On: How to find the AWS account ID of any S3 bucket

[emilburzo]

If you use AWS config setup for the organization (aggregator), you'll get a athena-sql-queryable inventory of all your resources from all organization accounts.

So finding out which account owns a resource can be as simple as, roughly: select accountId where arn = "x"

[baby_souffle → emilburzo]

You can also do this with steam pipe.

It might not scale well beyond tens of accounts though, depending in your query…

[nerdjon → emilburzo]

... how did I not know this existed.

That is exactly how we are setup, the amount of time I just spent going account by account looking for a specific resource.

Thank you! I have long wondered why it didn't exist, and apparently it did...

[mfenniak → nerdjon]

Be aware that AWS Config is not free. https://aws.amazon.com/config/pricing/

[nijave → mfenniak]

Yeah it's pretty nice feature wise but surprisingly expensive given all it really does is run API calls in a loop and export to S3