code-dumps/aws/aws-inventory-from-awsconfig.py

#!/usr/bin/env python3
"""
TODO:
get_discovered_resource_counts has a limit of 100 resources. need to use nextToken
to get count of all resources
"""

import boto3
import pandas as pd
import csv

client = boto3.client('config')
resp = client.get_discovered_resource_counts()
# print('totalDiscoveredResources', resp['totalDiscoveredResources'], sep=": ")
results = []
for item in resp['resourceCounts']:
    reslist = client.list_discovered_resources(resourceType=item['resourceType'])
    nextToken = reslist.get('nextToken')
    while True:
        for res in reslist['resourceIdentifiers']:
            if item['resourceType'] in [
                "AWS::Config::ResourceCompliance",
                "AWS::Backup::RecoveryPoint",
                "AWS::RDS::DBSnapshot",
                "AWS::SSM::ManagedInstanceInventory",
                "AWS::SSM::AssociationCompliance",
                "AWS::IAM::Policy"
            ]:
                continue
            results += [[item['resourceType'], res['resourceId']]]
        if nextToken is None:
            break
        reslist = client.list_discovered_resources(resourceType=item['resourceType'], nextToken=nextToken)
        nextToken = reslist.get('nextToken')

df = pd.DataFrame(results, columns=['ResourceType', 'ResourceId'])
# print(df)
print(df.to_csv(index=False, quoting=csv.QUOTE_NONNUMERIC))