If you have an SCP that denies access to a region that couldn't be disabled, the tool will still get those regions via the EC2 API and fail as soon as it hits any of the disallowed regions. Only collecting information on desired regions would also be quicker.