Skip to content

runbooks inventory collect

find | Management

⏳ PENDING · T:✔️ V:⏳ A:⏳ X:⏳

🔍 Universal AWS resource inventory collection - works with ANY AWS environment.

Discovers AWS resources across Organization accounts via Config Aggregator and Resource Explorer

Single account

runbooks inventory collect --profile <account>

Org-wide (Landing Zone)

# [A1-Discovery] org-wide via Landing Zone hub profile
runbooks inventory collect --all-profile $AWS_OPERATIONS_PROFILE

Show a Management discovers aws resources across organization accounts via config aggregator and resource explorer summary for last month across all accounts and flag any anomalies above the 20% threshold.

☁️ Cloud Foundations: CF1 CF15 CF20 CF29 CF31 CF5

All Parameters (39)
Parameter Type Default Description
--profile/-p STRING - AWS profile name (default: from AWS_PROFILE env var)
--resources/-r STRING - Resource types (ec2, rds, lambda, s3, etc.)
--exclude-resources STRING - Resource types to exclude from collection (inverse of --resources)
--all-resources BOOL False Collect all resource types
--all-accounts/-A/-R/--all BOOL False Discover across all accounts in the landing zone.
--all-regions BOOL False Execute inventory collection across all AWS regions
--max-concurrent-profiles INT 10 Maximum concurrent profile operations for rate limit control
--retry-attempts INT 3 Number of retry attempts for failed API calls
--inventory-timeout INT 3600 Maximum inventory collection time in seconds (default: 3600/1 hour)
--include-costs BOOL False Include cost information
--include-cost-analysis BOOL False Alias for --include-costs
--include-security-analysis BOOL False Include security analysis in inventory
--include-cost-recommendations BOOL False Include cost optimization recommendations
--parallel BOOL True Enable parallel collection
--validate BOOL False Enable MCP validation for ≥99.5% accuracy
--validate-all BOOL False Enable comprehensive 3-way validation: runbooks + MCP + terraform
--combine BOOL False Combine results from the same AWS account
--export CHOICE(csv markdown pdf
--csv BOOL False [DEPRECATED] Use --export csv instead (removal: v2.0.0)
--json BOOL False [DEPRECATED] Use --export json instead (removal: v2.0.0)
--pdf BOOL False [DEPRECATED] Use --export pdf instead (removal: v2.0.0)
--markdown BOOL False [DEPRECATED] Use --export markdown instead (removal: v2.0.0)
--export-format CHOICE(json csv markdown
--output-dir STRING ./ops_evidence Output directory for exports
--report-name STRING - Base name for export files (without extension)
--dry-run BOOL True Safe analysis mode - no resource modifications (enterprise default)
--status CHOICE(running stopped) -
--root-only BOOL False Show only management accounts
--short/-s/-q BOOL False Brief output mode
--acct/-A STRING - Account ID lookup (can specify multiple)
--skip-profiles STRING - Profiles to exclude from collection
-v/--verbose BOOL False Verbose output with detailed information
--timing BOOL False Show performance metrics and execution timing
--save STRING - Output file prefix for saved results
--filename STRING - Custom report filename (overrides --report-name)
--config-aggregator BOOL False Use Config Aggregator for org-wide discovery (faster than per-account)
--aggregator-name STRING - Config Aggregator name (auto-detected if not specified)
--persona CHOICE(cfo cto cloudops
--cross-validate BOOL False Re-derive the primary result from a 2nd independent source and report agreement vs the >=99.5%% accuracy gate.