prowler aws

all

Assess AWS security best practices, perform audits, compliance checks, and generate reports. See also: `prowler`, `prowler-azure`, `prowler-gcp`, `prowler-kubernetes`, `prowler-m365`, `prowler-github`.

More info →

Options (5)

-p, --profileboolean

Use a custom AWS profile and filter audited regions

Example: prowler aws {{[-p|--profile]}} {{custom-profile}} {{[-f|--filter-region]}} {{us-east-1 eu-south-2 ...}}

-f, --filter-regionboolean

Use a custom AWS profile and filter audited regions

Example: prowler aws {{[-p|--profile]}} {{custom-profile}} {{[-f|--filter-region]}} {{us-east-1 eu-south-2 ...}}

-s, --servicesboolean

Run checks for selected AWS services

Example: prowler aws {{[-s|--services]}} {{s3|ec2|...}}

-c, --checksboolean

Run a specific AWS check

Example: prowler aws {{[-c|--checks]}} {{s3_bucket_public_access}}

-e, --excluded-checksboolean

Exclude specific checks or services

Example: prowler aws {{[-e|--excluded-checks]}} {{s3_bucket_public_access}} --exclude-services {{s3|ec2|...}}

Examples (5)

Run the default set of checks on the AWS account

prowler aws

Use a custom AWS profile and filter audited regions

prowler aws [-p|--profile] custom-profile [-f|--filter-region] us-east-1 eu-south-2 ...

Run checks for selected AWS services

prowler aws [-s|--services] s3|ec2|...

Run a specific AWS check

prowler aws [-c|--checks] s3_bucket_public_access

Exclude specific checks or services

prowler aws [-e|--excluded-checks] s3_bucket_public_access --exclude-services s3|ec2|...

made by @shridhargupta | data from tldr-pages