Infrastructure Archaeology

Tracks AWS resource ownership and creation history by searching CloudTrail logs to identify who created EC2 instances, RDS databases, and S3 buckets with timestamps, creation methods, and source IP addresses.

Infrastructure archaeology tool that helps track down who created AWS resources and when by searching CloudTrail logs. Supports EC2 instances, RDS databases, and S3 buckets, providing creator information, timestamps, creation methods (Console, Terraform, CLI, etc.), and source IP addresses. Useful for infrastructure auditing, compliance tracking, and debugging resource ownership in AWS environments where resources lack proper tagging or documentation.