runbooks inventory reconcileΒΆ
Auto-generated from
runbooks inventory reconcile --helpon 2026-05-21. Source of truth: runbooks PyPI package v1.3.22
Usage: runbooks inventory reconcile [OPTIONS]
Reconcile an SSOT (CMDB/FinOps/audit export) against live AWS inventory.
Runs two RGTA discovery passes (tag-filter + ARN-regex) and optionally
supplements CodePipeline webhooks (Resource Explorer 2 indexing gap).
Returns a 12-key scorecard: ssot_count, aws_count, union_count, precision,
recall, f1, jaccard, verdict, missing_from_aws, extra_in_aws,
per_type_breakdown, evidence_path.
Examples: runbooks inventory reconcile --ssot cmdb.xlsx --filter "prod-
app" --profile ops-ro runbooks inventory reconcile --ssot audit.json
--filter "my-svc" --profile sandbox \ --expected-recall 0.90
--output-dir tmp/reconciliation/
Options:
--ssot PATH Path to SSOT file (xlsx, csv, or json β CMDB
export, FinOps snapshot, audit list).
[required]
--profile TEXT AWS profile name. Reads $AWS_PROFILE when
not supplied. [required]
--filter TEXT Regex applied to ARNs (Pass B) and SSOT
identifiers. E.g. 'prod-app|my-service'.
[required]
--region TEXT AWS region. Reads $AWS_DEFAULT_REGION when
not supplied.
--ssot-format [auto|xlsx|csv|json]
Override SSOT file format detection
(default: auto from extension).
--expected-recall FLOAT Recall threshold for PASS/FAIL gate
(default: 0.995 = 99.5%).
--tag-filter-values TEXT Comma-separated application-name tag values
for Pass A (optional).
--expected-account TEXT Expected AWS account ID; triggers warning
when other accounts appear.
--output-dir PATH Directory to write the scorecard JSON
(optional).
--help Show this message and exit.