capabilities.work

Audit an Organization's Full Inventory

A 6-step recipe with Terraform. We can help you get access.

Recipe · 6 steps

Audit an Organization's Full Inventory

with Terraform

Enumerate an organization's projects, workspaces, teams, and policies.

  1. List the organizations the token can reach, filtered by name, to confirm the audit target is in scope for this credential before enumerating it.
  2. Read the organization's settings, capturing the authentication policy, session timeouts, and plan posture that frame everything else in the audit.
  3. Enumerate the organization's projects, the top-level grouping every workspace belongs to.
  4. Enumerate every workspace in the organization, the unit that actually holds state and runs infrastructure.
  5. Enumerate the organization's teams to capture who has access to the estate enumerated above.
  6. Enumerate the Sentinel and OPA policies governing the organization, completing the picture of what is enforced against every run.
What you'll need to have ready
  • organizationName: The organization to audit.
  • pageSize: Results per page for each listing, up to 100.
For your developer

Arazzo workflow terraform:audit-organization-inventory, 6 operations: ListOrganizations → GetOrganization → ListProjects → ListWorkspaces → ListTeams → ListPolicies. Specs on APIs.io.

More recipes with Terraform

Audit a Namespace's Published ModulesFind and Cancel a Stuck RunDestroy Infrastructure and Delete the WorkspaceDiscover a Registry Module and Vet ItPush a New State Version Under LockOnboard a Sentinel or OPA PolicyOnboard a Project and Its First WorkspaceOnboard a Team into an OrganizationPin a Module to a Specific Version and Resolve Its SourcePlan a Run and Apply or Discard It