rdsspectre

rdsspectre — Managed database waste and security auditor for RDS and Cloud SQL. Part of SpectreHub.

What it is

• Scans AWS RDS and GCP Cloud SQL for idle, oversized, and misconfigured instances
• Detects unencrypted databases, public accessibility, and missing backups
• Estimates monthly waste in USD per finding
• Generates IAM policy and config file via init command
• Outputs text, JSON, SARIF, and SpectreHub formats

What it is NOT

• Not a database query tool or performance profiler
• Not a migration or modification tool — strictly read-only
• Not a replacement for Trusted Advisor or GCP Recommender

Quick start

Homebrew

brew tap ppiankov/tap
brew install rdsspectre

From source

git clone https://github.com/ppiankov/rdsspectre.git
cd rdsspectre
make build

Usage

rdsspectre aws --region us-east-1 --format json

CLI commands

SpectreHub integration

rdsspectre feeds managed database waste findings into SpectreHub for unified visibility across your infrastructure.

spectrehub collect --tool rdsspectre

Safety

rdsspectre operates in read-only mode. It inspects and reports — never modifies, deletes, or alters your databases.

License

MIT — see LICENSE.

Built by Obsta Labs