You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
@@ -97,6 +97,8 @@ This will allow you to define the different AWS accounts you use in your environ
97
97
98
98
This step uses the CLI to make `describe` and `list` calls and records the json in the folder specified by the account name under `account-data`.
99
99
100
+
Locally, AWS CLI must be configured with proper access key and region information. Generate new access keys in AWS Console and input the generated keys to `aws configure` if you have not done so yet.
101
+
100
102
You must have AWS credentials configured that can be used by the CLI with read permissions for the different metadata to collect. This can be granted via the `SecurityAudit` policy, or can be reduced to an even more minimal set of permissions if desired for network visualization. The minimal policy needed is:
101
103
102
104
```
@@ -128,6 +130,8 @@ Collecting the data can be performed with a bash script or via the python code b
128
130
### Option 1: Bash script
129
131
Using the script is helpful if you need someone else to get this data for you without fiddling with setting up the python environment.
130
132
133
+
*NOTE* The script will collect a small subset of available data. It is preferable to use Option 2 below whenever possible.
0 commit comments