Installation

pip (recommended)

pip install cloud-audit

pipx (isolated environment)

pipx install cloud-audit

Docker

docker run ghcr.io/gebalamariusz/cloud-audit scan

Mount your AWS credentials:

docker run -v ~/.aws:/home/cloudaudit/.aws:ro ghcr.io/gebalamariusz/cloud-audit scan

From source

git clone https://github.com/gebalamariusz/cloud-audit.git
cd cloud-audit
pip install -e .

MCP Server (for AI agents)

claude mcp add cloud-audit -- uvx --from cloud-audit cloud-audit-mcp

See MCP Server for details.

Requirements

• Python 3.10+
• AWS credentials (any method: environment variables, ~/.aws/credentials, IAM role, SSO)
• Read-only AWS access (SecurityAudit managed policy)

cloud-audit never modifies your infrastructure. It only makes read API calls.