Huawei Cloud Resource Inventory Skill
Overview
This skill aggregates all Huawei Cloud resources under a tenant across multiple services and regions, builds inter-resource relationship indexes, and outputs results as plain-text tables grouped by resource type.
Architecture
Agent → Python SDK (huaweicloudsdk{ecs,bms,rds,evs,dcs,cce,vpc,eip,elb,nat,dns,iam})
→ Cross-region parallel query
→ In-memory relationship index (VPC↔Subnet↔ECS, EIP↔ECS, EVS↔ECS, CCE↔VPC)
→ Grouped table output
Supported Resource Types
| Resource Type | Service | Key Relationship Fields |
|---|---|---|
| VPC | VPC v3 | id, name, cidr |
| Subnet | VPC v2 | vpc_id (→VPC), az |
| ECS | ECS v2 | vpc_id, subnet_id, eip_port_ids, volume_ids |
| BMS | BMS v1 | az |
| EIP | EIP v2 | port_id (→ECS), associated_server |
| ELB | ELB v3 | vpc_id, subnet_id |
| NAT | NAT v2 | vpc_id (router_id), internal_network_id |
| RDS | RDS v3 | vpc_id, subnet_id |
| EVS | EVS v2 | attached_to (→ECS server_id) |
| DCS | DCS v2 | vpc_id, subnet_id |
| CCE | CCE v3 | vpc_id, subnet_id, node_count |
| DNS | DNS v2 | zone_type (public/private) |
Relationship Coverage
- Network topology: VPC → Subnet → ECS NIC, EIP → ECS (via port_id), ELB → VPC/Subnet, NAT → VPC
- Storage mount: EVS → ECS (via attachment server_id)
- Dependency: CCE → VPC/Subnet, RDS → VPC/Subnet, DCS → VPC/Subnet
Applicable Scenarios
- Resource inventory: "list all resources of this tenant across all regions"
- Relationship audit: "which resources are connected to which VPC"
- Network topology overview: "show me the network topology"
- Cross-region census: "how many resources do I have in each region"
- Cost review preparation: enumerate all resources before billing analysis
Capability Boundary: This skill only queries resources. It does not create, modify, or delete any resource. It does not query billing, monitoring, or alarm data.
Prerequisites
Environment Variables
| Variable | Required | Description |
|---|---|---|
| AK (any of) | Yes | HUAWEICLOUD_SDK_AK / HW_ACCESS_KEY / OBS_ACCESS_KEY |
| SK (any of) | Yes | HUAWEICLOUD_SDK_SK / HW_SECRET_KEY / OBS_SECRET_KEY |
| HTTPS_PROXY | No | Proxy URL if behind a proxy |
Dependencies
- Python 3.8+
- huaweicloudsdkcore >= 3.1.0
- huaweicloudsdkecs >= 3.1.0
- huaweicloudsdkbms >= 3.1.0
- huaweicloudsdkrds >= 3.1.0
- huaweicloudsdkevs >= 3.1.0
- huaweicloudsdkdcs >= 3.1.0
- huaweicloudsdkcce >= 3.1.0
- huaweicloudsdkvpc >= 3.1.0
- huaweicloudsdkeip >= 3.1.0
- huaweicloudsdkelb >= 3.1.0
- huaweicloudsdknat >= 3.1.0
- huaweicloudsdkdns >= 3.1.0
- huaweicloudsdkiam >= 3.1.0
IAM Permissions
See references/iam-policies.md for the minimum IAM permissions required.
Workflow
Step 1: Install Dependencies
pip install -r requirements.txt
Step 2: Set Credentials
export HUAWEICLOUD_SDK_AK="your-ak"
export HUAWEICLOUD_SDK_SK="your-sk"
Step 3: Execute Query
# Query all resources across all regions
python3 scripts/resource_inventory.py
# Query a specific region
python3 scripts/resource_inventory.py --region cn-north-4
# Query specific resource types
python3 scripts/resource_inventory.py --resource-type ecs,vpc,eip
# Output as JSON
python3 scripts/resource_inventory.py --format json
# List supported capabilities
python3 scripts/resource_inventory.py --capability-list
Core Commands
| Command | Description |
|---|---|
python3 scripts/resource_inventory.py |
Query all resources in all regions (table output) |
python3 scripts/resource_inventory.py --region cn-north-4 |
Query all resources in a specific region |
python3 scripts/resource_inventory.py --resource-type ecs,vpc,eip |
Query specific resource types |
python3 scripts/resource_inventory.py --format json |
Output as JSON |
python3 scripts/resource_inventory.py --capability-list |
List supported resource types |
Parameter Confirmation
| Parameter | Default | Description |
|---|---|---|
--region |
all regions | Specific region to query |
--resource-type |
all types | Comma-separated resource types |
--format |
table | Output format: table or json |
--capability-list |
- | List capabilities and exit |
安全硬约束
- AK/SK are read from environment variables dynamically — never hardcoded
- All API calls have 30s timeout — no hanging
- 403/429 errors are caught and reported, not retried indefinitely
- Read-only — no write operations of any kind
- No sensitive data (AK/SK) is written to output, logs, or files
- curl / SDK 调用设 30s 超时——超时判定失败，不 hang
- API 返回 403/无权限时：立即停止该操作并提示用户
- token 不得写入任何文件/日志/评论
KooCLI Command Format Standard
This skill uses SDK mode (huaweicloudsdk Python packages), not hcloud CLI. No KooCLI commands are used. All API calls are made via Python SDK clients.
If CLI mode is needed in the future, the standard format would be:
hcloud <Service> <Operation> --cli-region={region} [--params]