Skip to content

runbooks cert inventoryΒΆ

Auto-generated from runbooks cert inventory --help on 2026-05-21. Source of truth: runbooks PyPI package v1.3.22

Usage: runbooks cert inventory [OPTIONS]

  Discover certificates across AWS accounts and Azure subscriptions.

  Scans ACM (all regions), IAM server certificates (global), and optionally
  Azure Key Vault. Results are displayed in a colour-coded table and can be
  exported to CSV / JSON.

  Examples:     runbooks cert inventory     runbooks cert inventory --all-
  accounts --management-profile mgmt-profile     runbooks cert inventory
  --azure --subscription 14ec7245-xxxx     runbooks cert inventory --export-
  csv certs.csv --export-json certs.json     runbooks cert inventory
  --renewal-status

Options:
  --profile TEXT       AWS profile name
  --region TEXT        AWS region
  --all-accounts       Scan all Landing Zone accounts via Organizations
  --azure              Include Azure Key Vault certificates
  --subscription TEXT  Azure subscription ID (required with --azure)
  --export-csv PATH    Export to CSV file
  --export-json PATH   Export to JSON file
  --output-dir PATH    Output directory for reports
  --count-only         Print certificate count only (no detail table)
  --status TEXT        Filter by ACM certificate status (e.g., ISSUED,
                       EXPIRED, PENDING_VALIDATION)
  --in-use-only        Show only in-use certificates (skip unused)
  --renewal-status     Include ACM renewal status column (SUCCESS,
                       PENDING_AUTO_RENEWAL, FAILED). Already collected β€” no
                       extra API calls.
  --help               Show this message and exit.

ExamplesΒΆ