All scripts
cloud
Expert
3–12 min
AWS VPC Network Automation
VPC lifecycle: route table management, security group audit, Transit Gateway route propagation, VPN tunnel state, VPC flow log analysis and inter-VPC reachability tests.
AWS (boto3)
You're viewing a preview
The full script, parameters, and execution console are available with a free account.
Already have access? Sign in →
Capabilities
- boto3 multi-account
- Route table management
- Security group audit (open 0.0.0.0/0)
- TGW route propagation
- VPN tunnel state
- Flow-log analysis
- Reachability Analyzer
Required inputs
Parameters the script accepts. Defaults shown; some are vendor- or context-gated.
| Parameter | Type | Default | Notes |
|---|---|---|---|
AWS region region | string | ap-south-1 | — |
Flag 0.0.0.0/0 SGs flag_open_sg | bool | true | — |
Transit Gateway id tgw_id | string | — | — |
Sample inventory schema
Authoritative shape of the device/policy data this script consumes.
No bundled inventory sample. The script accepts standard device lists (CSV/YAML) with hostname, mgmt IP, vendor, and credentials.
Expected output
Reference terminal output the script should produce — used as a stylistic and structural target.
terminal
[2026-06-12] INFO boto3 ec2 (ap-south-1): auditing 6 VPCs... SG VPC OPEN-RULE STATUS sg-0a1b prod-web vpc-prod 0.0.0.0/0:22 OPEN-SSH ← sg-0c2d prod-db vpc-prod - OK TGW tgw-0e3f: 18 propagated routes · 0 blackholes Summary: 5 SGs ok · 1 open · 18 TGW routes