runbooks inventory enrich-activity

find | Management

⏳ PENDING · T:✔️ V:⏳ A:⏳ X:➖

Enrich with CloudTrail/CloudWatch/SSM/Compute Optimizer activity data.

Business Value Runbooks CLI Prompts

Discovers AWS resources across Organization accounts via Config Aggregator and Resource Explorer

Single account

runbooks inventory enrich-activity --profile <account>

Org-wide (Landing Zone)

# [A1-Discovery] org-wide via Landing Zone hub profile
runbooks inventory enrich-activity --all-profile $AWS_OPERATIONS_PROFILE

Show a Management discovers aws resources across organization accounts via config aggregator and resource explorer summary for last month across all accounts and flag any anomalies above the 20% threshold.

All Parameters (29)

Parameter	Type	Default	Description
--tags	STRING	-	Filter by tags (key=value format)
--accounts	STRING	-	Filter by specific account IDs
--all	BOOL	False	Multi-account discovery (CENTRALISED_OPS_PROFILE as aggregator).
--profiles	STRING	-	Specific AWS profiles (comma-separated, e.g., "billing,security,audit")
--regions	STRING	-	Specific AWS regions (space-separated)
--all-regions	BOOL	False	Process all enabled AWS regions
-f/--format/--output-format	CHOICE(json	csv	table
--output-dir	PATH	./ops_evidence	Directory for generated files and evidence packages
--all-outputs	BOOL	False	Generate all output formats (JSON, CSV, PDF, Markdown) - use with --output-dir
--csv	BOOL	False	Export to CSV format (convenience flag, activates --all-outputs)
--json	BOOL	False	Export to JSON format (convenience flag, activates --all-outputs)
--markdown	BOOL	False	Export to Markdown format (convenience flag, activates --all-outputs)
--export	BOOL	False	[DEPRECATED] Use --all-outputs instead
--profile	STRING	-	AWS profile for single-account operations.
--region	STRING	ap-southeast-2	AWS region override (default: ap-southeast-2)
--dry-run	BOOL	True	Safe analysis mode - no resource modifications (enterprise default)
--input	PATH	-	Input CSV file with resource discovery data
--resource-type	CHOICE(ec2	workspaces)	-
--activity-lookback-days	INT	90	CloudTrail activity window in days (default: 90)
--cloudwatch-period	INT	14	CloudWatch metrics period in days (default: 14)
--skip-cloudtrail	BOOL	False	Skip CloudTrail enrichment (E3 signal) for faster execution
--skip-cloudwatch	BOOL	False	Skip CloudWatch metrics enrichment (E2 signal) for faster execution
--skip-ssm	BOOL	False	Skip SSM enrichment (E4 signal, EC2 only) for faster execution
--skip-compute-optimizer	BOOL	False	Skip Compute Optimizer enrichment (E1 signal, EC2 only) for faster execution
--ssm-timeout	INT	30	SSM API timeout in seconds (default: 30)
--output	PATH	-	Output CSV file path
--console-format	BOOL	False	Display Rich table to console AND export CSV (dual output)
--verbose/-v	BOOL	False	Show detailed execution logs
--format-output	CHOICE(compact	table	json)