It's 2am. Production is on fire. Someone in the war room asks, "what did the VPC actually look like at 22:14, when this started?", and the only honest answer is, "give me twenty minutes with jq."
That moment, repeated enough times, is why I started writing the tool I want to talk about today: clew, a Go CLI that ingests AWS Config Configuration Snapshots into a local DuckDB and renders an interactive topology you can actually read.
▎ https://github.com/nishikawaakira/clew
This post is the story of why it exists and how to use it during an incident.
The problem: "the moment-in-time configuration" is a real artifact you can't easily see






