3 ms·

If you use AWS config setup for the organization (aggregator), you'll get a athena-sql-queryable inventory of all your resources from all organization accounts.

If you use AWS config setup for the organization (aggregator), you'll get a athena-sql-queryable inventory of all your resources from all organization accounts. So finding out which account owns a resource can be as simple as, roughly: select accountId where arn = "x"

nerdjon 3y ago
... how did I not know this existed. That is exactly how we are setup, the amount of time I just spent going account by account looking for a specific resource. Thank you! I have long wondered why it didn't exist, and apparently it did...
- mfenniak 3y ago
  Be aware that AWS Config is not free. https://aws.amazon.com/config/pricing/ https://aws.amazon.com/config/pricing/
  - nijave 3y ago
    Yeah it's pretty nice feature wise but surprisingly expensive given all it really does is run API calls in a loop and export to S3
baby_souffle 3y ago
You can also do this with steam pipe. It might not scale well beyond tens of accounts though, depending in your query…