largest_blast_radius

Graph · From docs/MCP_TOOLS.md on GitHub

Category graph · sensitivity confidential · capabilities read_state · readOnly true, destructive false, idempotent true, openWorld false · outputSchema no · timeout: layer default (300 s)

The assets whose failure or change affects the most others. Items have id, name, type, account_id, transitive_dependents, accounts_affected (a count here) and internet_exposed_dependents. Use blast_radius(ref) for the detail of one.

Argument	Type	Default	Constraints	Description
top	integer	15	1..100	Number of assets returned.
dataset	string	""		Dataset name (see list_datasets). Empty = the active dataset.

Called with the arguments below, largest_blast_radius returned this structuredContent.

{"top": 3}

{
  "dataset": "sample",
  "items": [
    {
      "id": "kms-main",
      "name": "prod-main-key",
      "arn": "arn:aws:kms:us-east-1:111111111111:key/1111-2222",
      "type": "KMS_KEY",
      "account_id": "111111111111",
      "region": "us-east-1",
      "transitive_dependents": 12,
      "accounts_affected": 1,
      "internet_exposed_dependents": 2
    },
    {
      "id": "vpc-prod",
      "name": "prod-vpc",
      "arn": "arn:aws:ec2:us-east-1:111111111111:vpc/vpc-0prod",
      "type": "VPC",
      "account_id": "111111111111",
      "region": "us-east-1",
      "transitive_dependents": 9,
      "accounts_affected": 1,
      "internet_exposed_dependents": 2
    },
    {
      "id": "ecr-repo",
      "name": "app-images",
      "arn": "arn:aws:ecr:eu-west-1:222222222222:repository/app-images",
      "type": "CONTAINER_REGISTRY",
      "account_id": "222222222222",
      "region": "eu-west-1",
      "transitive_dependents": 8,
      "accounts_affected": 3,
      "internet_exposed_dependents": 1
    }
  ],
  "returned": 3
}