- name
- agent-bom-discover-aws
- description
- >-
- version
- 0.84.0
- license
- Apache-2.0
- compatibility
- >-
- metadata
- author
- msaad00
- homepage
- https://github.com/msaad00/agent-bom
- source
- https://github.com/msaad00/agent-bom
- pypi
- https://pypi.org/project/agent-bom/
- openclaw
- requires
- bins
- env
- []
- credentials
- aws-read-only
- credential_policy
- Use the operator's existing AWS SDK credential chain. Prefer AWS SSO, WebIdentity, or STS assumed-role credentials. Do not ask users to paste access keys. Do not print credential values.
- optional_env
- optional_bins
- []
- emoji
- \F50E
- homepage
- https://github.com/msaad00/agent-bom
- source
- https://github.com/msaad00/agent-bom
- license
- Apache-2.0
- os
- credential_handling
- Credentials stay in the operator environment. The skill invokes the AWS SDK locally and writes canonical inventory JSON with source_type=skill_invoked_pull. agent-bom receives sanitized inventory only when the operator explicitly scans or pushes that inventory.
- data_flow
- Operator AWS account -> read-only AWS SDK calls -> canonical inventory JSON -> agent-bom inventory scan. No agent-bom-hosted service is required. Values matching credential patterns are redacted before persistence/export.
- file_reads
- []
- file_writes
- network_endpoints
- purpose
- Caller identity and assumed-role context
- auth
- true
- purpose
- Bedrock agent inventory
- auth
- true
- purpose
- ECS workload inventory when enabled
- auth
- true
- purpose
- SageMaker inventory when enabled
- auth
- true
- purpose
- Lambda inventory when enabled
- auth
- true
- purpose
- EKS inventory when enabled
- auth
- true
- purpose
- Step Functions inventory when enabled
- auth
- true
- purpose
- EC2 inventory when enabled
- auth
- true
- telemetry
- false
- persistence
- false
- privilege_escalation
- false
- always
- false
- autonomous_invocation
- restricted
agent-bom-discover-aws
Use this skill to collect AWS AI and workload inventory from the operator's environment as canonical inventory. The skill is discover-only by default: write schema-valid JSON to an operator-selected path and stop. Run agent-bom only when the operator explicitly wants findings, graph, policy, or exports from that inventory.
Guardrails
- Use only operator-approved AWS profiles, roles, or short-lived STS sessions.
- Prefer read-only IAM actions listed by
agent-bom trustor
/v1/discovery/providers.
- Do not request or display raw
AWS_ACCESS_KEY_ID,
AWS_SECRET_ACCESS_KEY, AWS_SESSION_TOKEN, or bearer tokens.
- Do not modify AWS resources. This workflow is discovery-only.
- Write inventory only to a path the operator chose.
- Treat AI-generated prose as non-authoritative; only the schema-validated
inventory JSON is evidence.
Modes
| Mode | What happens | Data boundary |
|---|---|---|
discover-only | Emit canonical inventory JSON and stop | No agent-bom scan or API handoff |
scan-local | Run agent-bom agents --inventory ... on the generated file | Local handoff into the scanner |
export | Write JSON/SARIF or another operator-selected output | Local output only unless the operator routes it elsewhere |
Use discover-only unless the operator asks for scan results or an export.
Workflow
- Confirm the AWS account/region/profile and intended services.
- Generate inventory with the repository adapter and stop:
python examples/operator_pull/aws_inventory_adapter.py \
--region us-east-1 \
--profile readonly-audit \
--source aws-skill-invoked \
--discovery-method skill_invoked_pull \
--output aws-inventory.json- If the operator asks for findings, scan the generated inventory locally:
agent-bom agents --inventory aws-inventory.json- If the operator asks for an export, write it to an operator-selected path:
agent-bom agents --inventory aws-inventory.json --format json --output agent-bom-aws-findings.jsonOptional Service Flags
Start narrow, then expand deliberately:
python examples/operator_pull/aws_inventory_adapter.py \
--region us-east-1 \
--profile readonly-audit \
--source aws-skill-invoked \
--discovery-method skill_invoked_pull \
--include-ecs \
--include-lambda \
--include-eks \
--output aws-inventory.jsonUse --no-include-ecs or similar flags to disable default services when an operator wants a smaller scope.
Evidence Contract
The inventory emitted by this skill uses:
source: aws-skill-invokeddiscovery_provenance.source_type: skill_invoked_pulldiscovery_provenance.observed_via: skill_invoked_pull, aws_sdk- sanitized
metadata.permissions_used - sanitized
cloud_origin,cloud_principal, lifecycle fields, packages, and
MCP server launch metadata
If schema validation fails, stop and fix the inventory instead of scanning a best-effort or prose summary.
The skill does not push inventory to an API by default. Any push, scan, or managed control-plane handoff must be a separate operator-approved handoff command with the destination URL, auth method, and retained evidence classes made explicit.