **AWS Service Management Connector** With [Service Management Connector](https://docs.aws.amazon.com/servicecatalog/latest/adminguide/integrations-servicenow.html), you can view applications in a ServiceNow Configuration Management Database. + **AWS Systems Manager** With [Systems Manager](https://docs.aws.amazon.com/systems-manager/latest/userguide/what-is-systems-manager.html), you can use a feature called [Application Manager](https://docs.aws.amazon.com/systems-manager/latest/userguide/application-manager.html) to detect and fix issues with resources in the context of their applications and clusters. + **AWS Well-Architected Tool** With [AWS WA Tool](https://docs.aws.amazon.com/wellarchitected/latest/userguide/intro), you can extend AWS Well-Architected functionality, best practices, measurements, and learnings into your existing architecture governance processes, applications, and workflows. ## Pricing For information about pricing, see [AWS Service Catalog pricing](https://aws.amazon.com/servicecatalog/pricing/). # Key concepts of AWS Service Catalog AppRegistry Key concepts This topic describes the key components of AppRegistry. **Topics** + [ ## Applications ](#ar-applications) + [ # The `awsApplication` tag ](ar-user-tags.md) + [ # Resource tag-sync tasks ](app-tag-sync.md) + [ ## Attribute groups ](#attr-groups) + [ ## Tags ](#ar-tags) + [ ## Application sharing ](#share-cross-account) ## Applications An application is a group of resources and metadata. When you create an application, you provide the application with a name and description. After you create an application, you can add a tag-based resource group or an CloudFormation stack resource group to it. You can also associate attribute groups and tags with the application. **Note** When you create an application, AppRegistry vends a user tag called the `awsApplication` tag. This tag identifies resources associated with an application. For more information, see [The `awsApplication` tag](https://docs.aws.amazon.com/servicecatalog/latest/arguide/overview-appreg.html#ar-user-tags). You can create applications in [myApplications in the AWS Management Console](https://docs.aws.amazon.com/awsconsolehelpdocs/latest/gsg/myApp-getting-started.html), in the AppRegistry console, and with the AWS CLI using the [AppRegistry API](https://docs.aws.amazon.com/servicecatalog/latest/dg/API_Operations_AWS_Service_Catalog_App_Registry.html). You can also create applications with the [AWS CDK](https://docs.aws.amazon.com/cdk/v2/guide/home.html) or an [AWS SDK](https://docs.aws.amazon.com/whitepapers/latest/aws-overview/software-development-kits.html) of your choice. You can view and manage applications in [myApplications in the AWS Management Console](https://docs.aws.amazon.com/awsconsolehelpdocs/latest/gsg/myApp-manage-apps.html), in the [AppRegistry console](https://docs.aws.amazon.com/servicecatalog/latest/arguide/create-app.html), and with the AWS CLI, as well as [in a set of AWS services](https://docs.aws.amazon.com/servicecatalog/latest/arguide/intro-app-registry.html#what-is-appregistry-integrate). # The `awsApplication` tag The `awsApplication` tag is a tag that AppRegistry vends when you create an AppRegistry application. This tag marks resources as belonging to an application. This tag consists of a key-value pair, where the key is `awsApplication` and value is the Amazon Resource Name (ARN) of an application. **To help you manage and monitor your applications, AWS highly recommends you ensure all of your application resources are tagged with the `awsApplication` tag**. Review [Tutorial: Existing AppRegistry application resources and the `awsApplication` tag](https://docs.aws.amazon.com/servicecatalog/latest/arguide/existing-customer-usecases.html) for instructions. The `awsApplication` tag provides additional features and capabilities for your applications and resources, including: + [Access to application monitoring and management](https://docs.aws.amazon.com/awsconsolehelpdocs/latest/gsg/aws-myApplications.html#myApp-benefits) in myApplications dashboard in the AWS Management Console + Viewing details about your application's costs, security findings, alarms, metrics and usage + Filtering by application in integrated AWS services, such as AWS Cost Explorer and AWS Security Hub CSPM For AppRegistry applications created before November 8th, 2023, AppRegistry creates the `awsApplication` tag after you perform your first resource association. You can then apply the `awsApplication` tag to any other resources you want to add to the application. For AppRegistry applications created after November 8th, 2023, AppRegistry creates the `awsApplication` tag when you create the application. As of September 18th, 2024 for **existing** AppRegistry users, the following behaviors apply: + For existing AppRegistry applications which include resources without the `awsApplication` tag applied, AWS does not retroactively apply the tag. + For existing AppRegistry applications, if you use the `AssociateResource` AppRegistry API, AWS does not automatically apply the tag unless you define the `options` parameter value as `APPLY_APPLICATION_TAG`. + For existing AppRegistry applications, if you use the AppRegistry console to add a new resource to the application, AWS automatically applies the `awsApplication` tag to that new resource. + For new applications created in the AppRegistry console, AWS automatically applies the `awsApplication` tag to all resources added to the application. + For new applications created with myApplications in the AWS Management Console, AWS automatically applies the `awsApplication` tag to all resources added to the application. # Tutorial: Existing AppRegistry application resources and the `awsApplication` tag If you have existing AppRegistry application, AWS recommends that you retroactively apply the `awsApplication` tag to all of the resources in the application, and also ensure any future resources added to the application have the `awsApplication` tag applied. This tutorial provides instructions for both recommendations. **Note** Managing an application's resources by adding or removing the `awsApplication` tag requires specific permissions. Review the minimum permissions for the AppRegistry APIs in the [https://docs.aws.amazon.com/servicecatalog/latest/dg/what-is-service-catalog.html](https://docs.aws.amazon.com/servicecatalog/latest/dg/what-is-service-catalog.html) and the Resource Groups APIs in the [https://docs.aws.amazon.com/ARG/latest/APIReference/Welcome.html](https://docs.aws.amazon.com/ARG/latest/APIReference/Welcome.html). ## Apply the `awsApplication` tag to the resources in an existing application In this situation, you have an existing AppRegistry application which includes resources that are *not* tagged with the `awsApplication` tag. The following procedure provides instructions to apply the `awsApplication` tag to those resources. **To tag an existing application's resources with the `awsApplication` tag:** 1. Identify the **application's tag value** (`awsApplication` tag value), which is expressed as an Amazon Resource Name (ARN). + Call the AppRegistry [`GetApplication` API](https://docs.aws.amazon.com/servicecatalog/latest/dg/API_app-registry_GetApplication.html#API_app-registry_GetApplication_ResponseSyntax) and find the value in the `applicationTag` response parameter. + Alternatively, you can navigate to the myApplications dashboard for the application and copy the `awsApplication` tag value from the [Application summary widget](https://docs.aws.amazon.com/awsconsolehelpdocs/latest/gsg/myApp-app-dash.html#myApp-summary). 1. After identifying the Application tag value, call the AppRegistry [`ListAssociatedResources` API](https://docs.aws.amazon.com/servicecatalog/latest/dg/API_app-registry_ListAssociatedResources.html) to view a list of resources that are already in the application. 1. Call the AppRegistry [`AssociateResource` API](https://docs.aws.amazon.com/servicecatalog/latest/dg/API_app-registry_AssociateResource.html) with the `options` parameter value as `APPLY_APPLICATION_TAG`. **Example CLI command**: ``` aws servicecatalog-appregistry associate-resource --application application_ARN --resource-type type --resource name --option "APPLY_APPLICATION_TAG" ``` ## Add more resources to an existing application by applying the `awsApplication` tag In this situation, you have an existing AppRegistry application to which you want to add new resources, and you want those resources to have the `awsApplication` tag applied. Use [myApplications in the AWS Management Console to add resources to an application](https://docs.aws.amazon.com/awsconsolehelpdocs/latest/gsg/myApp-manage-resources.html#myApp-add-resources). Resources added to the application using myApplications are automatically tagged with the `awsApplication` tag. You can also use the AWS Resource Groups [`GroupResources` API](https://docs.aws.amazon.com/ARG/latest/APIReference/API_GroupResources.html) to add resources to a specified group. The group is an application group, where the ARN is the `awsApplication` tag value. **To manually add resources to an application**: Call the Resource Groups `GroupResources` API and define the following parameters: + `Group` — The name or the Amazon resource name (ARN) of the application group to add resources to. + `ResourceARNs` — The list of Amazon resource names (ARNs) of the resources to be added to the group. **Example CLI command**: ``` aws resourcegroups group-resources —-group "ApplicationGroup-ARN" —-resourceArns "Resource-ARNs" ``` # Resource tag-sync tasks Tag-sync tasks An automatic tag-synchronization of application resources (a *tag-sync task*) is an application resource management strategy that works by automatically adding and removing [The `awsApplication` tag](ar-user-tags.md) from resources to manage their inclusion in an application. When you create a tag-sync task in the application, you specify a tag key-value pair to sync to the application, such as `Project:Blue`. The task then adds any resources tagged with `Project:Blue` to the application by adding the `awsApplication` tag to those resources. When you perform the following actions, AWS adds all resources tagged with the `Project:Blue` tag to the application by applying the `awsApplication` tag to those resources: + Create an application using the existing tag key-value pair `Project:Blue`. For more information about bulk-onboarding application resources by specifying an existing tag key-value pair at application creation, review [Creating your first application in myApplications](https://docs.aws.amazon.com/awsconsolehelpdocs/latest/gsg/myApp-getting-started.html#myApp-step1) in the AWS Management Console *Getting started guide*. + Create a tag-sync task in an existing application using the `Project:Blue` tag. After you configure the tag-sync task, it continuously manages the application's resources, adding or removing resources as they are tagged or untagged with the specified key-value pair. When the task is active, if you tag a resource with the `Project:Blue` tag, the tag-sync adds that resource to the application by applying the `awsApplication` tag to it. When you remove the `Project:Blue` tag from a resource, the tag-sync removes the resource from the application by removing the `awsApplication` tag. **Topics** + [ ## Tag-sync task required permissions ](#tag-sync-role) + [ ## Create a tag-sync task ](#create-tag-sync) ## Tag-sync task required permissions Creating and managing application tag-sync tasks requires you to specify or create an IAM role that allows the tag-sync task to manage the application resources. When configuring a tag-sync task, AWS recommends creating and using a new role to ensure the role includes the correct trust permissions. With this option, AWS creates a role named *tag-sync-role-**region**-**uniqueID***. This role is comprised of the following permissions: + The [https://docs.aws.amazon.com/aws-managed-policy/latest/reference/ResourceGroupsTaggingAPITagUntagSupportedResources.html](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/ResourceGroupsTaggingAPITagUntagSupportedResources.html) AWS managed policy— Allows the tag-sync task to tag and untag resources. You can modify the role’s resource permissions based on your application needs by adding or removing a specific resource's `TagResource` and `UntagResource` permissions. For example, add `amplify:TagResource` and `amplify:UntagResource` to allow the tag-sync task to manage tags for AWS Amplify resources. + A role [trust policy](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles.html#id_roles_terms-and-concepts)— Allows AWS Resource Groups to assume the role and perform related tasks on your behalf. + An [inline policy](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_managed-vs-inline.html#inline-policies)— Allows AWS Resource Groups to group and ungroup resources. **Important** To avoid disrupting the tag-sync task, do not delete this role or edit its trust or inline policies. If you choose to use an existing IAM role, ensure it includes the following permissions: + Permissions to tag and untag application resources. **Option 1**: Use AWS managed policies Use both the AWS Resource Groups [https://docs.aws.amazon.com/ARG/latest/userguide/security_iam_awsmanpol.html#security-iam-awsmanpol-ResourceGroupsTaggingAPITagUntagSupportedResources](https://docs.aws.amazon.com/ARG/latest/userguide/security_iam_awsmanpol.html#security-iam-awsmanpol-ResourceGroupsTaggingAPITagUntagSupportedResources) and [https://docs.aws.amazon.com/ARG/latest/userguide/security_iam_awsmanpol.html#security-iam-awsmanpol-ResourceGroupsandTagEditorFullAccess](https://docs.aws.amazon.com/ARG/latest/userguide/security_iam_awsmanpol.html#security-iam-awsmanpol-ResourceGroupsandTagEditorFullAccess) AWS managed policies to grant the permissions required to tag and untag all of the resource types supported by Resource Groups Tagging API, with some exceptions. The `ResourceGroupsandTagEditorFullAccess` policy also grants the permissions required to retrieve all tagged, or previously tagged, resources through the Resource Groups Tagging API. **Option 2**: Manually add permissions to an existing policy If you choose not to use AWS managed policies, you must manually configure your policy to include all of the permissions required to tag and untag your specific resources. For example, add the `sqs:TagQueue` permission if you have an Amazon SQS queue resource in your application. In addition to the resource-specific permissions, your policy must include the following Resource Groups Tagging API permissions: + `resource-groups:GroupResources` + `resource-groups:UngroupResources` + `tag:GetResources` + `tag:TagResources` + `tag:UntagResources` + A [trust policy](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles.html#id_roles_terms-and-concepts) attached that allows AWS Resource Groups to assume the role and perform these tasks on your behalf. The following is an example trust policy. ------ #### [ JSON ] **** ``` { "Version":"2012-10-17", "Statement": [ { "Sid": "Statement1", "Effect": "Allow", "Principal": { "Service": "resource-groups.amazonaws.com" }, "Action": "sts:AssumeRole" } ] } ``` ------ ## Create a tag-sync task This section provides instructions to create a tag-sync task for resources in an existing application using either myApplications in the AWS Management Console or with the AWS API. ------ #### [ myApplications in AWS Management Console ] For instructions to bulk-onboard application resources by specifying an existing tag key-value pair at application creation, review [Creating your first application in myApplications](https://docs.aws.amazon.com/awsconsolehelpdocs/latest/gsg/myApp-getting-started.html#myApp-step1) in the AWS Management Console *Getting started guide*. ------ #### [ AWS Resource Groups API ] **To create a tag-sync task** 1. Create a new tag-sync task by calling the Resource Groups [`StartTagSyncTask` API](https://docs.aws.amazon.com/ARG/latest/APIReference/API_StartTagSyncTask.html) and specifying the following parameters: + **Group** — The Amazon resource name (ARN) or name of the application group for which you want to create a tag-sync task. + **TagKey** — The tag key. + **TagValue** — The tag value. + **RoleARN** — The ARN of the role that AWS Resource Groups assumes when performing the tag-sync task to apply the `awsApplication` tag to resources. This role must have the tagging permissions to all resources you want to include in the application. For more information, review [Tag-sync task required permissions](#tag-sync-role). ``` aws resourcegroups start-tag-sync-task --group appgroup-ARN-or-name --tagkey tag-key --tagvalue tag-value --roleArn role-ARN ``` **Example output**: The output includes a `TaskArn` that you can later use to query the status of the tag-sync task. ``` { "GroupArn" : "string", "GroupName" : "string", "TaskArn": "string", "TagKey" : "string", "TagValue" : "string", "RoleArn" : "string", } ``` **Note** For some accounts, an attempted `StartTagSyncTask` call may result in a `GroupNotFound` error. To resolve this error, call the AppRegistry [`UpdateApplication` API](https://docs.aws.amazon.com/servicecatalog/latest/dg/API_app-registry_UpdateApplication.html). This call enables the application to perform tag-sync tasks. 1. Verify the status of the tag-sync task by calling the [`GetTagSyncTask` API](https://docs.aws.amazon.com/ARG/latest/APIReference/API_GetTagSyncTask.html). Enter the `TaskArn` from the output of the previous `StartTagSyncTask` call. ``` aws resourcegroups get-tag-sync-task --taskArn task-ARN ``` **Example output:** ``` { "GroupArn" : "string", "GroupName" : "string", "TaskArn": "string", "TagKey" : "string", "TagValue" : "string", "RoleArn" : "string", "Status" : "string", "ErrorMessage" : "string", "ManagedGroupArn": "string", "CreatedAt": "timestamp" } ``` **(optional) To list all tag-sync tasks** To list all active tag-sync tasks, call the [`ListTagSyncTasks` API](https://docs.aws.amazon.com/ARG/latest/APIReference/API_ListTagSyncTasks.html). You can optionally include the `Filters` parameter with a `GroupArn` or `GroupName` to narrow your results to tasks in a specific application. ``` aws resourcegroups list-tag-sync-task --filters group-name ``` **Example output**: ``` { "TagSyncTasks": [ { "GroupArn" : "string", "GroupName" : "string", "TaskArn": "string", "TagKey" : "string", "TagValue" : "string", "RoleArn" : "string", "Status" : "string", "ErrorMessage" : "string", "CreatedAt": "timestamp" } ], "NextToken": "string" } ``` **To cancel a tag-sync task** To cancel a tag-sync task, call the [`CancelTagSyncTask` API](https://docs.aws.amazon.com/ARG/latest/APIReference/API_CancelTagSyncTask.html) and enter the `TaskArn` of the tag-sync task you want to delete. ``` aws resourcegroups cancel-tag-sync-task --task-arn task-ARN ``` ------ ## Attribute groups Attribute groups are JSON objects that store application metadata. You associate attribute groups with applications to understand applications in the context of their associated metadata. **Example: Attribute group with metadata** The following snippet shows an attribute group with metadata that includes a team name, department number, department name, and email address. ``` { "Team" : "WebTeam", "Department": "10006", "ParentDept": "Research", "ContactAlias": "research@team.com" } ``` You can use the AppRegistry `AssociateAttributeGroup` API to apply metadata to an application. You can use the AppRegistry `DisassociateAttributeGroup` API to remove metadata from an application. You can associate attribute groups with applications in the console and with the AWS CLI using the [AppRegistry API](https://docs.aws.amazon.com/servicecatalog/latest/dg/API_Operations_AWS_Service_Catalog_App_Registry.html), with [CloudFormation stack resources](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/resources-section-structure.html), or with [CDK constructs](https://aws.amazon.com/cdk/features/). You can update an attribute group definition at any time with the AppRegistry `UpdateAttributeGroup` API. When you update an attribute group definition, the update applies to every application the attribute group is associated with. You can share attribute groups to accounts, organizations, and organizational units with the following permissions: + **Allow associations** Allows IAM principals in shared accounts to associate and disassociate attribute groups. + **Read only associations** Allows IAM principals in shared accounts to view attribute groups You can automate stack updates and metadata changes in a [continuous delivery and continuous integration pipeline](https://docs.aws.amazon.com/codepipeline/latest/userguide/concepts-continuous-delivery-integration.html). This allows stakeholders to query and receive information about attribute groups You can [view and manage attribute groups](https://docs.aws.amazon.com/servicecatalog/latest/arguide/associate-attributes.html) in the console and with the AWS CLI. ## Tags Tags are key-value pairs that act as metadata. You create tags using key-value pairs. You can add tags to applications and attribute groups, so you can group them by environment, owner, purpose, or other criteria. **Note** This tag is not the same as the [the `awsApplication` tag](https://docs.aws.amazon.com/servicecatalog/latest/arguide/overview-appreg.html#ar-user-tags). The `awsApplication` tag tag is an AWS user tag that AppRegistry vends when you create an application. You can add the `awsApplication` tag tag to resources, so you can identify which resources are associated with an application. **Example: AWS CLI output with `tags` parameter** The following is an example of the output for an application created in the AWS CLI, which includes the `tags` and `applicationTag` parameters. ``` { "application": { "arn": "string", "creationTime": "string", "description": "string", "id": "string", "lastUpdatedTime": "string", "name": "string", "applicationTag": {"awsApplication":"arn:aws:resource-groups:us-east-1:234567891011:group/myExampleApp/012345example6789101112131"}, "tags": { "myKey":"myValue" } } } ``` You can [view and manage tags](https://docs.aws.amazon.com/servicecatalog/latest/arguide/add-tags.html) in the console and with the AWS CLI. ## Application sharing Deploying applications across multiple AWS accounts is common and considered a best practice that can help isolate and manage business applications and data. With AppRegistry and AWS Resource Access Manager (AWS RAM), you can share applications and attribute groups with one or more accounts, organizations, and organizaional units. You can share applications and attributes in the console and AWS CLI using the [AWS Resource Access Manager API](https://docs.aws.amazon.com/ram/latest/APIReference/Welcome.html) and [infrastructure as code](https://docs.aws.amazon.com/whitepapers/latest/introduction-devops-aws/infrastructure-as-code.html). Resources can be associated with shared applications. For more information, see [Sharing resources with accounts in your organization](https://docs.aws.amazon.com/servicecatalog/latest/arguide/sharing-definitions). # AWS Service Catalog AppRegistry default service quotas Quotas This topic describes the default service quotas for AWS Service Catalog AppRegistry. For more information, see[What is Service Quotas?](https://docs.aws.amazon.com/servicequotas/latest/userguide/intro.html) in the *Service Quotas*. **AppRegistry service quotas** + Applications per AWS Region: 2,000 + Attribute groups per AWS Region: 2,000 + Resources per application: 1,000 + Attribute groups per application: 1,000 + Applications per attribute group: 1,000 + Attribute group size: 8,000 characters **Note** You can request a quota increase. For more information, see [Requesting a quota increase](https://docs.aws.amazon.com/servicequotas/latest/userguide/request-quota-increase.html) in the *Service Quotas*.