aws-resolver-audit

Documentation

Overview

aws-resolver-audit walks every AWS resource's AttributesJSON, extracts ARN and bare-ID references to other scanned types, then diffs the proposed (source_type, target_type) pairs against edges already persisted in `relationships`. Audit-but-not-actual pairs surface as candidate resolver gaps, ranked by sample frequency.

Run against a populated DB:

go run ./cmd/aws-resolver-audit --db ~/.local/share/disco/disco.db
go run ./cmd/aws-resolver-audit --db ~/.local/share/disco/disco.db --top 50