Resource Explorer Overview

The Resource Explorer is your comprehensive inventory of every AWS resource Guardian Pro has discovered across your connected accounts and regions. It provides a single, searchable view of your entire AWS estate -- from EC2 instances and RDS databases to Lambda functions, S3 buckets, and dozens of other service types.

Unlike the AWS Management Console, which requires you to navigate between services and regions to see your resources, the Resource Explorer consolidates everything into one place with powerful filtering, search, and detail views.

What the Resource Explorer Provides

Capability	Description
Resource Discovery	Automatic multi-region discovery of 39+ AWS service types across 15 categories
Browsing Resources	Search, filter, and sort your resources by type, region, service, tags, and more
Resource Details	Deep inspection of any resource's configuration, tags, relationships, and associated findings
Infrastructure Diagram	Visual representation of your resources and their relationships

Why a Unified Resource View Matters

Managing AWS infrastructure across multiple accounts and regions creates visibility challenges:

• Scattered resources -- Without a unified view, it is easy to lose track of resources deployed across many accounts and regions
• Shadow infrastructure -- Resources created outside of standard processes can go unnoticed for months
• Cost leakage -- Orphaned or forgotten resources continue to generate costs
• Security blind spots -- Resources you do not know about cannot be scanned or governed

The Resource Explorer addresses all of these by providing a complete, automatically updated inventory that serves as the foundation for Guardian Pro's scanning, cost analysis, and architecture advisory features.

info

The Resource Explorer is more than a browsing tool. The resource inventory it presents is the same data that feeds Guardian Pro's security scanner, cost intelligence engine, compliance mapper, and architecture advisor. Every module works from the same unified resource registry.

Supported AWS Services

Guardian Pro discovers and tracks resources across 39+ AWS service types, organised into 15 categories:

Category	Services
Compute	EC2, Lambda, ECS, App Runner, Batch
Containers	ECS clusters, services, and task definitions; EKS clusters
Database	RDS, Aurora, DynamoDB, ElastiCache, OpenSearch, Redshift, DocumentDB, Neptune
Storage	S3, EBS, EFS, Glacier
Networking	VPC, subnets, security groups, NAT gateways, elastic IPs, ENIs, VPN, Transit Gateway
Load Balancing	ALB, NLB, Classic LB, target groups
DNS & CDN	Route 53, CloudFront
Security	IAM (users, roles, policies), KMS, Secrets Manager, ACM, WAF
Monitoring	CloudWatch, CloudTrail, Config
Messaging	SNS, SQS, EventBridge
Serverless	Lambda, Step Functions, API Gateway
DevOps	CodePipeline, CodeBuild, ECR
Analytics	Kinesis, Glue, Athena
AI/ML	SageMaker, Bedrock
Account	AWS account-level settings and configurations

tip

The resource count and service coverage continue to grow. Guardian Pro regularly adds support for new AWS services and resource types. Check the release notes for the latest additions.

Multi-Account and Multi-Region

The Resource Explorer works across your entire connected AWS environment:

• All connected accounts -- Resources from every AWS account you have onboarded are included in a single view
• All enabled regions -- Guardian Pro scans all AWS regions where you have workload resources deployed
• Account filtering -- Use the account selector in the navigation bar to focus on a specific account's resources
• Region filtering -- Filter the resource list by region to see resources in a specific geographic location

For global services (such as IAM, S3, CloudFront, and Route 53), resources are collected once and displayed regardless of region filter, since they are not tied to a specific region.

How Resources Are Collected

Guardian Pro uses cross-account IAM roles (deployed during onboarding) to discover resources in your AWS accounts. The discovery process:

1. Assumes the read-only role in each connected account
2. Queries AWS APIs across all enabled regions
3. Collects resource configurations, tags, and relationships
4. Stores everything in Guardian Pro's resource registry
5. Builds a dependency graph from the discovered relationships

This process runs automatically on a scheduled basis and can also be triggered on demand from the Dashboard.

For more details on the discovery process, see Resource Discovery.

Integration with Other Modules

The Resource Explorer serves as the foundation for the entire Guardian Pro platform:

• Security Scanner -- Scans evaluate the resources in the registry, not your AWS accounts directly. This ensures consistent, fast scanning.
• Architecture Advisor -- The Architecture Map and Failure Simulator are built from the same resource and relationship data.
• Cost Intelligence -- Cost data is enriched with resource metadata from the registry to provide resource-level cost attribution.
• Compliance -- Compliance controls are evaluated against the discovered resource configurations.
• AI Assistant -- The AI assistant can search and query your resource inventory to answer questions about your infrastructure.

Quick Start

1. Run a scan -- If you have not already, trigger a resource discovery scan from the Dashboard.
2. Browse your resources -- Navigate to the Resource Explorer from the main navigation bar.
3. Filter and search -- Use the filters to find specific resources or narrow down to a particular service type or region.
4. Inspect details -- Click on any resource to view its full configuration, tags, relationships, and associated findings.

Next Steps

• Resource Discovery -- Learn how Guardian Pro discovers resources across your accounts and regions.
• Browsing Resources -- Master the search, filter, and sort capabilities.
• Resource Details -- Understand the detailed information available for each resource.
• Infrastructure Diagram -- Visualise your resources and their relationships.