trufflehog icon indicating copy to clipboard operation
trufflehog copied to clipboard

Support for S3 bucket scanning with AWS SSO authentication

Open PeteC-UVC opened this issue 3 months ago • 1 comments

I would like to be able to scan s3 buckets for secrets but to use AWS SSO for authentication. From what I can tell, trufflehog supports AWS authentication via AWS Keys --key and --secret or by specifying a role to assume with --role-arn. I am authenticating to AWS with SSO so I don't have any have keys or iam roles to specify. I was hoping to have a flag like --profile where I could just specify an AWS profile that would be defined in ~/.aws/config.

Sorry in advance if this functionality already exists and I just missed it. ChatGPT says this exists, but I can't find any documentation on it. Thank you!

PeteC-UVC avatar Jul 25 '25 15:07 PeteC-UVC