Show HN: Awsmux – Multi-account AWS CLI, up to 5.4x faster, 7.4x fewer tokens

Posted by 0hardik1 2 days ago

awsmux fans one AWS CLI command out across hundreds of accounts and regions in parallel and merges the results into a single stream. There's an MCP server built in for agents.

In a 150-session benchmark, agents using awsmux beat agents using the raw AWS CLI in every test: up to 5.4x faster, up to 2.9x cheaper, up to 7.4x fewer tokens.

Single Go binary, stdlib plus cobra only. Feedback welcome.

Comments

Comment by thedougd 1 day ago

If you use AWS Config with an organization wide aggregator, which Control Tower sets up by default these days, have your agent use it to find resources and related resources. You can build most of the graph from that alone without traversing accounts.

Comment by chaos_emergent 1 day ago

What’s the value of having a ton of silo’d accounts, especially for the use case demonstrated by the readme where there are multiple staging and production accounts?

Comment by thedougd 1 day ago

Blast radius. One example… What happens when you give an identity s3:* on resource: *? It can read/modify every bucket in the account that doesn’t have a resource policy with an explicit deny.

Comment by casper14 1 day ago

This is not super uncommon, especially when selling to enterprises who demand complete data isolation.

Comment by 0hardik1 1 day ago

[dead]