Right now, it needs a wrapper script to run as a systemd timer. This could make errors even more difficult to detect. Make the python script have an argument or something that will do the logic the wrapper script uses.

The python is in operations-puppet at modules/dnsrecursor/files/labs-ip-alias-dump.py and the wrapper is at modules/dnsrecursor/files/labsalias-dump.sh

While you're at it, perhaps it could become "cloud-alias-dump" or something :)