cloudlist

Features • Installation • Usage • Configuration • Running cloudlist • Supported providers • Library • Join Discord

Cloudlist is a multi-cloud tool for getting Assets from Cloud Providers. This is intended to be used by the blue team to augment Attack Surface Management efforts by maintaining a centralized list of assets across multiple clouds with very little configuration efforts.

Features

List Cloud assets with multiple configurations
Multiple Cloud providers support
Keyless authentication support (AWS IRSA / instance profiles, GCP workload identity)
Multiple output format support
Multiple filters support
Highly extensible making adding new providers a breeze
stdout support to work with other tools in pipelines

Usage

cloudlist -h

This will display help for the tool. Here are all the switches it supports.

Cloudlist is a tool for listing Assets from multiple cloud providers.

Usage:
  ./cloudlist [flags]

Flags:
CONFIGURATION:
   -config string                cloudlist flag config file (default "$HOME/.config/cloudlist/config.yaml")
   -pc, -provider-config string  provider config file (default "$HOME/.config/cloudlist/provider-config.yaml")

FILTERS:
   -p, -provider value          display results for given providers (comma-separated) (default linode,fastly,heroku,terraform,digitalocean,consul,cloudflare,hetzner,nomad,do,scw,openstack,alibaba,aws,gcp,namecheap,kubernetes,azure, custom)
   -id string[]                 display results for given ids (comma-separated)
   -host                        display only hostnames in results
   -ip                          display only ips in results
   -s, -service value           query and display results from given service (comma-separated) (default cloudfront,gke,domain,compute,ec2,instance,cloud-function,app,eks,custom,consul,droplet,vm,ecs,fastly,alb,s3,lambda,elb,cloud-run,route53,publicip,dns,service,nomad,lightsail,ingress,apigateway)
   -es, -exclude-service value  services to skip for a provider (comma-separated)
   -ep, -exclude-private        exclude private ips in cli output

UPDATE:
   -up, -update                 update cloudlist to latest version
   -duc, -disable-update-check  disable automatic cloudlist update check

OUTPUT:
   -o, -output string  output file to write results
   -json               write output in json format
   -version            display version of cloudlist
   -v                  display verbose output
   -silent             display only results in output

Documentation

GCP Asset API Support

Cloudlist supports two approaches for GCP asset discovery:

Organization-Level Asset API - Comprehensive organization-wide discovery using Cloud Asset Inventory API
Individual Service APIs - Fast project-specific discovery using individual GCP service APIs

For detailed setup instructions, required permissions, service account configuration, and usage examples, see:

📚 docs/GCP_ASSET_API.md

Contribution

Please check PROVIDERS.md and DESIGN.md to include support for new cloud providers in Cloudlist.

Fork this project
Create your feature branch (git checkout -b new-provider)
Commit your changes (git commit -am 'Added new cloud provider')
Push to the branch (git push origin new-provider)
Create new Pull Request

Acknowledgments

Thank you for inspiration

License

cloudlist is made with 🖤 by the projectdiscovery team and licensed under MIT