prowler-aws
AWS cloud security assessment
TLDR
Run AWS security assessment
$ prowler aws
Run specific checks$ prowler aws --checks [iam_password_policy] [s3_bucket_public_access]
Run with compliance framework$ prowler aws --compliance [cis_2.0_aws]
Output to file$ prowler aws -M json -o [results/]
SYNOPSIS
prowler aws [options]
DESCRIPTION
prowler aws performs security assessment of AWS accounts. Checks configuration against best practices and compliance frameworks. Identifies misconfigurations, vulnerabilities, and compliance gaps.
PARAMETERS
--checks checks
Specific checks to run.--services services
Services to check (iam, s3, ec2, etc.).--compliance framework
Compliance framework (cis, gdpr, hipaa, etc.).-M, --output-modes format
Output format (json, csv, html).-o, --output-directory dir
Output directory.--profile name
AWS profile.--region region
AWS region.