{"Name":"aws","ID":"go.mondoo.com/cnquery/v9/providers/aws","Version":"13.50.2","ConnectionTypes":["aws","ebs"],"CrossProviderTypes":null,"Connectors":[{"Name":"aws","Use":"aws","Short":"an AWS account","Long":"Use the aws provider to query the resources in an AWS account.\n\nTo query or scan AWS resources, you must have an AWS credentials file. To learn how to create one, read https://docs.aws.amazon.com/cli/v1/userguide/cli-configure-files.html. Mondoo uses the default profile in the credentials file unless you specify a different one using the --profile flag.\n\nAvailable commands:\n  ec2                  \t\tQuery or scan an AWS EC2 instance\n\t\t\t\t\t\t\t\t\t\t\t\t\tSubcommands:\n\t\t\t\t\t\t\t\t\t\t\t\t\t\tinstance-connect\t\t\tAccess the EC2 instance using Amazon EC2 Instance Connect\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tProvide \u003cuser@host\u003e\n\t\t\t\t\t\t\t\t\t\t\t\t\t\tssm\t\t\t\t\t\t\t\t\t\tAccess the EC2 instance using AWS Systems Manager\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tProvide a path to the identity file\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t--identity-file \u003cpath\u003e\n\t\t\t\t\t\t\t\t\t\t\t\t\t\tebs\t\t\t\t\t\t\t\t\t\tQuery or scan an EBS volume\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tProvide the volume ID\n\t\t\t\t\t\t\t\t\t\t\t\t\t\tebs snapshot\t\t\t\t\tQuery or scan an EBS volume snapshot\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tProvide the snapshot ID\n\nExamples:\n  cnspec shell aws\n\tcnspec scan aws\n\tcnspec scan aws -f mondoo-aws-incident-response.mql.yaml --querypack mondoo-incident-response-aws\n\tcnspec shell aws --role \u003crole-arn\u003e\n\tcnspec scan aws ec2 instance-connect \u003cuser@host\u003e\n\tcnspec scan aws ec2 instance-connect \u003cuser@host\u003e --identity-file \u003cpath\u003e\n\tcnspec scan aws ec2 ebs \u003csnapshot-id\u003e\n\tcnspec scan aws --filters regions=ap-south-1,us-east-1\n\nNotes:\n  If you set the AWS_PROFILE environment variable, you can omit the profile flag.\n\tTo learn about setting up your AWS credentials, read https://mondoo.com/docs/cnspec/cloud/aws.\n","MaxArgs":4,"Flags":[{"Long":"profile","Desc":"Profile to use when reading from ~/.aws/credentials","Type":3},{"Long":"region","Desc":"Region to use for authentication with the API (Note: This does not limit the discovery to the region.)","Type":3},{"Long":"role","Desc":"ARN of the role to use for authentication with the API","Type":3},{"Long":"endpoint-url","Desc":"Endpoint URL override for authentication with the API","Type":3},{"Long":"no-setup","Desc":"Override option for EBS scanning that tells it to not create the snapshot or volume","Type":3},{"Long":"scope","Desc":"Set the scope for the AWS WAFV2 to either CLOUDFRONT or REGIONAL","Type":3},{"Long":"filters","Desc":"Filter options, e.g., --filters regions=us-east-2,us-east-1 --filters ec2:instance-ids=i-093439483935 --filters s3:bucket-names=my-bucket --filters tag:Environment=production --filters tag:Team=platform --filters exclude:tag:Environment=dev","Type":5}],"Discovery":["accounts","cloudfront-distributions","cloudtrail-trails","cloudwatch-loggroups","codebuild-projects","cognito-userpools","documentdb-clusters","dynamodb-global-tables","dynamodb-tables","ec2-instances-api","ec2-snapshots","ec2-volumes","ecr","ecr-image-api","ecr-repositories","ecs","ecs-containers-api","ecs-taskdefinitions","efs-filesystems","eks-clusters","elasticache-clusters","elb-loadbalancers","emr-clusters","es-domains","opensearch-domains","gateway-restapis","iam-groups","iam-users","instances","kms-keys","lambda-functions","memorydb-clusters","mq-brokers","msk-clusters","neptune-clusters","organization","rds-dbclusters","rds-dbinstances","redshift-clusters","resources","route53-hostedzones","s3-buckets","sagemaker-notebookinstances","sagemaker-processingjobs","sagemaker-trainingjobs","sagemaker-domains","sagemaker-models","secretsmanager-secrets","security-groups","ssm-instances","ssm-instances-api","transfer-servers","apigatewayv2-apis","athena-workgroups","appstream-fleets","batch-jobdefinitions","directoryservice-directories","documentdb-instances","vpcs"]}],"AssetUrlTrees":[{"path_segments":["technology=aws"],"key":"account","values":{"*":{"key":"service","values":{"account":null,"apigateway":null,"appstream":null,"athena":null,"batch":null,"cloudtrail":null,"cloudwatch":null,"codebuild":null,"cognito":null,"documentdb":null,"ds":null,"dynamodb":null,"ec2":null,"ecr":null,"ecs":null,"efs":null,"elb":null,"es":null,"iam":null,"kms":null,"lambda":null,"memorydb":null,"mq":null,"msk":null,"opensearch":null,"other":null,"rds":null,"route53":null,"s3":null,"sagemaker":null,"transfer":null,"vpc":null},"title":"Service"}},"title":"Account"}],"Platforms":[{"name":"aws","title":"AWS Account","kind":["api"],"runtime":["aws"]},{"name":"aws-s3-bucket","title":"AWS S3 Bucket","kind":["aws-object"],"runtime":["aws"]},{"name":"aws-cloudtrail-trail","title":"AWS CloudTrail Trail","kind":["aws-object"],"runtime":["aws"]},{"name":"aws-rds-dbinstance","title":"AWS RDS DB Instance","kind":["aws-object"],"runtime":["aws"]},{"name":"aws-rds-dbcluster","title":"AWS RDS DB Cluster","kind":["aws-object"],"runtime":["aws"]},{"name":"aws-dynamodb-table","title":"AWS DynamoDB Table","kind":["aws-object"],"runtime":["aws"]},{"name":"aws-redshift-cluster","title":"AWS Redshift Cluster","kind":["aws-object"],"runtime":["aws"]},{"name":"aws-vpc","title":"AWS VPC","kind":["aws-object"],"runtime":["aws"]},{"name":"aws-security-group","title":"AWS Security Group","kind":["aws-object"],"runtime":["aws"]},{"name":"aws-ebs-volume","title":"AWS EBS Volume","kind":["aws-object"],"runtime":["aws"]},{"name":"aws-ebs-snapshot","title":"AWS EBS Snapshot","kind":["aws-object"],"runtime":["aws"]},{"name":"aws-iam-user","title":"AWS IAM User","kind":["aws-object"],"runtime":["aws"]},{"name":"aws-iam-group","title":"AWS IAM Group","kind":["aws-object"],"runtime":["aws"]},{"name":"aws-cloudwatch-loggroup","title":"AWS CloudWatch Log Group","kind":["aws-object"],"runtime":["aws"]},{"name":"aws-lambda-function","title":"AWS Lambda Function","kind":["aws-object"],"runtime":["aws"]},{"name":"aws-ecs-container","title":"AWS ECS Container","kind":["aws-object"],"runtime":["aws"]},{"name":"aws-ecs-instance","title":"AWS ECS Instance","kind":["aws-object"],"runtime":["aws"]},{"name":"aws-efs-filesystem","title":"AWS EFS Filesystem","kind":["aws-object"],"runtime":["aws"]},{"name":"aws-gateway-restapi","title":"AWS Gateway REST API","kind":["aws-object"],"runtime":["aws"]},{"name":"aws-elb-loadbalancer","title":"AWS ELB Load Balancer","kind":["aws-object"],"runtime":["aws"]},{"name":"aws-es-domain","title":"AWS ES Domain","kind":["aws-object"],"runtime":["aws"]},{"name":"aws-opensearch-domain","title":"AWS OpenSearch Domain","kind":["aws-object"],"runtime":["aws"]},{"name":"aws-kms-key","title":"AWS KMS Key","kind":["aws-object"],"runtime":["aws"]},{"name":"aws-sagemaker-notebookinstance","title":"AWS SageMaker Notebook Instance","kind":["aws-object"],"runtime":["aws"]},{"name":"aws-sagemaker-processingjob","title":"AWS SageMaker Processing Job","kind":["aws-object"],"runtime":["aws"]},{"name":"aws-sagemaker-trainingjob","title":"AWS SageMaker Training Job","kind":["aws-object"],"runtime":["aws"]},{"name":"aws-sagemaker-domain","title":"AWS SageMaker Domain","kind":["aws-object"],"runtime":["aws"]},{"name":"aws-sagemaker-model","title":"AWS SageMaker Model","kind":["aws-object"],"runtime":["aws"]},{"name":"aws-ec2-instance","title":"AWS EC2 Instance","kind":["aws-object"],"runtime":["aws"]},{"name":"aws-ssm-instance","title":"AWS SSM Instance","kind":["aws-object"],"runtime":["aws"]},{"name":"aws-ecr-image","title":"AWS ECR Image","kind":["aws-object"],"runtime":["aws"]},{"name":"aws-ecr-repository","title":"AWS ECR Repository","kind":["aws-object"],"runtime":["aws"]},{"name":"aws-ecs-taskdefinition","title":"AWS ECS Task Definition","kind":["aws-object"],"runtime":["aws"]},{"name":"aws-route53-hostedzone","title":"AWS Route 53 Hosted Zone","kind":["aws-object"],"runtime":["aws"]},{"name":"aws-msk-cluster","title":"AWS MSK Cluster","kind":["aws-object"],"runtime":["aws"]},{"name":"aws-mq-broker","title":"AWS MQ Broker","kind":["aws-object"],"runtime":["aws"]},{"name":"aws-eks-cluster","title":"AWS EKS Cluster","kind":["aws-object"],"runtime":["aws"]},{"name":"aws-secretsmanager-secret","title":"AWS Secrets Manager Secret","kind":["aws-object"],"runtime":["aws"]},{"name":"aws-elasticache-cluster","title":"AWS ElastiCache Cluster","kind":["aws-object"],"runtime":["aws"]},{"name":"aws-cloudfront-distribution","title":"AWS CloudFront Distribution","kind":["aws-object"],"runtime":["aws"]},{"name":"aws-neptune-cluster","title":"AWS Neptune Cluster","kind":["aws-object"],"runtime":["aws"]},{"name":"aws-emr-cluster","title":"AWS EMR Cluster","kind":["aws-object"],"runtime":["aws"]},{"name":"aws-documentdb-cluster","title":"AWS DocumentDB Cluster","kind":["aws-object"],"runtime":["aws"]},{"name":"aws-memorydb-cluster","title":"AWS MemoryDB Cluster","kind":["aws-object"],"runtime":["aws"]},{"name":"aws-codebuild-project","title":"AWS CodeBuild Project","kind":["aws-object"],"runtime":["aws"]},{"name":"aws-cognito-userpool","title":"AWS Cognito User Pool","kind":["aws-object"],"runtime":["aws"]},{"name":"aws-transfer-server","title":"AWS Transfer Family Server","kind":["aws-object"],"runtime":["aws"]},{"name":"aws-apigatewayv2-api","title":"AWS API Gateway V2 API","kind":["aws-object"],"runtime":["aws"]},{"name":"aws-athena-workgroup","title":"AWS Athena Workgroup","kind":["aws-object"],"runtime":["aws"]},{"name":"aws-appstream-fleet","title":"AWS AppStream Fleet","kind":["aws-object"],"runtime":["aws"]},{"name":"aws-batch-jobdefinition","title":"AWS Batch Job Definition","kind":["aws-object"],"runtime":["aws"]},{"name":"aws-directoryservice-directory","title":"AWS Directory Service Directory","kind":["aws-object"],"runtime":["aws"]},{"name":"aws-documentdb-instance","title":"AWS DocumentDB Instance","kind":["aws-object"],"runtime":["aws"]}]}