Aws/inventory
Discover running AWS resources for cost estimation and inventory management.
Authentication
Uses the default AWS credential chain. Requires appropriate IAM permissions for each service being inventoried.
Required IAM Permissions
ec2:DescribeInstancesrds:DescribeDBInstancesdynamodb:ListTables,dynamodb:DescribeTablelambda:ListFunctionss3:ListBuckets
Usage
# Create inventory model
swamp model create @webframp/aws/inventory aws-inventory \
--global region=us-east-1
# List running EC2 instances
swamp model method run aws-inventory list_ec2
# List RDS databases
swamp model method run aws-inventory list_rds
# Full inventory across all resource types
swamp model method run aws-inventory inventory_allSupported Resources
- EC2 - Instances with state, type, tags
- RDS - Database instances with engine, storage, Multi-AZ
- DynamoDB - Tables with billing mode, capacity, size
- Lambda - Functions with runtime, memory, timeout
- S3 - Buckets (global listing)
2026.08.21.1
Changed: Inventory failures now say which service and region were being
scanned instead of surfacing the raw SDK error. list_ec2, list_rds,
list_dynamodb, list_lambda, list_s3, list_ebs, and inventory_all
each wrap failures from their underlying AWS API calls with the resource
type and region (or "S3 buckets" for the global method), preserving the
original SDK error as the cause. The Resource Groups Tagging API fallback
used by inventory_scan/inventory_diff now also names the region in its
error message.
No schema changes.
| Argument | Type | Description |
|---|---|---|
| includeEnvironment? | boolean | Include environment variable values. WARNING: may contain secrets. Default stores keys only. |
| includeReservedConcurrency? | boolean | Fetch reserved concurrency per function (requires extra API call per function) |
| Argument | Type | Description |
|---|---|---|
| source | enum | Data source to use. 'auto' tries Resource Explorer → Config → Tag API |
Resources
2026.08.20.1
Changed: Bump @aws-sdk/* 3.1111.0 → 3.1114.0 (9 packages)
2026.08.15.1
Changed: Bump @aws-sdk/* 3.1104.0 → 3.1111.0 (9 packages)
2026.08.05.1
Changed: Bump @aws-sdk/* 3.1101.0 → 3.1104.0 (9 packages)
2026.08.02.1
Changed: Bump @aws-sdk/* 3.1100.0 → 3.1101.0 (9 packages)
2026.08.01.1
Fixed: Broken model-upgrade chain. The prior version bump (to 2026.07.31.1) updated version but left the upgrades array terminating one step short, which blocks swamp extension push ("model upgrade chain errors"). That version never actually published — the registry was still serving 2026.07.30.1. This release closes the chain with a no-op upgrade entry and republishes everything that had accumulated since 2026.07.30.1.
2026.07.31.1
Changed: Bump @aws-sdk/* 3.1096.0 → 3.1100.0 (9 packages)
2026.07.30.1
Added: Optional profile global argument for multi-account credential resolution.
When set, credentials resolve via fromIni (supports SSO token cache and shared-config
profiles). When omitted, the default credential chain applies as before. Fully backward
compatible — no changes required for existing instances.
2026.08.15.1
Changed: Bump @aws-sdk/* 3.1104.0 → 3.1111.0 (9 packages)
2026.08.05.1
Changed: Bump @aws-sdk/* 3.1101.0 → 3.1104.0 (9 packages)
2026.08.02.1
Changed: Bump @aws-sdk/* 3.1100.0 → 3.1101.0 (9 packages)
2026.08.01.1
Fixed: Broken model-upgrade chain. The prior version bump (to 2026.07.31.1) updated version but left the upgrades array terminating one step short, which blocks swamp extension push ("model upgrade chain errors"). That version never actually published — the registry was still serving 2026.07.30.1. This release closes the chain with a no-op upgrade entry and republishes everything that had accumulated since 2026.07.30.1.
2026.07.31.1
Changed: Bump @aws-sdk/* 3.1096.0 → 3.1100.0 (9 packages)
2026.07.30.1
Added: Optional profile global argument for multi-account credential resolution.
When set, credentials resolve via fromIni (supports SSO token cache and shared-config
profiles). When omitted, the default credential chain applies as before. Fully backward
compatible — no changes required for existing instances.
2026.08.05.1
Changed: Bump @aws-sdk/* 3.1101.0 → 3.1104.0 (9 packages)
2026.08.02.1
Changed: Bump @aws-sdk/* 3.1100.0 → 3.1101.0 (9 packages)
2026.08.01.1
Fixed: Broken model-upgrade chain. The prior version bump (to 2026.07.31.1) updated version but left the upgrades array terminating one step short, which blocks swamp extension push ("model upgrade chain errors"). That version never actually published — the registry was still serving 2026.07.30.1. This release closes the chain with a no-op upgrade entry and republishes everything that had accumulated since 2026.07.30.1.
2026.07.31.1
Changed: Bump @aws-sdk/* 3.1096.0 → 3.1100.0 (9 packages)
2026.07.30.1
Added: Optional profile global argument for multi-account credential resolution.
When set, credentials resolve via fromIni (supports SSO token cache and shared-config
profiles). When omitted, the default credential chain applies as before. Fully backward
compatible — no changes required for existing instances.
2026.08.02.1
Changed: Bump @aws-sdk/* 3.1100.0 → 3.1101.0 (9 packages)
2026.08.01.1
Fixed: Broken model-upgrade chain. The prior version bump (to 2026.07.31.1) updated version but left the upgrades array terminating one step short, which blocks swamp extension push ("model upgrade chain errors"). That version never actually published — the registry was still serving 2026.07.30.1. This release closes the chain with a no-op upgrade entry and republishes everything that had accumulated since 2026.07.30.1.
2026.07.31.1
Changed: Bump @aws-sdk/* 3.1096.0 → 3.1100.0 (9 packages)
2026.07.30.1
Added: Optional profile global argument for multi-account credential resolution.
When set, credentials resolve via fromIni (supports SSO token cache and shared-config
profiles). When omitted, the default credential chain applies as before. Fully backward
compatible — no changes required for existing instances.
2026.08.01.1
Fixed: Broken model-upgrade chain. The prior version bump (to 2026.07.31.1) updated version but left the upgrades array terminating one step short, which blocks swamp extension push ("model upgrade chain errors"). That version never actually published — the registry was still serving 2026.07.30.1. This release closes the chain with a no-op upgrade entry and republishes everything that had accumulated since 2026.07.30.1.
2026.07.31.1
Changed: Bump @aws-sdk/* 3.1096.0 → 3.1100.0 (9 packages)
2026.07.30.1
Added: Optional profile global argument for multi-account credential resolution.
When set, credentials resolve via fromIni (supports SSO token cache and shared-config
profiles). When omitted, the default credential chain applies as before. Fully backward
compatible — no changes required for existing instances.
2026.07.30.1
Added: Optional profile global argument for multi-account credential resolution.
When set, credentials resolve via fromIni (supports SSO token cache and shared-config
profiles). When omitted, the default credential chain applies as before. Fully backward
compatible — no changes required for existing instances.
2026.07.29.1
Fixed: Terminate upgrade chain at current version (extension was uninstallable due to broken upgrade chain).
2026.07.27.1
Changed: Bump @aws-sdk/* 3.1094.0 → 3.1096.0 (8 packages)
2026.07.24.1
Changed: Bump AWS SDK from 3.1091.0 to 3.1094.0 (patch-level update).
2026.07.24.1
Changed: Bump AWS SDK from 3.1091.0 to 3.1094.0 (patch-level update).
2026.07.21.1
Changed: Bumped AWS SDK dependencies to 3.1091.0 (from 3.1090.0).
Upgrade note: No behavioral changes. Routine dependency maintenance.
2026.07.18.2
Added: An upgrades array entry (no-op) to inventory.ts for proper
typeVersion tracking on existing instances. No schema or behavior changes.
2026.07.18.1
Changed: Bumped @aws-sdk/client-config-service,
@aws-sdk/client-dynamodb, @aws-sdk/client-ec2, @aws-sdk/client-lambda,
@aws-sdk/client-rds, @aws-sdk/client-resource-explorer-2,
@aws-sdk/client-resource-groups-tagging-api, and @aws-sdk/client-s3 from
3.1069.0 to 3.1090.0 for dependency freshness. No behavior change.
2026.07.18.1
Changed: Bumped @aws-sdk/client-config-service,
@aws-sdk/client-dynamodb, @aws-sdk/client-ec2, @aws-sdk/client-lambda,
@aws-sdk/client-rds, @aws-sdk/client-resource-explorer-2,
@aws-sdk/client-resource-groups-tagging-api, and @aws-sdk/client-s3 from
3.1069.0 to 3.1090.0 for dependency freshness. No behavior change.
Modified 1 models
updated platforms
- Has README or module doc2/2earned
- README has a code example1/1earned
- README is substantive1/1earned
- Most symbols documented1/1earned
- No slow types (deprecated)1/1earned
- Dependencies pass trust audit2/2earned
- Has description1/1earned
- Platform support declared (or universal)2/2earned
- License declared1/1earned
- Verified public repository2/2earned