aws-radar 1.1.2

AWS resource inventory scanner and draw.io architecture diagram generator

aws-radar

AWS resource inventory scanner + draw.io architecture diagram generator.

Scans your AWS account(s) via SSO or IAM credentials and produces:

• A CSV inventory of every running resource
• A .drawio file you can open in diagrams.net — with AWS icons, region containers, and service connections auto-wired

Supported services

EC2 · RDS / Aurora · Lambda · ECS · EKS · ElastiCache · DynamoDB · S3 · OpenSearch · SQS · SNS · ALB / NLB

Installation

pip install aws-radar

Troubleshooting

ModuleNotFoundError: No module named 'boto3' (AWS CloudShell)

CloudShell ships its own system boto3, so a pip install --user aws-radar can skip installing boto3 into your user site — leaving it unimportable at runtime. Install the dependencies into the same user site:

python3 -m pip install --user boto3 rich

Or, cleanest, use an isolated virtual environment:

python3 -m venv ~/aws-radar-venv
~/aws-radar-venv/bin/pip install aws-radar
~/aws-radar-venv/bin/aws-radar run

Quick start

# One-shot: inventory + diagram
aws-radar run --profile my-sso-profile --all-regions --output architecture.drawio

# Or step by step:
aws-radar inventory --profile my-sso-profile --all-regions --export inventory.csv
aws-radar diagram   --input inventory.csv --output architecture.drawio

Then open architecture.drawio at app.diagrams.net.

Command-line options

The inventory command accepts the following options:

Option	Description
--region REGION	AWS region (default: boto3 default)
--profile PROFILE	AWS SSO/named profile
--all-regions	Scan all enabled regions
--ai	Also scan AI/ML services (Bedrock, SageMaker, Rekognition, Lex, Kendra, …)
--export FILE.csv	Export results to CSV

AWS SSO usage

# Configure SSO once
aws configure sso

# Login before each session
aws sso login --profile my-profile

# Run
aws-radar run --profile my-profile --all-regions

Multi-account

for profile in prod staging dev; do
  aws sso login --profile $profile
  aws-radar run --profile $profile --csv ${profile}.csv --output ${profile}.drawio
done

Python API

import boto3
from aws_radar.inventory import run_inventory
from aws_radar.drawio import build_drawio

session = boto3.Session(profile_name="my-profile")
rows = run_inventory(["us-east-1", "eu-west-1"], session, account_id="123456789012")

mxfile = build_drawio(rows, account_id="123456789012")

Required IAM permissions

Attach the AWS-managed ReadOnlyAccess policy, or grant these specific actions:

ec2:Describe* · rds:Describe* · lambda:ListFunctions
ecs:List*/Describe* · eks:List*/Describe*
elasticache:Describe* · dynamodb:ListTables/DescribeTable
s3:ListAllMyBuckets · opensearch:List*/Describe*
sqs:ListQueues · sns:ListTopics
elasticloadbalancing:DescribeLoadBalancers
sts:GetCallerIdentity

License

MIT