ProjectDiscovery
How does the cloud template scan? #6047
-
|
Hi, team. I see some templates about AWS, Azure, and Aliyun in nuclei-templates. I understand that using these templates for scanning requires configuring relevant credentials. What is the principle? Am I understanding it correctly? Thank you |
Beta Was this translation helpful? Give feedback.
Replies: 3 comments
-
|
@DhiyaneshGeek fyi |
Beta Was this translation helpful? Give feedback.
-
|
Hi @Caratpine Yes, you’re correct! Nuclei's AWS, Azure, and Aliyun templates require credentials because they interact with cloud provider APIs to check for misconfigurations and security issues. Authentication is done via environment variables or CLI-configured credentials to perform API-based scanning. Always use read-only credentials and follow security best practices. Feel Free to checkout our blog post for more understanding AWS : https://projectdiscovery.io/blog/aws-cloud-security-config-review-using-nuclei-templates |
Beta Was this translation helpful? Give feedback.
-
|
thanks for your answer! |
Beta Was this translation helpful? Give feedback.
Hi @Caratpine
Yes, you’re correct! Nuclei's AWS, Azure, and Aliyun templates require credentials because they interact with cloud provider APIs to check for misconfigurations and security issues. Authentication is done via environment variables or CLI-configured credentials to perform API-based scanning. Always use read-only credentials and follow security best practices.
Feel Free to checkout our blog post for more understanding
AWS : https://projectdiscovery.io/blog/aws-cloud-security-config-review-using-nuclei-templates
Azure: https://projectdiscovery.io/blog/azure-config-review-with-nuclei
Alibaba: https://projectdiscovery.io/blog/alibaba-cloud-nuclei-templates-v10-1-1-2