Does anyone know of a query that I can give to Pulumi AI Assist (in Resources) that would find some (or all!) of the resources that are created "by default" by AWS?
little-cartoon-10569
02/16/2026, 1:43 AM
I'm reviewing an old AWS account with poor hygiene and I'd like to ignore resources that weren't deliberately created. There's no consistent use of tags, resource groups, or anything helpful like that.
little-cartoon-10569
02/16/2026, 1:47 AM
I also have a reference empty account that should have no non-default resources.. but I haven't found a query that returns (almost) nothing, yet.
m
modern-spring-15520
02/18/2026, 2:36 AM
Do you know what pattern to look for, conceptually? Is it things that aren't tagged a certain way @little-cartoon-10569?
l
little-cartoon-10569
02/18/2026, 2:55 AM
Ideally: no. I was hoping that there'd be a Knowledge (with a capital K) about the crud that AWS just creates.
For what I'm working on, since I have a blank canvas, I can tag things that I want found. But ideally, I want to be able to find all the "bespoke" resources and ignore all the AWS-created ones: it would be useful in the future.
little-cartoon-10569
02/18/2026, 2:56 AM
Default VPC, RDS cluster parameter groups, SSM-SessionManagerRunShell document.. these things always exist. There's a pile of new ones in new accounts, to do with IoT stuff, that I know nothing about. I'd love to be able to "not see" these.