AWS account assessment

Real AWS inventory, assessment run and lifecycle debt

It delivers real AWS inventory (no catalog placeholders for AWS sync), an assessment run record, and lifecycle technical debt reconciled into the backlog.

⬡
Resource Discovery

EC2, EBS, RDS, Lambda
across all regions

▤
Assessment Run

RUNNING → SUCCEEDED
/ PARTIAL / FAILED

▣
Lifecycle Debt

Deprecated runtimes,
previous-gen instances,
unsupported versions

⚒
Backlog Integration

Automatically reconciled
into Technical Debt

Prerequisites

Create an active AWS CloudConnection with the required IAM permissions.

aws⌣
  • ec2:DescribeInstances
  • ec2:DescribeVolumes
  • rds:DescribeDBInstances
  • lambda:ListFunctions

Assess request body

json
{
  "syncCloudBilling": false
}
i

When syncCloudBilling is true, FinOps billing sync runs before technical debt reconciliation.

Technical debt source

▤
AWS_LIFECYCLE

Items keyed as aws-lifecycle:{connectionId}:....

Requires discovery data; run assess or sync on AWS before expecting backlog rows.

What assess does

  1. 1

    Creates AwsAccountAssessmentRun (RUNNING → SUCCEEDED / PARTIAL / FAILED).

  2. 2

    Discovery — multi-region EC2, EBS, RDS, Lambda → cloud_discovered_resources with metadata (runtime, engine version, instance type, etc.).

  3. 3

    Technical debt reconcile — includes new source AWS_LIFECYCLE (deprecated Lambda runtimes, previous-gen EC2 families, MySQL 5.7 RDS, unattached EBS).

  4. 4

    Persists run summary + reconciliation JSON on the assessment row.

▤ Limits

  • Up to 250 resources per type per region (pagination where supported).
  • Partial status when a region API fails (other regions still stored).