Guidance
Formal system inventories are used to effectively assign ownership of assets and ensure that all in-scope production systems follow your security policies and standards.
If you use a CSP, you can use your CSP to generate a list of your in-scope production system assets.
For example, AWS allows users to make API calls to generate an asset list of their AWS resources (e.g., EC2 instances, VPCs, datastores).
Example Evidence
AWS (EC2 Instances and RDS)
