Reclaimer
Find AWS resources that are outside CloudFormation or need policy attention. Reclaimer explains what each resource is, which automation currently manages it, and the safest path forward. Every plan is review-only until you start it, and the original resource is retained.
AppsInventory · 8Unused & orphanedPlans
CloudFormation conversion pipeline
Reclaim Score 50%88% · share of resources under IaC1Quick convert
1Import, then fix
1Needs input
1Owned elsewhere
3Already managed
1Not supported
| Resource | Type | Managed by | Policy | Next step | |
|---|---|---|---|---|---|
| aster-ridge-reportss3://aster-ridge-reports | S3 bucket | UNKNOWN · no evidence found | Meets policy | Confirm owner | |
| legacy-adminsg-0b41c9e2a7 | Security group | Confirmed unowned · 30 days | Needs attentionport 22 open to 0.0.0.0/0 | Add, then fix | |
| billing-dbpostgres 16 · db.t4g.small | RDS instance | Confirmed unowned · 30 days | Meets policy | Add to CloudFormation | |
| orders-eventssqs://orders-events | SQS queue | Terraform · infra/queues.tf | Meets policy | Leave with Terraform | |
| tudovu-aster-ridge-uploadss3://tudovu-aster-ridge-uploads | S3 bucket | CloudFormation · tudovu-storage | Meets policy | Already managed |
Plan import for 3 resources
Confirm aster-ridge-reports is unowned
Reclaimer found no CloudFormation stack, no deleted-stack history, and no Terraform or CloudFormation file in aster-ridge/infra that names this bucket. That is not proof, so it needs a person.
No automation manages this bucket (Pulumi, CDK and scripts included)
Confirmation expires in 30 days, or sooner if the resource changes.
CancelConfirm as David Thompson
Import plan · 3 resources · stack tudovu-reclaimer-5e2d04
Template describes each resource as it is, with
DeletionPolicy: RetainChange set: 3 Import · 0 Modify · 0 Replace · 0 Remove
Runs in your account from your workflow, under your OIDC role
legacy-admin is imported as it is. Closing port 22 follows as its own pull request.
Open pull request
aster-ridge / infraPull requestsActionsSecurity
Reclaimer: import 3 hand-built resources into CloudFormation #233
⎇ Open tudovu wants to merge 1 commit into
main from tudovu/reclaimer/import-5e2d04ConversationCommits 1Checks 2Files changed 3
reclaimer/tudovu-reclaimer-5e2d04.yaml+ BillingDb:+ Type: AWS::RDS::DBInstance+ DeletionPolicy: Retain+ UpdateReplacePolicy: Retain+ Properties: { DBInstanceIdentifier: billing-db, Engine: postgres, StorageEncrypted: true }reclaimer/import-manifest.json · .github/workflows/tudovu-reclaimer-import.yml
Change set preview · 3 Import · 0 Modify · 0 Replace · 0 Removepassed
CloudFormation template lintpassed
Merge pull request1 approval by david-thompson
tudovu-reclaimer-import · Execute import change set ✓ IMPORT_COMPLETE · Drift check IN_SYNC for 3 of 3 · originals retained
Reclaimer.
Bring what someone built by hand under infrastructure as code.
Import it. Don't replace it.
Start free in about five minutes, with no card.
Choose a feature to watch next
0:00 / 0:00