prowler

Run AWS security audit

$ prowler aws

$ prowler aws --services [s3] [iam] [ec2]

$ prowler aws -M json -o [report.json]

$ prowler aws -p [profile_name]

$ prowler azure

$ prowler gcp

$ prowler aws -c [check11] [check12]

prowler provider [--services list] [-M format] [options]

prowler performs automated security assessments on cloud environments by running hundreds of checks against CIS benchmarks, compliance frameworks (GDPR, HIPAA, PCI-DSS), and provider-specific best practices. It supports AWS, Azure, GCP, Kubernetes, GitHub, and Microsoft 365, adapting its checks to each platform's security model.
Scans can be targeted to specific services, individual checks, or severity levels to focus on the most critical findings. Output is available in JSON, CSV, and HTML formats for integration with security dashboards and CI/CD pipelines.
The tool requires read-only credentials for the target environment and uses the provider's standard authentication (AWS profiles, Azure service principals, GCP service accounts).

aws

Audit AWS account.

Audit Azure subscription.

Audit GCP project.

Services to audit.

Specific checks.

AWS profile.

Output format.

Output file.

Filter by severity.

Requires cloud credentials with read access. Large accounts may take time. Some checks need specific permissions.

Prowler was created by Toni de la Fuente for AWS security auditing. It has grown to support multiple cloud providers and compliance frameworks.

aws-cli(1), scout(1), cloudsploit(1)