# AWS Endpoints Region Drift Monitor (`defenestrator/aws-endpoints-region-drift-monitor`) Actor Monitor public AWS SDK endpoint metadata for service-region coverage, hostnames, FIPS/dual-stack variants, and deprecation drift. - **URL**: https://apify.com/defenestrator/aws-endpoints-region-drift-monitor.md - **Developed by:** [Defenestrator](https://apify.com/defenestrator) (community) - **Categories:** Developer tools, Automation - **Stats:** 2 total users, 1 monthly users, 100.0% runs succeeded, 0 bookmarks - **User rating**: No ratings yet ## Pricing from $2.00 / 1,000 monitor rows This Actor is paid per event. You are not charged for the Apify platform usage, but only a fixed price for specific events. Learn more: https://docs.apify.com/platform/actors/running/actors-in-store#pay-per-event ## What's an Apify Actor? Actors are a software tools running on the Apify platform, for all kinds of web data extraction and automation use cases. In Batch mode, an Actor accepts a well-defined JSON input, performs an action which can take anything from a few seconds to a few hours, and optionally produces a well-defined JSON output, datasets with results, or files in key-value store. In Standby mode, an Actor provides a web server which can be used as a website, API, or an MCP server. Actors are written with capital "A". ## How to integrate an Actor? If asked about integration, you help developers integrate Actors into their projects. You adapt to their stack and deliver integrations that are safe, well-documented, and production-ready. The best way to integrate Actors is as follows. In JavaScript/TypeScript projects, use official [JavaScript/TypeScript client](https://docs.apify.com/api/client/js.md): ```bash npm install apify-client ``` In Python projects, use official [Python client library](https://docs.apify.com/api/client/python.md): ```bash pip install apify-client ``` In shell scripts, use [Apify CLI](https://docs.apify.com/cli/docs.md): ````bash # MacOS / Linux curl -fsSL https://apify.com/install-cli.sh | bash # Windows irm https://apify.com/install-cli.ps1 | iex ```bash In AI frameworks, you might use the [Apify MCP server](https://docs.apify.com/platform/integrations/mcp.md). If your project is in a different language, use the [REST API](https://docs.apify.com/api/v2.md). For usage examples, see the [API](#api) section below. For more details, see Apify documentation as [Markdown index](https://docs.apify.com/llms.txt) and [Markdown full-text](https://docs.apify.com/llms-full.txt). # README ## AWS Endpoints Region Drift Monitor Monitor public AWS SDK endpoint metadata for service-region coverage, hostnames, FIPS/dual-stack variants, and deprecated endpoint drift. This Actor is for platform, cloud governance, compliance, and developer-tool teams that need a scheduled machine-readable signal when the public AWS endpoint map changes. It is not affiliated with Amazon Web Services and it does not call your AWS account or require AWS credentials. ### What it checks The Actor fetches the public `botocore` `endpoints.json` metadata used by AWS SDK tooling and turns selected AWS service endpoint records into deterministic dataset rows. For each selected service/endpoint key it reports: - AWS partition (`aws`, `aws-us-gov`, `aws-cn`, etc.) - service identifier (`s3`, `sts`, `lambda`, `ec2`, ...) - endpoint key / region - rendered endpoint hostname - FIPS and dual-stack variant availability - protocols and signature versions - deprecated endpoint flags - canonical endpoint fingerprint for baseline comparison ### Repeat-use loop Run this Actor on a schedule and pass the previous run dataset as `baselineDataset`. New service-region endpoints, changed hostnames, FIPS/dual-stack variant changes, or deprecated endpoint rows become alerts. This is useful before regional expansion, compliance reviews, SDK endpoint changes, and cloud governance checks. ### Input Typical private smoke input: ```json { "partitions": ["aws"], "services": ["s3", "sts", "lambda", "ec2", "iam", "kms"], "endpointKeyPatterns": ["us-*", "eu-*", "aws-global"], "criticalServices": ["s3", "sts", "iam", "lambda", "kms"], "includeDeprecatedEndpoints": false, "includeUnchangedRows": true, "maxRows": 100 } ```` For drift detection, select a previous dataset with the resource picker. Under Apify limited permissions, the picker is preferred over typing private dataset IDs manually. ### Output Each dataset row is one selected AWS endpoint record. `OUTPUT` contains a run summary, source metadata hash, alert counts, and a compact snapshot for chained baselines. Important fields: - `alert` / `priority` / `alertReasons` - `changedSincePrevious` / `newSincePrevious` - `endpointHostname` - `fipsAvailable` / `dualstackAvailable` - `deprecated` - `endpointHash` ### Pricing This Actor uses Apify Pay Per Event (PPE) pricing: - `apify-actor-start`: `$0.00005` per run start. - `apify-default-dataset-item`: `$0.002` per dataset row (`Monitor row`). - Platform usage is included in the event price; users do not pay a separate platform-usage pass-through. - A dataset row is one monitored result, source, or drift-check row emitted by the Actor. Run cost scales with the number of rows produced and the limits you choose. Use Apify's max total charge setting before starting a run if you want a hard spend cap. ### Limitations - Source data is public AWS SDK endpoint metadata from the `botocore` repository, not a contractual AWS SLA or an AWS account inventory. - Use official AWS documentation and AWS support for final operational decisions. - This Actor does not test live network reachability of every endpoint; it monitors metadata drift. - No private AWS credentials or confidential infrastructure data should be submitted. ### Responsible use Use this Actor for monitoring public endpoint metadata and internal change review. Do not represent its output as an official AWS certification, compliance opinion, or legal advice. # Actor input Schema ## `partitions` (type: `array`): AWS endpoint partitions to inspect from the public botocore endpoints metadata. Typical values are aws, aws-us-gov, and aws-cn. ## `services` (type: `array`): Exact AWS service endpoint identifiers to monitor, such as s3, sts, lambda, ec2, iam, kms, rds, dynamodb, eks, ecs, bedrock, or bedrock-runtime. ## `servicePatterns` (type: `array`): Optional wildcard service patterns, for example bedrock\* or *marketplace*. Matching services are checked in addition to exact watched services. ## `endpointKeyPatterns` (type: `array`): Wildcard patterns for endpoint keys to include. Endpoint keys are usually AWS region IDs, plus global or legacy keys such as aws-global. Examples: us-*, eu-*, ap-\*, aws-global. ## `criticalServices` (type: `array`): Services where new endpoints, endpoint fingerprint changes, variant changes, or source errors should be promoted to high priority. ## `baselineDataset` (type: `string`): Optional previous run dataset for drift comparison. Use the picker so this limited-permission Actor receives READ access to the selected private dataset. ## `baselineDatasetId` (type: `string`): Advanced/API fallback for a previous dataset ID. Prefer the picker under limited permissions. ## `baselineRows` (type: `array`): Optional rows copied from a previous run. Rows with rowKey and endpointHash are used for drift comparison. ## `maxBaselineRows` (type: `integer`): Maximum rows to read from the selected previous dataset. ## `includeDeprecatedEndpoints` (type: `boolean`): If true, include endpoint records marked deprecated in the source metadata. Deprecated rows can still alert so legacy endpoints are visible. ## `includeUnchangedRows` (type: `boolean`): If false, only alert, changed, or error rows are pushed to the dataset. OUTPUT.snapshot still includes every checked endpoint row. ## `alertOnNewEndpoint` (type: `boolean`): If true, an endpoint row absent from the previous baseline creates an alert. ## `alertOnEndpointHashDrift` (type: `boolean`): If true, a changed canonical endpoint fingerprint compared with baseline creates an alert. ## `alertOnVariantChanges` (type: `boolean`): If true, changes in FIPS or dual-stack variant availability compared with baseline create alerts. ## `alertOnDeprecatedEndpoint` (type: `boolean`): If true, included endpoint rows marked deprecated in the source metadata create alerts. ## `expectedSourceVersion` (type: `string`): Optional exact endpoints.json version expected from the public source metadata. A mismatch creates warning rows. ## `maxRows` (type: `integer`): Maximum endpoint rows to emit to the dataset after alert/change priority sorting. Checked rows are still summarized in OUTPUT.snapshot up to this same limit. ## `maxBytes` (type: `integer`): Maximum size of the public endpoints metadata response after HTTP decoding. ## `requestTimeoutSecs` (type: `integer`): Timeout for the public GitHub raw endpoints metadata request. ## Actor input object example ```json { "partitions": [ "aws" ], "services": [ "s3", "sts", "lambda", "ec2", "iam", "kms", "rds", "dynamodb", "eks", "ecs" ], "servicePatterns": [], "endpointKeyPatterns": [ "us-*", "eu-*", "ap-*", "aws-global" ], "criticalServices": [ "s3", "sts", "iam", "ec2", "lambda", "kms", "rds", "dynamodb", "eks" ], "baselineRows": [], "maxBaselineRows": 10000, "includeDeprecatedEndpoints": false, "includeUnchangedRows": true, "alertOnNewEndpoint": true, "alertOnEndpointHashDrift": true, "alertOnVariantChanges": true, "alertOnDeprecatedEndpoint": true, "maxRows": 250, "maxBytes": 8000000, "requestTimeoutSecs": 30 } ``` # Actor output Schema ## `datasetItems` (type: `string`): No description ## `summary` (type: `string`): No description # API You can run this Actor programmatically using our API. Below are code examples in JavaScript, Python, and CLI, as well as the OpenAPI specification and MCP server setup. ## JavaScript example ```javascript import { ApifyClient } from 'apify-client'; // Initialize the ApifyClient with your Apify API token // Replace the '' with your token const client = new ApifyClient({ token: '', }); // Prepare Actor input const input = { "partitions": [ "aws" ], "services": [ "s3", "sts", "lambda", "ec2", "iam", "kms", "rds", "dynamodb", "eks", "ecs" ], "endpointKeyPatterns": [ "us-*", "eu-*", "ap-*", "aws-global" ] }; // Run the Actor and wait for it to finish const run = await client.actor("defenestrator/aws-endpoints-region-drift-monitor").call(input); // Fetch and print Actor results from the run's dataset (if any) console.log('Results from dataset'); console.log(`💾 Check your data here: https://console.apify.com/storage/datasets/${run.defaultDatasetId}`); const { items } = await client.dataset(run.defaultDatasetId).listItems(); items.forEach((item) => { console.dir(item); }); // 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/js/docs ``` ## Python example ```python from apify_client import ApifyClient # Initialize the ApifyClient with your Apify API token # Replace '' with your token. client = ApifyClient("") # Prepare the Actor input run_input = { "partitions": ["aws"], "services": [ "s3", "sts", "lambda", "ec2", "iam", "kms", "rds", "dynamodb", "eks", "ecs", ], "endpointKeyPatterns": [ "us-*", "eu-*", "ap-*", "aws-global", ], } # Run the Actor and wait for it to finish run = client.actor("defenestrator/aws-endpoints-region-drift-monitor").call(run_input=run_input) # Fetch and print Actor results from the run's dataset (if there are any) print("💾 Check your data here: https://console.apify.com/storage/datasets/" + run["defaultDatasetId"]) for item in client.dataset(run["defaultDatasetId"]).iterate_items(): print(item) # 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/python/docs/quick-start ``` ## CLI example ```bash echo '{ "partitions": [ "aws" ], "services": [ "s3", "sts", "lambda", "ec2", "iam", "kms", "rds", "dynamodb", "eks", "ecs" ], "endpointKeyPatterns": [ "us-*", "eu-*", "ap-*", "aws-global" ] }' | apify call defenestrator/aws-endpoints-region-drift-monitor --silent --output-dataset ``` ## MCP server setup ```json { "mcpServers": { "apify": { "command": "npx", "args": [ "mcp-remote", "https://mcp.apify.com/?tools=defenestrator/aws-endpoints-region-drift-monitor", "--header", "Authorization: Bearer " ] } } } ``` ## OpenAPI specification ```json { "openapi": "3.0.1", "info": { "title": "AWS Endpoints Region Drift Monitor", "description": "Monitor public AWS SDK endpoint metadata for service-region coverage, hostnames, FIPS/dual-stack variants, and deprecation drift.", "version": "0.0", "x-build-id": "avxiSHGHY55aRd3wR" }, "servers": [ { "url": "https://api.apify.com/v2" } ], "paths": { "/acts/defenestrator~aws-endpoints-region-drift-monitor/run-sync-get-dataset-items": { "post": { "operationId": "run-sync-get-dataset-items-defenestrator-aws-endpoints-region-drift-monitor", "x-openai-isConsequential": false, "summary": "Executes an Actor, waits for its completion, and returns Actor's dataset items in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK" } } } }, "/acts/defenestrator~aws-endpoints-region-drift-monitor/runs": { "post": { "operationId": "runs-sync-defenestrator-aws-endpoints-region-drift-monitor", "x-openai-isConsequential": false, "summary": "Executes an Actor and returns information about the initiated run in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/runsResponseSchema" } } } } } } }, "/acts/defenestrator~aws-endpoints-region-drift-monitor/run-sync": { "post": { "operationId": "run-sync-defenestrator-aws-endpoints-region-drift-monitor", "x-openai-isConsequential": false, "summary": "Executes an Actor, waits for completion, and returns the OUTPUT from Key-value store in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK" } } } } }, "components": { "schemas": { "inputSchema": { "type": "object", "properties": { "partitions": { "title": "AWS partitions", "type": "array", "description": "AWS endpoint partitions to inspect from the public botocore endpoints metadata. Typical values are aws, aws-us-gov, and aws-cn.", "items": { "type": "string" } }, "services": { "title": "Watched services", "type": "array", "description": "Exact AWS service endpoint identifiers to monitor, such as s3, sts, lambda, ec2, iam, kms, rds, dynamodb, eks, ecs, bedrock, or bedrock-runtime.", "items": { "type": "string" } }, "servicePatterns": { "title": "Service wildcard patterns", "type": "array", "description": "Optional wildcard service patterns, for example bedrock* or *marketplace*. Matching services are checked in addition to exact watched services.", "items": { "type": "string" }, "default": [] }, "endpointKeyPatterns": { "title": "Endpoint/region wildcard patterns", "type": "array", "description": "Wildcard patterns for endpoint keys to include. Endpoint keys are usually AWS region IDs, plus global or legacy keys such as aws-global. Examples: us-*, eu-*, ap-*, aws-global.", "items": { "type": "string" } }, "criticalServices": { "title": "Critical services", "type": "array", "description": "Services where new endpoints, endpoint fingerprint changes, variant changes, or source errors should be promoted to high priority.", "items": { "type": "string" }, "default": [ "s3", "sts", "iam", "ec2", "lambda", "kms", "rds", "dynamodb", "eks" ] }, "baselineDataset": { "title": "Previous run dataset", "type": "string", "description": "Optional previous run dataset for drift comparison. Use the picker so this limited-permission Actor receives READ access to the selected private dataset." }, "baselineDatasetId": { "title": "Previous dataset ID (advanced)", "type": "string", "description": "Advanced/API fallback for a previous dataset ID. Prefer the picker under limited permissions." }, "baselineRows": { "title": "Inline previous rows", "type": "array", "description": "Optional rows copied from a previous run. Rows with rowKey and endpointHash are used for drift comparison.", "items": { "type": "object" }, "default": [] }, "maxBaselineRows": { "title": "Max baseline rows to read", "minimum": 1, "maximum": 50000, "type": "integer", "description": "Maximum rows to read from the selected previous dataset.", "default": 10000 }, "includeDeprecatedEndpoints": { "title": "Include deprecated endpoint keys", "type": "boolean", "description": "If true, include endpoint records marked deprecated in the source metadata. Deprecated rows can still alert so legacy endpoints are visible.", "default": false }, "includeUnchangedRows": { "title": "Include unchanged rows", "type": "boolean", "description": "If false, only alert, changed, or error rows are pushed to the dataset. OUTPUT.snapshot still includes every checked endpoint row.", "default": true }, "alertOnNewEndpoint": { "title": "Alert on new endpoint after baseline", "type": "boolean", "description": "If true, an endpoint row absent from the previous baseline creates an alert.", "default": true }, "alertOnEndpointHashDrift": { "title": "Alert on endpoint fingerprint drift", "type": "boolean", "description": "If true, a changed canonical endpoint fingerprint compared with baseline creates an alert.", "default": true }, "alertOnVariantChanges": { "title": "Alert on FIPS or dual-stack variant changes", "type": "boolean", "description": "If true, changes in FIPS or dual-stack variant availability compared with baseline create alerts.", "default": true }, "alertOnDeprecatedEndpoint": { "title": "Alert on deprecated endpoints", "type": "boolean", "description": "If true, included endpoint rows marked deprecated in the source metadata create alerts.", "default": true }, "expectedSourceVersion": { "title": "Expected source version", "type": "string", "description": "Optional exact endpoints.json version expected from the public source metadata. A mismatch creates warning rows." }, "maxRows": { "title": "Max dataset rows", "minimum": 1, "maximum": 5000, "type": "integer", "description": "Maximum endpoint rows to emit to the dataset after alert/change priority sorting. Checked rows are still summarized in OUTPUT.snapshot up to this same limit.", "default": 250 }, "maxBytes": { "title": "Max source bytes", "minimum": 1000000, "maximum": 25000000, "type": "integer", "description": "Maximum size of the public endpoints metadata response after HTTP decoding.", "default": 8000000 }, "requestTimeoutSecs": { "title": "Request timeout seconds", "minimum": 5, "maximum": 90, "type": "integer", "description": "Timeout for the public GitHub raw endpoints metadata request.", "default": 30 } } }, "runsResponseSchema": { "type": "object", "properties": { "data": { "type": "object", "properties": { "id": { "type": "string" }, "actId": { "type": "string" }, "userId": { "type": "string" }, "startedAt": { "type": "string", "format": "date-time", "example": "2025-01-08T00:00:00.000Z" }, "finishedAt": { "type": "string", "format": "date-time", "example": "2025-01-08T00:00:00.000Z" }, "status": { "type": "string", "example": "READY" }, "meta": { "type": "object", "properties": { "origin": { "type": "string", "example": "API" }, "userAgent": { "type": "string" } } }, "stats": { "type": "object", "properties": { "inputBodyLen": { "type": "integer", "example": 2000 }, "rebootCount": { "type": "integer", "example": 0 }, "restartCount": { "type": "integer", "example": 0 }, "resurrectCount": { "type": "integer", "example": 0 }, "computeUnits": { "type": "integer", "example": 0 } } }, "options": { "type": "object", "properties": { "build": { "type": "string", "example": "latest" }, "timeoutSecs": { "type": "integer", "example": 300 }, "memoryMbytes": { "type": "integer", "example": 1024 }, "diskMbytes": { "type": "integer", "example": 2048 } } }, "buildId": { "type": "string" }, "defaultKeyValueStoreId": { "type": "string" }, "defaultDatasetId": { "type": "string" }, "defaultRequestQueueId": { "type": "string" }, "buildNumber": { "type": "string", "example": "1.0.0" }, "containerUrl": { "type": "string" }, "usage": { "type": "object", "properties": { "ACTOR_COMPUTE_UNITS": { "type": "integer", "example": 0 }, "DATASET_READS": { "type": "integer", "example": 0 }, "DATASET_WRITES": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_READS": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_WRITES": { "type": "integer", "example": 1 }, "KEY_VALUE_STORE_LISTS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_READS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_WRITES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_INTERNAL_GBYTES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_EXTERNAL_GBYTES": { "type": "integer", "example": 0 }, "PROXY_RESIDENTIAL_TRANSFER_GBYTES": { "type": "integer", "example": 0 }, "PROXY_SERPS": { "type": "integer", "example": 0 } } }, "usageTotalUsd": { "type": "number", "example": 0.00005 }, "usageUsd": { "type": "object", "properties": { "ACTOR_COMPUTE_UNITS": { "type": "integer", "example": 0 }, "DATASET_READS": { "type": "integer", "example": 0 }, "DATASET_WRITES": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_READS": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_WRITES": { "type": "number", "example": 0.00005 }, "KEY_VALUE_STORE_LISTS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_READS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_WRITES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_INTERNAL_GBYTES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_EXTERNAL_GBYTES": { "type": "integer", "example": 0 }, "PROXY_RESIDENTIAL_TRANSFER_GBYTES": { "type": "integer", "example": 0 }, "PROXY_SERPS": { "type": "integer", "example": 0 } } } } } } } } } } ```