run_dag
Runs a declarative multi-step query DAG across resolved AWS accounts, enabling dependent steps to reference earlier outputs and gather results with one credential set per account.
Instructions
Run a small declarative multi-step query DAG against every resolved account.
Each entry in ``steps`` is
``{"id": ..., "service": ..., "operation": ..., "params": {...},
"extract": "...", "depends_on": [...]}``.
A later step's ``params`` may reference an earlier step's extracted output
anywhere a literal would go, via ``{"$ref": "<step_id>"}``. There is no
expression language and nothing is ever evaluated as code.
Every resolved account runs its own independent copy of the whole DAG, with
one credential mint per account rather than one per step. As with
``aws_query``, AWS IAM is the sole authorization boundary for every step,
and ``max_items`` raises the per-account pagination ceiling for every step.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| org | No | ||
| orgs | No | ||
| role | No | ||
| steps | Yes | ||
| region | Yes | ||
| max_items | No | ||
| account_id | No | ||
| account_ids | No | ||
| environment | No | ||
| account_name | No | ||
| max_accounts | No | ||
| account_names | No | ||
| name_contains | No | ||
| exclude_account_ids | No | ||
| exclude_account_names | No |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||