This is admittedly a bit niche, but might be interesting for anyone managing multiple AWS accounts. Botocove is an extension of Amazon's Boto3 library, using async.io and a decorator to allow functions to be easily run in every AWS account in an organization concurrently.
I found myself needing to interact with all of the 200+ accounts in our AWS organization and copying chunks of code around to do it. Botocove provides a decorator that can run a Python function against every AWS account you aim it at, or every account in your organization, concurrently.
I use it for most often for things like inspecting all accounts for security and audit checks, ad-hoc queries, or deployment of changes (such as updating IAM password policy, deploying a Cloudformation stack, and so on). By default it's opinonated to use standard AWS Organizations setup and roles, and generate a list of every account within an organization; but everything is configurable.
1 comment
[ 3.8 ms ] story [ 15.2 ms ] threadI found myself needing to interact with all of the 200+ accounts in our AWS organization and copying chunks of code around to do it. Botocove provides a decorator that can run a Python function against every AWS account you aim it at, or every account in your organization, concurrently.
https://pypi.org/project/botocove/
I use it for most often for things like inspecting all accounts for security and audit checks, ad-hoc queries, or deployment of changes (such as updating IAM password policy, deploying a Cloudformation stack, and so on). By default it's opinonated to use standard AWS Organizations setup and roles, and generate a list of every account within an organization; but everything is configurable.
Any feedback would be great, hope it's helpful!