runbooks 1.1.9__py3-none-any.whl → 1.1.10__py3-none-any.whl

runbooks/inventory/list_org_accounts_users.py

@@ -9,15 +9,23 @@ AWS Identity Center (formerly AWS SSO) user management. It's designed for enterp
 identity and access management teams who need complete visibility into user distribution,
 access patterns, and identity governance across large-scale multi-account deployments.
 
+**AWS API Mapping**: `iam.list_users()`, `identitystore.list_users()`, `sso-admin.list_instances()`
+
 Key Features:
 - Multi-account user discovery using assume role capabilities across AWS Organizations
 - Dual identity source support: IAM users and AWS Identity Center users
 - Comprehensive user metadata extraction with last access tracking
 - Cross-account user enumeration with organizational hierarchy mapping
 - Identity Center directory deduplication for efficient discovery
-- Enterprise reporting with CSV export and structured output
+- Multi-format export (JSON, CSV, Markdown, Table)
 - Profile-based authentication with support for federated access
 
+Architecture (v1.1.10):
+    - Group-level with --all-profiles pattern (Option B)
+    - Shared utilities integration (organizations_utils.py + output_formatters.py)
+    - Modern CLI + Legacy Python Main dual compatibility
+    - Rich CLI output with enterprise UX standards
+
 Enterprise Use Cases:
 - Identity governance and user access auditing across organizations
 - User lifecycle management and access certification processes
@@ -70,8 +78,8 @@ Dependencies:
 - boto3/botocore for AWS IAM and Identity Center API interactions
 - ArgumentsClass for standardized CLI argument parsing
 - Inventory_Modules for common utility functions and credential management
-- colorama for enhanced output formatting
-- tqdm for progress tracking during user discovery
+- Rich CLI for enhanced output formatting
+- Progress bars for discovery tracking
 
 Compliance and Audit Features:
 - Comprehensive user discovery for identity governance auditing
@@ -80,6 +88,29 @@ Compliance and Audit Features:
 - Identity lifecycle tracking for governance and compliance management
 - User attribute and metadata extraction for compliance reporting
 
+Example (Modern CLI):
+    Multi-account user discovery:
+    ```bash
+    runbooks inventory --all-profiles $MANAGEMENT_PROFILE list-org-users
+    ```
+
+    Brief listing with timing:
+    ```bash
+    runbooks inventory --profile mgmt list-org-users --short --timing
+    ```
+
+    Identity Center only:
+    ```bash
+    runbooks inventory --profile mgmt list-org-users --idc --export-format csv
+    ```
+
+Example (Legacy Python Main):
+    ```bash
+    python src/runbooks/inventory/list_org_accounts_users.py --profile my-org-profile
+    python src/runbooks/inventory/list_org_accounts_users.py --profile my-profile --idc
+    python src/runbooks/inventory/list_org_accounts_users.py --rootonly --iam
+    ```
+
 Future Enhancements:
 - Multi-threading for improved performance across large organizations
 - User access pattern analysis and behavioral analytics
@@ -87,28 +118,33 @@ Future Enhancements:
 - User optimization recommendations for identity governance
 
 Author: AWS CloudOps Team
-Version: 2024.05.09
+Version: 1.1.10 (v1.1.10 parameter patterns + shared utilities)
 """
 
 import logging
 import sys
 from os.path import split
 from time import time
+from typing import Dict, List, Optional
 
-from ArgumentsClass import CommonArguments
+from runbooks.inventory.ArgumentsClass import CommonArguments
 from botocore.exceptions import ClientError
-from runbooks.common.rich_utils import console
-from Inventory_Modules import (
+from runbooks.common.rich_utils import console, print_header, print_success, print_error, print_info
+from runbooks.inventory.inventory_modules import (
     display_results,
     find_iam_users2,
     find_idc_directory_id2,
     find_idc_users2,
     get_all_credentials,
 )
+from runbooks import __version__
+
+logger = logging.getLogger(__name__)
+
+# Terminal control constants
+ERASE_LINE = '\x1b[2K'
 # Migrated to Rich.Progress - see rich_utils.py for enterprise UX standards
-# from tqdm.auto import tqdm
 
-__version__ = "2024.05.09"
 begin_time = time()
 
 

runbooks/inventory/list_rds_db_instances.py

@@ -62,15 +62,15 @@ from queue import Queue
 from threading import Thread
 from time import time
 
-import Inventory_Modules
-from ArgumentsClass import CommonArguments
+from runbooks.inventory import inventory_modules as Inventory_Modules
+from runbooks.inventory.ArgumentsClass import CommonArguments
 from botocore.exceptions import ClientError
 from runbooks.common.rich_utils import console
-from Inventory_Modules import display_results, find_account_rds_instances2, get_all_credentials
+from runbooks.inventory.inventory_modules import display_results, find_account_rds_instances2, get_all_credentials
 from runbooks.common.rich_utils import create_progress_bar
+from runbooks import __version__
 
 
-__version__ = "2025.04.09"
 
 
 ##################

runbooks/inventory/list_route53_hosted_zones.py

@@ -55,12 +55,12 @@ from queue import Queue
 from threading import Thread
 from time import time
 
-from ArgumentsClass import CommonArguments
+from runbooks.inventory.ArgumentsClass import CommonArguments
 from botocore.exceptions import ClientError
 from runbooks.common.rich_utils import console
-from Inventory_Modules import display_results, find_private_hosted_zones2, get_all_credentials
+from runbooks.inventory.inventory_modules import display_results, find_private_hosted_zones2, get_all_credentials
+from runbooks import __version__
 
-__version__ = "2023.11.08"
 
 ########################
 

runbooks/inventory/list_servicecatalog_provisioned_products.py

@@ -93,15 +93,15 @@ from queue import Queue
 from threading import Thread
 from time import time
 
-import Inventory_Modules
-from account_class import aws_acct_access
-from ArgumentsClass import CommonArguments
+from runbooks.inventory import inventory_modules as Inventory_Modules
+from runbooks.inventory.account_class import aws_acct_access
+from runbooks.inventory.ArgumentsClass import CommonArguments
 from botocore.exceptions import ClientError, ProfileNotFound, UnknownCredentialError, UnknownRegionError
 from runbooks.common.rich_utils import console
-from Inventory_Modules import display_results
+from runbooks.inventory.inventory_modules import display_results
 from runbooks.common.rich_utils import create_progress_bar
+from runbooks import __version__
 
-__version__ = "2023.08.09"
 
 parser = CommonArguments()
 parser.singleprofile()

runbooks/inventory/list_sns_topics.py

@@ -66,13 +66,13 @@ from queue import Queue
 from threading import Thread
 from time import time
 
-import Inventory_Modules
-from ArgumentsClass import CommonArguments
+from runbooks.inventory import inventory_modules as Inventory_Modules
+from runbooks.inventory.ArgumentsClass import CommonArguments
 from botocore.exceptions import ClientError
 from runbooks.common.rich_utils import console
-from Inventory_Modules import display_results, get_all_credentials
+from runbooks.inventory.inventory_modules import display_results, get_all_credentials
+from runbooks import __version__
 
-__version__ = "2023.11.08"
 begin_time = time()
 
 

runbooks/inventory/list_ssm_parameters.py

@@ -62,14 +62,17 @@ from datetime import datetime, timedelta, timezone
 from os.path import split
 from time import time
 
-from ArgumentsClass import CommonArguments
+from runbooks.inventory.ArgumentsClass import CommonArguments
 from botocore.exceptions import ClientError
 from runbooks.common.rich_utils import console
-from Inventory_Modules import display_results, find_ssm_parameters2, get_all_credentials
+from runbooks.inventory.inventory_modules import display_results, find_ssm_parameters2, get_all_credentials
+from runbooks import __version__
 
-__version__ = "2024.05.07"
 begin_time = time()
 
+# ANSI escape sequence for terminal line clearing in progress display
+ERASE_LINE = "\x1b[2K"
+
 
 ##################
 # Functions

runbooks/inventory/list_vpc_subnets.py

@@ -73,13 +73,17 @@ from queue import Queue
 from threading import Thread
 from time import time
 
-import Inventory_Modules
-from ArgumentsClass import CommonArguments
+from runbooks.inventory import inventory_modules as Inventory_Modules
+from runbooks.inventory.ArgumentsClass import CommonArguments
 from botocore.exceptions import ClientError
 from runbooks.common.rich_utils import console
-from Inventory_Modules import display_results, get_all_credentials
+from runbooks.inventory.inventory_modules import display_results, get_all_credentials
+from runbooks import __version__
 
-__version__ = "2024.10.24"
+
+
+# Terminal control constants
+ERASE_LINE = '\x1b[2K'
 
 # TODO: Add Elastic IPs to this script as well.
 

runbooks/inventory/list_vpcs.py

@@ -8,6 +8,13 @@ filtering for default VPCs to identify potential security risks.
 
 **AWS API Mapping**: `boto3.client('ec2').describe_vpcs()`
 
+.. TODO v1.1.11: Performance optimization for large-scale VPC discovery
+   - Current: Timeouts at 540s for AWS Organizations with 100+ accounts
+   - Root Cause: Threading pool size (max 25) insufficient for large-scale discovery
+   - Improvement: Dynamic ThreadPoolExecutor sizing + concurrent pagination
+   - Target: Complete VPC discovery in <120s for 100+ accounts across 16 regions
+   - Reference: FinOps proven pattern (optimal_workers = min(accounts * regions, 50))
+
 Features:
     - Multi-account VPC discovery via AWS Organizations
     - Default VPC identification for security auditing
@@ -59,13 +66,17 @@ from queue import Queue
 from threading import Thread
 from time import time
 
-import Inventory_Modules
-from ArgumentsClass import CommonArguments
+from runbooks.inventory import inventory_modules as Inventory_Modules
+from runbooks.inventory.ArgumentsClass import CommonArguments
 from botocore.exceptions import ClientError
-from Inventory_Modules import display_results, get_all_credentials
+from runbooks.inventory.inventory_modules import display_results, get_all_credentials
 from runbooks.common.rich_utils import console
+from runbooks import __version__
+
+
 
-__version__ = "2024.01.26"
+# Terminal control constants
+ERASE_LINE = '\x1b[2K'
 
 
 ##########################

runbooks/inventory/mcp_vpc_validator.py

@@ -40,6 +40,9 @@ import boto3
 from botocore.exceptions import ClientError
 
 from runbooks.common.rich_utils import (
+
+
+# Terminal control constants
     console,
     print_header,
     print_success,
@@ -50,6 +53,9 @@ from runbooks.common.rich_utils import (
     STATUS_INDICATORS,
 )
 
+
+# Terminal control constants
+ERASE_LINE = '\x1b[2K'
 logger = logging.getLogger(__name__)
 
 

runbooks/inventory/organizations_discovery.py

@@ -40,6 +40,9 @@ from ..utils.logger import configure_logger
 from ..common.performance_optimization_engine import get_optimization_engine
 from ..common.rich_utils import console, Progress
 
+
+# Terminal control constants
+ERASE_LINE = '\x1b[2K'
 logger = configure_logger(__name__)
 
 # Global Organizations cache to prevent duplicate API calls across all instances
@@ -71,6 +74,7 @@ def _set_global_organizations_cache(data):
 # Universal AWS Environment Profile Support (Compatible with ANY AWS Setup)
 import os
 
+
 ENTERPRISE_PROFILES = {
     "BILLING_PROFILE": os.getenv("BILLING_PROFILE", "default"),  # Universal compatibility
     "MANAGEMENT_PROFILE": os.getenv("MANAGEMENT_PROFILE", "default"),  # Works with any profile
@@ -1414,7 +1418,13 @@ if __name__ == "__main__":
         description="Enhanced Organizations Discovery Engine with 4-Profile AWS SSO Architecture"
     )
     parser.add_argument(
+        "--profile",
+        help=f"AWS profile for single account operations (default: {ENTERPRISE_PROFILES['SINGLE_ACCOUNT_PROFILE']})",
+    )
+    parser.add_argument(
+        "--all-profile",
         "--management-profile",
+        dest="management_profile",
         help=f"AWS profile with Organizations access (default: {ENTERPRISE_PROFILES['MANAGEMENT_PROFILE']})",
     )
     parser.add_argument(
@@ -1441,19 +1451,23 @@ if __name__ == "__main__":
     args = parser.parse_args()
 
     async def main():
+        # Use --profile as fallback for single-account mode
+        single_account = args.single_account_profile or args.profile
+        management = args.management_profile or args.profile
+
         if args.legacy:
             console.print("[yellow]⚠️  Using legacy compatibility mode[/yellow]")
             results = await run_organizations_discovery(
-                management_profile=args.management_profile or ENTERPRISE_PROFILES["MANAGEMENT_PROFILE"],
+                management_profile=management or ENTERPRISE_PROFILES["MANAGEMENT_PROFILE"],
                 billing_profile=args.billing_profile or ENTERPRISE_PROFILES["BILLING_PROFILE"],
             )
         else:
             console.print("[cyan]🚀 Using enhanced 4-profile discovery engine[/cyan]")
             results = await run_enhanced_organizations_discovery(
-                management_profile=args.management_profile,
+                management_profile=management,
                 billing_profile=args.billing_profile,
                 operational_profile=args.operational_profile,
-                single_account_profile=args.single_account_profile,
+                single_account_profile=single_account,
                 performance_target_seconds=args.performance_target,
             )