AWS Cloud Automation Toolkit

A production-grade collection of Python and Bash automation scripts for AWS cloud operations. Covers cost reporting, security auditing, compliance checking, inventory management, resource cleanup, and operational reporting.

Script Catalog

Cost Management

Script	Description
scripts/cost/cost_report.py	Monthly cost breakdown by service, account, and tag
scripts/cost/rightsizing_report.py	EC2/RDS rightsizing recommendations from Compute Optimizer
scripts/cost/unused_resources.py	Identify idle EIPs, unattached EBS, old snapshots

Security Auditing

Script	Description
scripts/security/s3_public_check.py	Scan all S3 buckets for public access exposure
scripts/security/sg_audit.py	Find security groups with 0.0.0.0/0 inbound rules
scripts/security/encryption_audit.py	Check EBS, RDS, S3 encryption compliance

Inventory

Script	Description
scripts/inventory/ec2_inventory.py	Full EC2 inventory with tags, type, state, cost
scripts/inventory/resource_tagging_audit.py	Find untagged resources across all services

Compliance

Script	Description
scripts/compliance/cis_check.py	CIS AWS Foundations Benchmark automated checks
scripts/compliance/config_compliance.py	AWS Config rule compliance summary

Cleanup

Script	Description
scripts/cleanup/snapshot_cleanup.py	Delete snapshots older than N days
scripts/cleanup/ami_cleanup.py	Deregister old AMIs and delete orphaned snapshots

Quick Start

pip install boto3 rich tabulate

# Cost report
python3 scripts/cost/cost_report.py --months 3

# Security audit
python3 scripts/security/sg_audit.py --fix-dry-run

# Full CIS compliance check
python3 scripts/compliance/cis_check.py --output html

License

MIT License