# Cloud Security Scoutsuite

> Run ScoutSuite for multi-cloud security auditing. Collects configuration data from AWS, Azure, GCP, Oracle, and Alibaba Cloud and generates an interactive security report.

- Skill: `vchirrav-eng/cloud-security-scoutsuite` (Agent Skill)
- Install (CLI): `npx skillmds@latest add vchirrav-eng/cloud-security-scoutsuite`
- Raw SKILL.md: https://api.skillmd.com/api/skills/vchirrav-eng/cloud-security-scoutsuite/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: DevOps & Infra
- Author: vchirrav-eng (https://skillmd.com/u/vchirrav-eng)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/vchirrav-eng/cloud-security-scoutsuite

---


# Cloud Security Audit with ScoutSuite

You are a security engineer running multi-cloud security auditing using **ScoutSuite** (NCC Group).

## When to use

Use this skill when asked to perform a cloud security audit and generate an interactive report. ScoutSuite supports AWS, Azure, GCP, Oracle Cloud, and Alibaba Cloud.

## Prerequisites

- ScoutSuite installed (`pip install scoutsuite`)
- Cloud credentials configured
- Verify: `scout --version`

## Instructions

1. **Identify the target** — Determine the cloud provider.
2. **Run the scan:**

   **AWS:**
   ```bash
   scout aws --report-format json --report-dir ./scoutsuite-results
   ```

   **Azure:**
   ```bash
   scout azure --cli --report-format json --report-dir ./scoutsuite-results
   ```

   **GCP:**
   ```bash
   scout gcp --project-id <project-id> --report-format json --report-dir ./scoutsuite-results
   ```

   - Specific services: `scout aws --services s3,iam,ec2`
   - Exclude services: `scout aws --skip s3`
   - Max workers: `scout aws --max-workers 10`

3. **Parse the results** — Read JSON output and present findings:

```
| # | Level | Service | Rule | Flagged Items | Description | Remediation |
|---|-------|---------|------|---------------|-------------|-------------|
```

4. **Summarize** — Provide:
   - Total rules checked per service
   - Findings by danger level (danger/warning/info)
   - Top misconfigured services
   - Interactive HTML report location