Case Study ยท Private Source

AWS Network Inventory

A containerized Python platform for searchable infrastructure state, historical change analysis, reporting, and read-only operational visibility across multiple AWS accounts.

Problem

Cloud state changes continuously, while troubleshooting and architecture reviews often depend on scattered console views or one-time exports. The platform creates a searchable, historical view without turning the inventory service into a control plane.

Architecture

The application collects infrastructure metadata through read-only IAM roles, normalizes it into searchable current-state views, stores compressed snapshots, compares changes over time, and exposes JSON, HTML, and spreadsheet-friendly reports. CloudFormation deploys the access roles, Docker packages the service, and GitLab CI/CD runs validation gates.

Engineering constraints

  • Keep account access read-only and deploy it consistently through infrastructure as code.
  • Preserve historical snapshots without allowing storage growth to become unbounded.
  • Make large inventories useful through search, filtering, comparison, and export.
  • Support both interactive troubleshooting and repeatable review artifacts.
  • Keep customer data, account details, and internal architecture out of the public project record.

Technologies

Python AWS Docker CloudFormation Read-Only IAM Historical Snapshots JSON / HTML / Spreadsheet Exports GitLab CI/CD

Outcome

The platform turns distributed cloud metadata into a durable operational view for troubleshooting, change review, architecture analysis, and reporting while preserving a strict read-only boundary.