Archiving An AWS Account. A script in progress to archive… | by Teri Radichel | Cloud Security | Aug, 2025

A script in progress to archive resources in an AWS account before closing it

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

⚙️A series on Security Automation. The Code.

🔒 Related Stories: AWS Security | AWS S3 Buckets | EC2

💻 Free Content on Jobs in Cybersecurity | ✉️ Sign up for the Email List

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

I’m working on a script to archive an AWS account (for the particular resources I commonly archive) or simply move the resources like an S3 bucket or an AWS AMI to a different account, encrypted with a different KMS key:

Segregating AWS accounts to limit blast radius

Whenever I perform a penetration test I set up a separate AWS Account. That limits the scope of what can be affected by an issue more than if I ran every test in a single account. When I’m done, I want to archive in another account to cheaper archive storage services since I don’t plan on using things again. That way I have less accounts to manage and less overhead and save some money. I can set limits on how long I want…