Hacker News Reader

Comment by diceduckmonk | Hacker News Reader

What tool do people here use to search across AWS accounts?

Disclaimer: we are building a search engine to search for resources across “workspaces”. In AWS, this unit is the Account. In GCP, this unit is the Project.

View on HN

CloudHealth. 1500 AWS accounts, it does the job well enough

"1500 AWS accounts"

You just blew my mind. We have two accounts and it gets messy sometimes.

Messy? Isn't one of the points of having multiple accounts to reduce mess?

Yeah except having to navigate between the two can be tricky. Also that means we have multiple dynamos and multiple cognitos (in our case, test and prod), which is a pain.

I use Firefox for the prod console and Chrome for the test console. Obviously that system doesn't scale past 3-4 accounts. ;)

Firefox Container Tabs work well here for quite a while. But after 20 or so the list of containers will get very long.

I would say that once you get beyond those additional two-three accounts, you have tackled the mess and scaling to 1500 gets easier. And yes it's mind blowing.

I wouldn't roll it yourself without a serious security audit. A tool like that is just bad opsec, would help an adversary immensely.

Python, multiprocessing and boto3 with assume role.

1000+ accounts takes a few minutes.

That would be a handy tool.

Our competitor should let you do this but in CLI form https://steampipe.io/

They’re great, check them out.

We couldn’t build from source the last time we tried, but it is open source. We just made a decision today to open source our UI, so let us know if you’re interested

Reply on news.ycombinator.com