Features • Installation • Usage • Configuration • Running cloudlist • Supported providers • Library • Join Discord
Cloudlist is a multi-cloud tool for getting Assets from Cloud Providers. This is intended to be used by the blue team to augment Attack Surface Management efforts by maintaining a centralized list of assets across multiple clouds with very little configuration efforts.
- List Cloud assets with multiple configurations
- Multiple Cloud providers support
- Keyless authentication support (AWS IRSA / instance profiles, GCP workload identity)
- Multiple output format support
- Multiple filters support
- Highly extensible making adding new providers a breeze
- stdout support to work with other tools in pipelines
cloudlist -hThis will display help for the tool. Here are all the switches it supports.
Cloudlist is a tool for listing Assets from multiple cloud providers.
Usage:
./cloudlist [flags]
Flags:
CONFIGURATION:
-config string cloudlist flag config file (default "$HOME/.config/cloudlist/config.yaml")
-pc, -provider-config string provider config file (default "$HOME/.config/cloudlist/provider-config.yaml")
FILTERS:
-p, -provider value display results for given providers (comma-separated) (default linode,fastly,heroku,terraform,digitalocean,consul,cloudflare,hetzner,nomad,do,scw,openstack,alibaba,aws,gcp,namecheap,kubernetes,azure, custom)
-id string[] display results for given ids (comma-separated)
-host display only hostnames in results
-ip display only ips in results
-s, -service value query and display results from given service (comma-separated)) (default cloudfront,gke,domain,compute,ec2,instance,cloud-function,app,eks,custom,consul,droplet,vm,ecs,fastly,alb,s3,lambda,elb,cloud-run,route53,publicip,dns,service,nomad,lightsail,ingress,apigateway)
-ep, -exclude-private exclude private ips in cli output
UPDATE:
-up, -update update cloudlist to latest version
-duc, -disable-update-check disable automatic cloudlist update check
OUTPUT:
-o, -output string output file to write results
-json write output in json format
-version display version of cloudlist
-v display verbose output
-silent display only results in outputCloudlist supports two approaches for GCP asset discovery:
- Organization-Level Asset API - Comprehensive organization-wide discovery using Cloud Asset Inventory API
- Individual Service APIs - Fast project-specific discovery using individual GCP service APIs
For detailed setup instructions, required permissions, service account configuration, and usage examples, see:
Please check PROVIDERS.md and DESIGN.md to include support for new cloud providers in Cloudlist.
- Fork this project
- Create your feature branch (
git checkout -b new-provider) - Commit your changes (
git commit -am 'Added new cloud provider') - Push to the branch (
git push origin new-provider) - Create new Pull Request
Thank you for inspiration
cloudlist is made with 🖤 by the projectdiscovery team and licensed under MIT