trufflehog
trufflehog copied to clipboard
Support for S3 bucket scanning with AWS SSO authentication
I would like to be able to scan s3 buckets for secrets but to use AWS SSO for authentication. From what I can tell, trufflehog supports AWS authentication via AWS Keys --key and --secret or by specifying a role to assume with --role-arn. I am authenticating to AWS with SSO so I don't have any have keys or iam roles to specify. I was hoping to have a flag like --profile where I could just specify an AWS profile that would be defined in ~/.aws/config.
Sorry in advance if this functionality already exists and I just missed it. ChatGPT says this exists, but I can't find any documentation on it. Thank you!