Skip to content

runbooks inventory s3-investigate

Auto-generated from runbooks inventory s3-investigate --help on 2026-05-21. Source of truth: runbooks PyPI package v1.3.22

Usage: runbooks inventory s3-investigate [OPTIONS]

  6-phase S3 bucket investigation: discovery, metadata, security, network,
  compliance, summary.

  Phase 1: s3:GetBucketLocation, GetBucketTagging -- region, tags Phase 2:
  Versioning, lifecycle rules, replication, CORS Phase 3: Public access block,
  ACL, bucket policy, SecurityHub findings Phase 4: Access logging, bucket
  policy IP restrictions Phase 5: Encryption, Object Lock, MFA Delete,
  versioning Phase 6: Risk score aggregation (PUBLIC buckets = CRITICAL by
  default)

  READONLY -- no mutations.

  Examples:     runbooks inventory s3-investigate --bucket-name my-data
  --profile ops-profile     runbooks inventory s3-investigate --bucket-name
  my-bucket --profile ops --output json

Options:
  -p, --profile TEXT         AWS profile name (default: from AWS_PROFILE env
                             var)
  --bucket-name BUCKET_NAME  S3 bucket name to investigate (e.g. my-company-
                             data)  [required]
  --region TEXT              AWS region for client creation (default: ap-
                             southeast-2)
  --output [table|json]      Output format (default: table)
  --help                     Show this message and exit.

Examples