Skip to content

runbooks inventory reconcileΒΆ

Auto-generated from runbooks inventory reconcile --help on 2026-05-21. Source of truth: runbooks PyPI package v1.3.22

Usage: runbooks inventory reconcile [OPTIONS]

  Reconcile an SSOT (CMDB/FinOps/audit export) against live AWS inventory.

  Runs two RGTA discovery passes (tag-filter + ARN-regex) and optionally
  supplements CodePipeline webhooks (Resource Explorer 2 indexing gap).
  Returns a 12-key scorecard: ssot_count, aws_count, union_count, precision,
  recall, f1, jaccard, verdict, missing_from_aws, extra_in_aws,
  per_type_breakdown, evidence_path.

  Examples:     runbooks inventory reconcile --ssot cmdb.xlsx --filter "prod-
  app" --profile ops-ro     runbooks inventory reconcile --ssot audit.json
  --filter "my-svc" --profile sandbox \         --expected-recall 0.90
  --output-dir tmp/reconciliation/

Options:
  --ssot PATH                     Path to SSOT file (xlsx, csv, or json β€” CMDB
                                  export, FinOps snapshot, audit list).
                                  [required]
  --profile TEXT                  AWS profile name.  Reads $AWS_PROFILE when
                                  not supplied.  [required]
  --filter TEXT                   Regex applied to ARNs (Pass B) and SSOT
                                  identifiers.  E.g. 'prod-app|my-service'.
                                  [required]
  --region TEXT                   AWS region.  Reads $AWS_DEFAULT_REGION when
                                  not supplied.
  --ssot-format [auto|xlsx|csv|json]
                                  Override SSOT file format detection
                                  (default: auto from extension).
  --expected-recall FLOAT         Recall threshold for PASS/FAIL gate
                                  (default: 0.995 = 99.5%).
  --tag-filter-values TEXT        Comma-separated application-name tag values
                                  for Pass A (optional).
  --expected-account TEXT         Expected AWS account ID; triggers warning
                                  when other accounts appear.
  --output-dir PATH               Directory to write the scorecard JSON
                                  (optional).
  --help                          Show this message and exit.

ExamplesΒΆ