Skip to content

runbooks inventory s3-investigateΒΆ

find | Management

βœ… CERTIFIED Β· T:βœ”οΈ V:βž– A:βž– X:βž–

6-phase S3 bucket investigation: discovery, metadata, security, network, compliance, summary.

Discovers AWS resources across Organization accounts via Config Aggregator and Resource Explorer

Single account

runbooks inventory s3-investigate --profile <account>

Org-wide (Landing Zone)

# [A1-Discovery] org-wide via Landing Zone hub profile
runbooks inventory s3-investigate --all-profile $AWS_OPERATIONS_PROFILE

Show a Management discovers aws resources across organization accounts via config aggregator and resource explorer summary for last month across all accounts and flag any anomalies above the 20% threshold.

Parameter Type Default Description
--profile/-p STRING - AWS profile name (default: from AWS_PROFILE env var)
--bucket-name STRING - S3 bucket name to investigate (e.g.
--region STRING ap-southeast-2 AWS region for client creation (default: ap-southeast-2)
--output CHOICE(table json) table