runbooks inventory resource-explorer¶

find | Management

✅ CERTIFIED · T:✔️ V:✔️ A:✔️ X:✔️

Discover AWS resources across multi-account organization.

Business Value Runbooks CLI Prompts

Discovers AWS resources across Organization accounts via Config Aggregator and Resource Explorer

Single account

runbooks inventory resource-explorer --profile <account>

Org-wide (Landing Zone)

# [A1-Discovery] org-wide via Landing Zone hub profile
runbooks inventory resource-explorer --all-profile $AWS_OPERATIONS_PROFILE

Show a Management discovers aws resources across organization accounts via config aggregator and resource explorer summary for last month across all accounts and flag any anomalies above the 20% threshold.

☁️ Cloud Foundations: CF29

All Parameters (34)

Parameter	Type	Default	Description
`--tags`	STRING	-	Filter by tags (key=value format)
`--accounts`	STRING	-	Filter by specific account IDs
`--all`	BOOL	`False`	Multi-account discovery (CENTRALISED_OPS_PROFILE as aggregator).
`--profiles`	STRING	-	Specific AWS profiles (comma-separated, e.g., "billing,security,audit")
`--regions`	STRING	-	Specific AWS regions (space-separated)
`--all-regions`	BOOL	`False`	Process all enabled AWS regions
`-f/--format/--output-format`	CHOICE(json	csv	table
`--output-dir`	PATH	`./ops_evidence`	Directory for generated files and evidence packages
`--all-outputs`	BOOL	`False`	Generate all output formats (JSON, CSV, PDF, Markdown) - use with --output-dir
`--csv`	BOOL	`False`	Export to CSV format (convenience flag, activates --all-outputs)
`--json`	BOOL	`False`	Export to JSON format (convenience flag, activates --all-outputs)
`--markdown`	BOOL	`False`	Export to Markdown format (convenience flag, activates --all-outputs)
`--export`	BOOL	`False`	[DEPRECATED] Use --all-outputs instead
`--profile`	STRING	-	AWS profile for single-account operations.
`--region`	STRING	`ap-southeast-2`	AWS region override (default: ap-southeast-2)
`--dry-run`	BOOL	`True`	Safe analysis mode - no resource modifications (enterprise default)
`--resource-type`	STRING	-	Resource type to discover.
`--list-types`	BOOL	`False`	Display all 88 supported AWS resource types organized by category
`--query-filter`	STRING	-	Resource Explorer query string for advanced filtering (e.g., 'tag:Environment=prod')
`--max-results`	INT	-	Maximum number of results to return (default: unlimited with pagination)
`--aggregator-region`	STRING	-	Override Resource Explorer aggregator region (default: auto-detect)
`--skip-pagination`	BOOL	`False`	Disable pagination for fast preview (returns first page only)
`--billing-profile`	STRING	-	AWS profile for Cost Explorer enrichment (optional)
`--enrich-costs`	BOOL	`False`	Enrich results with Cost Explorer data
`--console-format`	BOOL	`False`	Display Rich table to console AND export CSV (7 columns: Identifier, Service, Resource type, Region, AWS Account,...
`--output`	PATH	-	Output JSON file path
`--verbose/-v`	BOOL	`False`	Show detailed execution logs
`--format-output`	CHOICE(compact	table	json)
`--all-profile`	STRING	-	AWS profile for the centralised-ops account hosting the Config aggregator ($AWS_OPERATIONS_PROFILE).
`--aggregator-name`	STRING	-	Config Aggregator name.
`--top`	INT	-	Client-side truncation: show top N rows AFTER the full un-capped fetch.
`--account-id`	STRING	-	Filter to a single AWS account ID (server-side Config SQL filter).
`--service`	STRING	-	Filter to a service prefix (e.g.
`--cross-validate`	BOOL	`False`	Re-derive the primary result from a 2nd independent source and report agreement vs the >=99.5%% accuracy gate.