cloudlist

Features • Installation • Usage • Configuration • Running cloudlist • Supported providers • Library • Join Discord

Cloudlist is a multi-cloud tool for getting Assets from Cloud Providers. This is intended to be used by the blue team to augment Attack Surface Management efforts by maintaining a centralized list of assets across multiple clouds with very little configuration efforts.

Features

• List Cloud assets with multiple configurations
• Multiple Cloud providers support
• Keyless authentication support (AWS IRSA / instance profiles, GCP workload identity)
• Multiple output format support
• Multiple filters support
• Highly extensible making adding new providers a breeze
• stdout support to work with other tools in pipelines

Usage

cloudlist -h

This will display help for the tool. Here are all the switches it supports.

…

Documentation

GCP Asset API Support

Cloudlist supports two approaches for GCP asset discovery:

• Organization-Level Asset API - Comprehensive organization-wide discovery using Cloud Asset Inventory API
• Individual Service APIs - Fast project-specific discovery using individual GCP service APIs

For detailed setup instructions, required permissions, service account configuration, and usage examples, see:

docs/GCP_ASSET_API.md

Contribution

Please check PROVIDERS.md and DESIGN.md to include support for new cloud providers in Cloudlist.

• Fork this project
• Create your feature branch (git checkout -b new-provider)
• Commit your changes (git commit -am 'Added new cloud provider')
• Push to the branch (git push origin new-provider)
• Create new Pull Request

Acknowledgments

Thank you for inspiration

• Smogcloud
• Cloudmapper

License

cloudlist is made with by the projectdiscovery team and licensed under MIT