CloudSploit

cloudsploit scan

Scan the cloud account with CloudSploit (Aqua's CSPM), evaluating the community security plugins in the posture report.

Run it in the infrastructure pipeline (or in periodic review) when you want the posture with the community engine: cloudsploit evaluates the account (AWS, Azure, GCP) against its plugins — buckets, IAM, security groups, encryption, logging — and generates the report with findings by severity. It's the community CSPM (from Aqua): the account posture with the plugins. In DevSecOps, CloudSploit is the infrastructure pipeline check: posture findings are remediated (and the engine is extended with custom plugins).

Don't use it as intrusion detection: CloudSploit audits configuration. Coverage depends on plugins and credentials: without read policy, services aren't evaluated. And watch out: project maintenance (integration into Aqua, with less momentum than the open source version) — for current auditing, Prowler is the reference; CloudSploit is an option in the toolkit. Findings require severity-based triage.