EXTENSIONS
Built by operatives — models, drivers, vaults, and reports, the parts that plug into Swamp.
Filter by what you need and pull what fits.
Triage Snapshot
Workflow-scope report that renders a one-look snapshot of the
Audit Timeline
Workflow-scope report that renders a change-audit timeline from CloudWatch
Aws Vpc Inventory
Fleet-wide VPC inventory across `profiles × regions`. A single read-only
Aws Default Sg Audit
Fleet audit for AWS Security Hub control EC2.2 ("VPC default security groups
Aws Cfn Orphan Sweep
Find and (optionally) clean up the standalone CloudFormation stacks a retired
Aws Iam Role Audit
Read-only fleet IAM lens for an integration's roles across many accounts. A
Aws Rds Inventory
Lists RDS DB clusters in the configured AWS region and emits two
Aws Rds Reservation Coverage
Workflow-scope report that normalizes running and reserved RDS capacity into
Aws Vpc Inventory Report
Workflow-scope report that renders an operator VPC inventory from the `vpc`
Aws Default Sg Audit Report
Workflow-scope report that renders an operator worklist for AWS Security Hub
Aws Rds Reservations
Lists every running RDS DB instance (Aurora cluster members AND standalone
Aws Stackset Audit
Read-only operational audit of a CloudFormation StackSet and all of its stack
Aws Context Guard
Generic AWS workflow-safety primitive. Fails closed before any AWS work
Aws Rds Inventory Report
Workflow-scope report that renders an operator RDS inventory from the
Aws S3 Bucket Audit
Workflow-scope report that audits S3 buckets against standard security
Aws Stackset Drift Detect
Trigger CloudFormation StackSet drift detection and record its outcome — the
Aws Stackset Lifecycle
Write-side retirement operations for a CloudFormation StackSet, run from the
Aws Integration Coverage
Coalesces a CloudFormation StackSet lens (@jentz/aws-stackset-audit) and an