Steampipe queries

steampipe query "select * from aws_iam_user"

Query cloud infrastructure with SQL using Steampipe, answering posture questions (IAM, buckets, services) with queries.

Run it when you want to query infrastructure with SQL: Steampipe exposes cloud resources (AWS, Azure, GCP) as tables (aws_iam_user, aws_s3_bucket) and SQL queries answer posture questions — users with MFA, public buckets, open security groups — with the power of joins. It's the reference infrastructure query (from Turbot): inventory and auditing with SQL. In DevSecOps, Steampipe is the tool for cloud analysis: posture queries (and community mods with benchmarks) — infrastructure state answered with SQL.

Don't use it as vulnerability scanning: Steampipe queries state — CVEs of resources are covered by scanners (Prowler, 054, and image scanners). And note: table coverage (resources supported by plugins) — services without tables require extension. Heavy queries (full inventory of a large account) take time: caching and scope are configured. For managed posture, use Security Hub/Prowler; Steampipe is ad-hoc querying with SQL.