AWS Organizations support? about aws-recon HOT 5 CLOSED

Glad to hear that. Sure, sign me up for testing! I have a small personal org to try things in.

In the meantime, I may experiment with a script that generates the profiles for the member accounts and drives aws_recon to run on each one.

I believe the API thottling limits are per account, so it may be possible to run a few aws_recon processes in parallel in this way.

If I get any useful results I'll share them here.

from aws-recon.

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

from aws-recon.

Hi @iainelder, I think it's a great idea. I can't promise a timeline, but it would make for a great feature enhancement. Would you be available to help test it?

from aws-recon.

I wrote some experimental code that can drive aws_recon as I described.

Once you have a CLI config file with one profile for each account in your organization, it's quite straightforward to execute aws_recon once with each profile. You can use something like GNU Parallel to make it go faster.

Example here in bash:

https://github.com/iainelder/parallel_recon/blob/c1a72da8daf0867577232ac11e6db7e8b6023ac0/parallel_recon

Writing such a profile file is more complicated than I had first thought. You need to treat the management account separately and copy the existing config for it.

Example here in Python:

https://github.com/iainelder/parallel_recon/blob/c1a72da8daf0867577232ac11e6db7e8b6023ac0/main.py

The code for reading and writing the existing profiles depends on some internal methods of Python's awscli and botocore packages to do that. I'm less familiar with the Ruby SDK for AWS, but the same would be possible one way or another.

from aws-recon.

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

from aws-recon.