Automating AWS Resource Explorer: Multi-Account Searches

AWS Resource Explorer’s multi-account search

You may search and find your resources across AWS Regions with AWS Resource Explorer, including Amazon DynamoDB tables, Amazon Kinesis data streams, and Amazon Elastic Compute Cloud (EC2) instances. As of right now, you can also look through accounts within your company.

Setting up Resource Explorer for a whole business or a particular organizational unit (OU) only takes a few minutes. From there, you can utilize filtered searches and basic free-form text to locate pertinent AWS resources across accounts and Regions.

Multi-account search can be accessed via the Resource Explorer console, the AWS Command Line Interface (AWS CLI), AWS SDKs, or AWS Chatbot, as well as elsewhere in the AWS Management Console using the unified search bar. You may swiftly find a resource this way, go to the right account and service, and take action.

To assist isolate and manage business applications and data, numerous AWS accounts are employed when functioning in a well-architected way. Now you can act on your resources at scale and examine them across accounts more easily with Resource Explorer. When looking into rising operating costs, debugging a performance issue, or addressing a security warning, for instance, Resource Explorer can assist you in identifying the resources that are affected throughout your entire organization. Let us examine this in action.

Putting up a search with several accounts

There are four phases involved in setting up multi-account search for your organization:

• For AWS Account Management, enable trusted access.
• To search through accounts in an organization or OU, configure Resource Explorer in each account. With AWS Systems Manager Quick Setup, you can accomplish it with a few clicks. Alternatively, you can utilize other management tools you are familiar with, such as AWS CloudFormation.
• While it’s not required, Amazon advise setting up a delegated admin account for AWS Account Management. Amazon then advise using the delegated admin account to develop Resource Explorer multi-account views in order to consolidate all the necessary permissions for multi-account creation.
• In order to begin searching throughout the entire corporation, you may finally establish a multi-account view.

Important information

In the AWS Regions listed below, multi-account search is offered: US East (Ohio), US East (N. Virginia), US West (N. California), US West (Oregon), Asia Pacific (Jakarta), Asia Pacific (Mumbai), Asia Pacific (Osaka), Asia Pacific (Seoul), Asia Pacific (Singapore), Asia Pacific (Sydney), Asia Pacific (Tokyo), Canada (Central), Europe (Frankfurt), Europe (Ireland), Europe (London), Europe (Paris), Europe (Stockholm), Middle East (Bahrain), and South America (São Paulo).

Using AWS Resource Explorer is free of cost, and searches across several accounts are also included.

Amazon advise creating the view with the required visibility in terms of resources, Regions, and accounts inside the company using the delegated admin account, and then using AWS Resource Access Manager to distribute access to the view with other accounts in the organization. For instance, you may make a view just for one OU and then share it with an account within that OU.