Tag Governance Policy Cloud Service Account exclusion

[Steve Stivers1]

We are using Tag Governance and running audits using the out of the box Tag Count Policy and Tag Key Policy. We have more than 300 Cloud Service Accounts. We have now been asked to exclude a handful of the Cloud Service Accounts from auditing.

I can not find a good way to do this. Is it possible?

[Ram Devanathan1]

One way to do it is to add the accounts one by one leaving out the ones you don't need, but I understand it can be laborious.

If you are using this with AWS accounts, and setuo the credential-less approach for discovery, then adding the master account would add the sub-accounts, then you can choose the accounts you want to monitor versus not.

unfortunately there's no better approach at this time.