Skip to content

runbooks inventory describe-delegated-admin-policyΒΆ

find | Management

⏳ PENDING Β· T:βœ”οΈ V:⏳ A:⏳ X:βž–

Describe the Organization resource-based policy (delegated admin trust policy).

Discovers AWS resources across Organization accounts via Config Aggregator and Resource Explorer

Single account

runbooks inventory describe-delegated-admin-policy --profile <account>

Org-wide (Landing Zone)

# [A2-Inventory] org-wide via Landing Zone hub profile
runbooks inventory describe-delegated-admin-policy --all-profile $AWS_MANAGEMENT_PROFILE

Show a Management discovers aws resources across organization accounts via config aggregator and resource explorer summary for last month across all accounts and flag any anomalies above the 20% threshold.

Parameter Type Default Description
--all-profile STRING - Multi-account profile (defaults to $AWS_MANAGEMENT_PROFILE).
--json BOOL False Print results as JSON to stdout.
--output-dir PATH - Write describe-delegated-admin-policy.json and .md to this directory.
--cross-validate BOOL False Re-derive the primary result from a 2nd independent source and report agreement vs the >=99.5%% accuracy gate.