{"Name":"aws","ID":"go.mondoo.com/cnquery/v9/providers/aws","Version":"13.13.1","ConnectionTypes":["aws","ebs"],"CrossProviderTypes":null,"Connectors":[{"Name":"aws","Use":"aws","Short":"an AWS account","Long":"Use the aws provider to query the resources in an AWS account.\n\nTo query or scan AWS resources, you must have an AWS credentials file. To learn how to create one, read https://docs.aws.amazon.com/cli/v1/userguide/cli-configure-files.html. Mondoo uses the default profile in the credentials file unless you specify a different one using the --profile flag.\n\nAvailable commands:\n  ec2                  \t\tQuery or scan an AWS EC2 instance\n\t\t\t\t\t\t\t\t\t\t\t\t\tSubcommands:\n\t\t\t\t\t\t\t\t\t\t\t\t\t\tinstance-connect\t\t\tAccess the EC2 instance using Amazon EC2 Instance Connect\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tProvide \u003cuser@host\u003e\n\t\t\t\t\t\t\t\t\t\t\t\t\t\tssm\t\t\t\t\t\t\t\t\t\tAccess the EC2 instance using AWS Systems Manager\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tProvide a path to the identity file\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t--identity-file \u003cpath\u003e\n\t\t\t\t\t\t\t\t\t\t\t\t\t\tebs\t\t\t\t\t\t\t\t\t\tQuery or scan an EBS volume\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tProvide the volume ID\n\t\t\t\t\t\t\t\t\t\t\t\t\t\tebs snapshot\t\t\t\t\tQuery or scan an EBS volume snapshot\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tProvide the snapshot ID\n\nExamples:\n  cnspec shell aws\n\tcnspec scan aws\n\tcnspec scan aws -f mondoo-aws-incident-response.mql.yaml --querypack mondoo-incident-response-aws\n\tcnspec shell aws --role \u003crole-arn\u003e\n\tcnspec scan aws ec2 instance-connect \u003cuser@host\u003e\n\tcnspec scan aws ec2 instance-connect \u003cuser@host\u003e --identity-file \u003cpath\u003e\n\tcnspec scan aws ec2 ebs \u003csnapshot-id\u003e\n\tcnspec scan aws --filters regions=ap-south-1,us-east-1\n\nNotes:\n  If you set the AWS_PROFILE environment variable, you can omit the profile flag.\n\tTo learn about setting up your AWS credentials, read https://mondoo.com/docs/cnspec/cloud/aws/.\n","MaxArgs":4,"Flags":[{"Long":"profile","Desc":"Profile to use when reading from ~/.aws/credentials","Type":3},{"Long":"region","Desc":"Region to use for authentication with the API (Note: This does not limit the discovery to the region.)","Type":3},{"Long":"role","Desc":"ARN of the role to use for authentication with the API","Type":3},{"Long":"endpoint-url","Desc":"Endpoint URL override for authentication with the API","Type":3},{"Long":"no-setup","Desc":"Override option for EBS scanning that tells it to not create the snapshot or volume","Type":3},{"Long":"scope","Desc":"Set the scope for the AWS WAFV2 to either CLOUDFRONT or REGIONAL","Type":3},{"Long":"filters","Desc":"Filter options, e.g., --filters regions=us-east-2,us-east-1 --filters ec2:instance-ids=i-093439483935 --filters tag:Environment=production --filters tag:Team=platform --filters exclude:tag:Environment=dev","Type":5}],"Discovery":["accounts","cloudfront-distributions","cloudtrail-trails","cloudwatch-loggroups","dynamodb-global-tables","dynamodb-tables","ec2-instances-api","ec2-snapshots","ec2-volumes","ecr","ecr-image-api","ecs","ecs-containers-api","efs-filesystems","eks-clusters","elasticache-clusters","elb-loadbalancers","es-domains","opensearch-domains","gateway-restapis","iam-groups","iam-users","instances","kms-keys","lambda-functions","organization","rds-dbclusters","rds-dbinstances","redshift-clusters","resources","s3-buckets","sagemaker-notebookinstances","secretsmanager-secrets","security-groups","ssm-instances","ssm-instances-api","vpcs"]}],"AssetUrlTrees":[{"path_segments":["technology=aws"],"key":"account","values":{"*":{"key":"service","values":{"account":null,"apigateway":null,"cloudtrail":null,"cloudwatch":null,"dynamodb":null,"ec2":null,"ecr":null,"ecs":null,"efs":null,"elb":null,"es":null,"iam":null,"kms":null,"lambda":null,"opensearch":null,"other":null,"rds":null,"s3":null,"sagemaker":null,"vpc":null},"title":"Service"}},"title":"Account"}]}