Alibabacloud Sas Multiaccount Manage

#### Refresh account list

Fetch the latest account list from Alibaba Cloud resource directory and write to accounts.json. Existing enable states are preserved; new accounts are enabled by default.

.venv/bin/python accounts.py refresh

#### List all accounts

.venv/bin/python accounts.py list

Sample output:

1225574417218097    cwx                     [enabled]
1234567890123456    prod-account            [disabled]

#### Search accounts

Fuzzy-search by DisplayName, returning AccountId and enable status.

.venv/bin/python accounts.py search cwx
.venv/bin/python accounts.py search prod

#### Enable / disable accounts

Control whether an account participates in subsequent batch exports.

.venv/bin/python accounts.py enable 1225574417218097
.venv/bin/python accounts.py disable 1234567890123456

accounts.json Structure

[
  {
    "AccountId": "1225574417218097",
    "DisplayName": "cwx",
    "FolderId": "r-1Q4pqB",
    "IsMaAccount": "NO",
    "SasVersion": "0",
    "enable": true
  }
]

Export cloud platform configuration check results (CSPM)

Export baselineCspm results for all enabled accounts and merge into baseline-cspm-merged-{date}.xlsx.

# Export for all enabled accounts
.venv/bin/python baseline.py export-cspm
Export for one specific account
.venv/bin/python baseline.py export-cspm --account-id 1225574417218097

Export system baseline risk list

Export exportHcWarning risk list (high/medium/low, all statuses) for all enabled accounts and merge into system-warning-merged-{date}.xlsx.

# Export for all enabled accounts
.venv/bin/python baseline.py export-system-warning
Export for one specific account
.venv/bin/python baseline.py export-system-warning --account-id 1225574417218097

Output Files

| File | Description | |------|------| | baseline-cspm-merged-{date}.xlsx | Merged cloud platform configuration check results, including “Resource Directory Account” column | | system-warning-merged-{date}.xlsx | Merged system baseline risk list, including “Resource Directory Account” column |

Error Handling

| Scenario | Behavior | |------|------| | FreeVersionNotPermit | Silently skip this account and continue others | | NoPermission / Forbidden | Silently skip this account | | Export failed (server-side error) | Print [failed] message and continue with other accounts | | All accounts skipped | Print message and exit without output file |