All scripts
cloud
Expert
3–12 min

AWS VPC Network Automation

VPC lifecycle: route table management, security group audit, Transit Gateway route propagation, VPN tunnel state, VPC flow log analysis and inter-VPC reachability tests.

AWS (boto3)
Open in GeneratorOpen in Platform
You're viewing a preview

The full script, parameters, and execution console are available with a free account.

Already have access? Sign in →

Capabilities

  • boto3 multi-account
  • Route table management
  • Security group audit (open 0.0.0.0/0)
  • TGW route propagation
  • VPN tunnel state
  • Flow-log analysis
  • Reachability Analyzer

Required inputs

Parameters the script accepts. Defaults shown; some are vendor- or context-gated.

ParameterTypeDefaultNotes
AWS region
region
stringap-south-1
Flag 0.0.0.0/0 SGs
flag_open_sg
booltrue
Transit Gateway id
tgw_id
string

Hint 1Name your vendors and OS versions

Mention the exact platforms you run (AWS (boto3)) so the generated cloud logic uses the right CLI/NETCONF syntax.

Hint 2State your real thresholds

Provide concrete values for AWS region, Flag 0.0.0.0/0 SGs, Transit Gateway id instead of the defaults — they shape what counts as a fault.

Hint 3Prioritize the checks you need

This tool can boto3 multi-account and route table management. Ask for the subset relevant to your incident to keep output focused.

Hint 4Describe your inventory format

Tell the assistant whether your device list is CSV, YAML, or JSON and which columns it has, so parsing matches your data.

Sample inventory schema

Authoritative shape of the device/policy data this script consumes.

No bundled inventory sample. The script accepts standard device lists (CSV/YAML) with hostname, mgmt IP, vendor, and credentials.

Expected output

Reference terminal output the script should produce — used as a stylistic and structural target.

terminal
[2026-06-12] INFO  boto3 ec2 (ap-south-1): auditing 6 VPCs...
SG                VPC          OPEN-RULE          STATUS
sg-0a1b prod-web  vpc-prod     0.0.0.0/0:22       OPEN-SSH ←
sg-0c2d prod-db   vpc-prod     -                  OK
TGW tgw-0e3f: 18 propagated routes · 0 blackholes
Summary: 5 SGs ok · 1 open · 18 TGW routes