Auto-discover EC2, EBS, S3, RDS, Lambda, EKS, VPCs, load balancers and IAM across all regions and accounts. Health monitoring, CIS compliance, and cost visibility from a single dashboard.
CloudVista polls AWS APIs across every enabled region and account, building a complete, always-current asset inventory without agents or manual input.
Instance type, state, AZ, AMI, IAM instance profile, IMDSv2 setting, network interfaces and attached volumes
Size, type, IOPS/throughput, encryption and KMS key, attachments and source snapshot
CIDR blocks, default VPC flag, internet and NAT gateways, network ACLs
Captured with each VPC: every ingress/egress rule, so 0.0.0.0/0 exposure is easy to spot
CIDR, availability zone, free IPs, auto-assign public IP, default-for-AZ
ALB, NLB and Classic — scheme, DNS name, listeners, certificates, health checks
Engine and version, instance class, Multi-AZ, backup retention, encryption, deletion protection
Public access block, bucket policy status, encryption, versioning
Runtime, architecture, memory, timeout, VPC config, layers, last modified
Kubernetes version, public/private endpoint access, control-plane logging, secrets encryption
MFA status, access keys, password last used, group membership; role trust relationships
Attachment counts and default versions; group members and attached policies
No agents to deploy, no complex setup. CloudVista uses read-only IAM roles to safely discover your entire AWS estate.
In AWS Console, create an IAM role with the SecurityAudit managed policy. Trust CloudVista's AWS account with an external ID for secure cross-account access. CloudVista provides a one-click CloudFormation template to automate this.
Enter the IAM role ARN and external ID in CloudVista's Credentials page. CloudVista validates the connection and immediately begins discovering resources across all enabled AWS regions.
All resources appear in the unified dashboard within minutes. Filter by region, resource type, or tag. Enable CIS AWS compliance checks and cost visibility in one click.
Real-time health status per resource. EC2 instances with failed status checks, RDS databases with replication lag, ELB targets with unhealthy checks — all surfaced automatically.
Continuous checks against CIS AWS Foundations Benchmark v6.0 — 39 controls mapped, covering IAM, CloudTrail, Config, VPC security, and S3 configuration. Evidence export for SOC 2 audits.
Monthly spend per service and account, 12-month trend, 3-month forecast, and budget alerts. Stale resource identification shows exactly which EC2 and RDS instances are idle.
Interactive topology showing VPCs, subnets, security groups, EC2 instances, RDS clusters, and load balancers — with cross-region and cross-account relationship support.
Every configuration change is tracked: new resources, modified security groups, changed instance types, terminated instances. Full audit trail with timestamps for incident response.
Add multiple AWS accounts and AWS Organisations. View all accounts together or filter per account. Cross-account resource relationships visible in topology and inventory views.
| Capability | CloudVista | AWS Config | AWS Security Hub |
|---|---|---|---|
| Multi-cloud inventory in one view | ✓ | ✓ | Partial |
| Interactive topology maps | ✓ | ✗ | ✗ |
| Health monitoring | ✓ | ✗ | Partial |
| Azure / OCI / VMware support | ✓ | ✗ | ✗ |
| Cost visibility & budgets | ✓ | ✗ | ✗ |
| CIS compliance checks | ✓ | ✓ | ✓ |
| SOC 2 evidence export | ✓ | ✗ | ✗ |
Create an IAM role in your AWS account with the SecurityAudit managed policy. Add the role ARN and external ID to CloudVista via Settings › Credentials. CloudVista uses STS to assume the role and discovers resources across all enabled regions immediately.
Yes. Add a separate IAM role credential per account, or use an AWS Organisations master role to discover resources across all member accounts simultaneously from a single credential.
CloudVista runs CIS AWS Foundations Benchmark v6.0 checks across IAM, logging, monitoring, networking, and storage. Findings map automatically to SOC 2 Trust Service Criteria and ISO 27001:2022 Annex A.
Yes. AWS inventory, health monitoring and compliance checks are available in every CloudVista plan.
CloudVista syncs your AWS inventory daily by default, and the interval is configurable per credential (down to hourly). You can also trigger a manual sync for a single credential at any time.
CloudVista discovers every EC2, S3, RDS, Lambda and VPC resource across all your AWS accounts in minutes. No agents to install.
Contact UsAlso see: Multi-Cloud Inventory · Inventory & Discovery Guide · Plan · Cloud Compliance Guide · Multi-Cloud Visibility (blog)