Expand description
Parses wrapped subprocess commands to identify cloud resources being created, so the audit trail can record what each session left behind.
This is the foundation for the cleanup flow (Phase 1 of Resource Lifecycle):
audex knows the agent ran aws s3api create-bucket --bucket foo, so it
records that foo was created under this session. Later, tryaudex cleanup <session-id> enumerates + deletes these resources.
Coverage is intentionally command-args only — we don’t parse stdout yet, so creates where AWS assigns the name (ec2 run-instances, kms create-key) are a known gap filled in Phase 2.
Structs§
- Created
Resource - A single cloud resource created during a wrapped session.
Functions§
- parse
- Parse a subprocess command and return every resource the command appears to create. Empty vec if none recognized.