Tempus: Multi-Cloud Asset Inventory Across 80+ AWS Accounts and 1000+ GCP Projects

Tempus runs CloudQuery in production to handle a complex multi-cloud environment spanning over 80 AWS accounts and 1,000+ GCP projects.

Their setup deploys everything via Terraform infrastructure as code to Google Cloud Platform. The infrastructure runs within GCP, using GKE and Docker for compute, Cloud SQL for the PostgreSQL database, and Grafana for visualization and analysis.

Resources are fetched nightly through a cron job. Policy benchmark checks run periodically, with results stored in Google Cloud Storage, then synced to BigQuery and Google Sheets for stakeholder reporting.

The primary use cases are assurance monitoring, compliance verification, and cloud security posture management. The Security Operations Center, Cloud Security, and Data Governance teams are the primary consumers of the data.

As Michael from Tempus described their approach: “We use CloudQuery in a production environment, deploying everything via Terraform infrastructure as code to Google Cloud Platform.”