andreybleme/cloud-scan

A tool for scanning your cloud resources security

cloud-scan's Issues

Use different AWS profile

Users should be able to use AWS profiles different from the default.
Assuming a credentials file such as:

[andreybleme]
aws_access_key_id = AKJUJ234OIUQ
aws_secret_access_key = jFZaskldjfjhklUIYjQa

[default]
aws_access_key_id = AKIAYKJH7Y098N
aws_secret_access_key = U6pQRbEbijndyaGhjkidj98JhyyZXe9e2xJ

Would be nice to have a cloud-scan s3 --profile andreybleme flag, so the CLI scan for resources on this given AWS account.

Filter buckets

Users should be able to use remove specific buckets form the scan operation.

A command with a flag would be enough to avoid scanning undesired buckets, such as:
cloud-scan s3 --ignore my-website-bucket.

When this flag is set, the bucket my-website-bucket should not be scanned.