Get all EC2 instances from an AWS Config Aggregator using AWS CLI

config-aggregator-search.sh

# batch-get-aggregate-resource-config only accepts 100 resource identifiers. If you need to get the configuration
# of more items, use python + boto3: https://gist.github.com/atheiman/9830de25a3fb54a06b86953a2675bbd1

AGGREGATOR_NAME='MyConfigAggregator'
aws configservice batch-get-aggregate-resource-config \
  --configuration-aggregator-name "$AGGREGATOR_NAME" \
  --resource-identifiers "$(
    aws configservice list-aggregate-discovered-resources \
      --configuration-aggregator-name "$AGGREGATOR_NAME" \
      --resource-type 'AWS::EC2::Instance' \
      --query 'ResourceIdentifiers'
  )"

Very useful, thank you. I piped it into jq to break down the nested JSON string inside. In this case checking state and flattening the tags list out:

jq '[ .BaseConfigurationItems[] 
    | { accountId, 
      awsRegion, 
      resourceId, 
      state: (.configuration | fromjson | select(.state.name=="running")).state.name, 
      tags: (.configuration | fromjson | [.tags[]?] | from_entries) } ]'

Result:

{
    "accountId": "012345678901",
    "awsRegion": "us-west-2",
    "resourceId": "i-0e12345",
    "state": "running",
    "tags": {
      "Environment": "dev",
      "SystemsManager": "True",
      "Name": "my-special-server",
    }
  }