c7n-org

import os # Create a dummy accounts.yml for demonstration accounts_yaml_content = ''' accounts: - account_id: '123456789012' name: dev-account regions: - us-east-1 - us-west-2 role: arn:aws:iam::123456789012:role/CloudCustodian - account_id: '987654321098' name: prod-account regions: - us-east-1 role: arn:aws:iam::987654321098:role/CloudCustodian ''' # Create a simple Custodian policy to find untagged S3 buckets policy_yaml_content = ''' policies: - name: untagged-s3-buckets resource: aws.s3 filters: - "tag:Project": absent actions: - type: notify subject: Untagged S3 Bucket Found to: - email@example.com # Replace with a valid email for actual use transport: type: sqs queue: https://sqs.us-east-1.amazonaws.com/123456789012/my-notification-queue ''' # Write content to files with open('accounts.yml', 'w') as f: f.write(accounts_yaml_content) with open('policy.yml', 'w') as f: f.write(policy_yaml_content) # Simulate running c7n-org via subprocess for demonstration # In a real scenario, you would run this command in your shell print("Simulating c7n-org execution...") print("Command: c7n-org run -c accounts.yml -s output -p policy.yml") print("\n--- Output Directory Structure ---") print("output/") print("├── dev-account/") print("│ ├── us-east-1/") print("│ │ └── untagged-s3-buckets/") print("│ └── us-west-2/") print("│ └── untagged-s3-buckets/") print("└── prod-account/") print(" └── us-east-1/") print(" └── untagged-s3-buckets/") print("----------------------------------") # Cleanup dummy files os.remove('accounts.yml') os.remove('policy.yml')