Skip to content

Add Recursive Organization Tree Scanning with Account Discovery #217

@coren-d

Description

@coren-d

Your feature request related to a problem? Please describe.
Currently, the system can only retrieve accounts directly under a specified Organizational Unit (OU) or those explicitly listed in the manifest. This makes it difficult to deploy resources or validate configurations across the entire AWS Organization when OUs have nested structures, as sub-OUs and their accounts are not included automatically. This limitation requires manual enumeration of each OU path, which is time-consuming and error-prone.

Describe the feature you’d like
I would like to add a new capability that scans the entire AWS Organization tree recursively, starting from the root or any specified OU, collecting all descendant OUs and their active accounts. This functionality should provide both:
1. A structured organization tree containing OUs, sub-OUs, and accounts.
2. An easy way to retrieve all active accounts from any OU, including nested ones, without needing to list each OU manually.

Additional context
This feature will improve automation and accuracy when applying deployments, policies, or audits that target entire OUs, especially in environments with deep nested structures. It will also allow exporting a complete organizational map for documentation or compliance purposes.

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions