cloudsploit
cloudsploit copied to clipboard
aquasecurity
unable scan azure environment using cloudspolit
i have recently using the cloudspolit github project - for azure followed the instructions but the ./index.js file is unable recongise the azure config , instead default aws can some please help ?
I have now gone through the whole setup several times. I have installed Cloudsploit in a small VM running Debian - installation has been done with and without --force update of npm packages. Have configured config.js with Azure credentials - tested both hardcoded in the file and with a json credential file. when issuing the ./index.js command with an absolute path to config.js I keep getting; 'unable to load config' error (as it is being reported by other individuals).
I'm honestly wondering if this is supposed to work at all ?
hi @yaminiholla09 @Gbpdawnhealthcom can you try running this command
./index.js --config ./config.js
I use this command "node ./index.js --ignore-ok --compliance=CSI --console=table --config ./config.js --csv=file.csv" The output says: DEBUG: Skipping plugin Front Door Access Logs Enabled because it is not used for compliance programs DEBUG: Skipping plugin Front Door Minimum TLS Version because it is not used for compliance programs ERROR: Nothing to collect. (parsed) is there a way to force the plugins from being skipped? Is this a rights issue on the Azure side?
Thanks in advance for everyones help!
hi @cb0rtha , cloudsploit uses several flags i.e. --compliance=CSI enforces to run the plugins which are cis mapped. please check this for all cli options https://github.com/aquasecurity/cloudsploit/blob/master/docs/oracle.md#cloud-provider-configuration
and in general to run all the azure plugins you can use this command node ./index.js --config ./config.js
Same issue with me, getting this error: TypeError: Cannot read properties of undefined (reading 'credential_file'). I am using Node.js v21.5.0
