What is asset-inventory?

Asset-inventory is a practice and skill to maintain IT asset inventory and a CMDB, tracking hardware, software, cloud resources, and data assets.

What assets are tracked?

Hardware, software, cloud resources, and data assets with fields like owner, location, status, and lifecycle for governance and compliance.

How do you keep the inventory up to date?

Use automated discovery, regular reconciliation, owner tagging, and lifecycle tracking to keep the CMDB accurate and current.

asset-inventory

Scanned

npx machina-cli add skill BagelHole/DevOps-Security-Agent-Skills/asset-inventory --openclaw

Files (1)

SKILL.md

1.3 KB

Asset Inventory

Maintain comprehensive IT asset tracking.

Asset Categories

asset_types:
  hardware:
    - Servers
    - Network devices
    - Endpoints
    
  software:
    - Applications
    - Operating systems
    - Licenses
    
  cloud:
    - Compute instances
    - Storage
    - Databases
    
  data:
    - Databases
    - File shares
    - Backups

AWS Inventory

# List all resources
aws resourcegroupstaggingapi get-resources

# EC2 instances
aws ec2 describe-instances --query 'Reservations[*].Instances[*].[InstanceId,InstanceType,State.Name]'

# AWS Config
aws configservice describe-configuration-recorders

Asset Database Schema

asset:
  id: unique identifier
  name: display name
  type: hardware/software/cloud
  owner: responsible team
  classification: public/internal/confidential
  location: physical/cloud location
  status: active/retired/decommissioned
  created: timestamp
  updated: timestamp
  tags: []

Best Practices

Automated discovery
Regular reconciliation
Owner assignment
Classification tagging
Lifecycle tracking

Source

git clone https://github.com/BagelHole/DevOps-Security-Agent-Skills/blob/main/compliance/governance/asset-inventory/SKILL.md

View on GitHub

Overview

Asset Inventory helps build a centralized configuration management database (CMDB) by tracking hardware, software, cloud resources, and data assets. It supports automated discovery, regular reconciliation, and ownership tagging to improve asset governance and compliance.

How This Skill Works

Assets are categorized into hardware, software, cloud, and data. The system uses automated discovery and reconciliation to populate the Asset Database Schema with fields like id, name, type, owner, location, status, created, updated, and tags. AWS CLI examples illustrate how to enumerate resources such as EC2 instances and other resources to keep the inventory up to date.

When to Use It

Starting or auditing an asset management program across on-prem, cloud, and SaaS environments.
Maintaining a single source of truth for hardware, software, and cloud assets.
Preparing for security audits or compliance reviews.
Onboarding new assets or offboarding retired assets.
Tracking asset lifecycle from provisioning to retirement.

Quick Start

Step 1: Define asset categories (hardware, software, cloud, data) in your CMDB schema and align with the asset_types in the guidance.
Step 2: Run automated discovery commands (for example AWS resourcegroupstaggingapi get-resources and aws ec2 describe-instances) to populate initial assets.
Step 3: Populate and maintain the Asset Database Schema fields (id, name, type, owner, location, status, created, updated, tags) and enable regular reconciliation.

Best Practices

Automated discovery of assets across hardware, software, cloud, and data.
Regular reconciliation to fix drift between reality and the CMDB.
Clear owner assignment for each asset to ensure accountability.
Consistent classification tagging to support access control and reporting.
Lifecycle tracking from acquisition to retirement to support decommissioning.

Example Use Cases

Inventory EC2 compute resources and other AWS assets using AWS CLI and resource tagging.
Catalog servers, network devices, and endpoints under hardware assets with owners and locations.
Track software applications, operating systems, and licenses for license compliance.
Tag assets with owner, location, and confidentiality level for governance.
Record databases, storage, and backups under data assets to support disaster recovery planning.

Frequently Asked Questions

Add this skill to your agents