Cloud Security Scanning

Cloudsploit

Cloudsploit by Aqua Security is a cloud security scanner that detects misconfigurations and compliance issues across AWS, Azure, and Google Cloud Platform. It reviews cloud resources against security best practices and industry standards like CIS benchmarks.

Cloudsploit scans your cloud infrastructure for hundreds of security issues including exposed S3 buckets, overly permissive security groups, unencrypted databases, weak IAM policies, public storage containers, and many more. It provides detailed remediation guidance to help you secure your cloud environment.

Module Sections

Command Builder

Interactive tool to toggle flags, select services, and generate Cloudsploit scan commands.

Installation

Install Cloudsploit via npm, Docker, or source. Get up and running quickly on any platform.

Configuration

Set up API credentials for AWS, Azure, and GCP. Configure detectors, regions, and scan settings.

Running Scans

Start your first cloud security scan. Learn scan modes, targets, and basic options.

AWS Scanners

Complete guide to AWS detectors: IAM, S3, EC2, RDS, Lambda, VPC, CloudTrail, and more.

Azure Scanners

Azure security detectors: Storage, Key Vault, SQL, App Service, Active Directory, and more.

GCP Scanners

Google Cloud security checks: Compute Engine, Cloud Storage, IAM, BigQuery, and more.

Detector Reference

Full list of all security detectors, what they check, severity levels, and remediation steps.

Command Flags

Complete reference of all CLI options: regions, services, output formats, and advanced settings.

Output Formats

Export scan results to JSON, CSV, HTML, JUnit, and more. Integrate with CI/CD pipelines.

Examples

Real-world scan commands for AWS account audit, Azure tenant scan, GCP project review, and CI/CD integration.

Pro Tips

Expert advice on scan scheduling, custom detectors, rate limiting, false positive management, and automation.

CI/CD Integration

Integrate Cloudsploit into GitHub Actions, GitLab CI, Jenkins, and other pipelines.

Cloudsploit Quiz

Test your cloud security scanning knowledge with 20+ multiple-choice questions.

Cloudsploit Lab

Hands-on exercises: scan mock environments, interpret findings, and practice remediation.

Quick Start

New to Cloudsploit? Start with these three sections in order:

  1. 1
    Installation

    Install Cloudsploit via npm, Docker, or source.

  2. 2
    Configuration

    Set up cloud provider credentials and scan settings.

  3. 3
    Running Scans

    Execute your first cloud security scan and review results.

Key Features

  • Multi-Cloud Support: Scan AWS, Azure, and GCP from a single tool
  • 500+ Security Checks: CIS benchmarks, vendor best practices, and custom rules
  • Zero Configuration: Auto-discovers resources in your cloud account
  • Detailed Remediation: Step-by-step guidance to fix each finding
  • CI/CD Integration: Run scans in pipelines, fail builds on critical issues
  • Custom Detectors: Write your own JavaScript security checks
Next: Installation