Skip to main content

Supported Query Targets

cnquery can request information from:

TargetProviderExample
AWS accountsawscnquery shell aws
AWS EC2 instancessshcnquery shell ssh user@host
AWS EC2 Instance Connectaws ec2 instance-connectcnquery shell aws ec2 instance-connect ec2-user@INSTANCEID
AWS EC2 EBS snapshotaws ec2 ebs snapshotcnquery shell aws ec2 ebs snapshot SNAPSHOTID
AWS EC2 EBS volumeaws ec2 ebs volumecnquery shell aws ec2 ebs volume VOLUMEID
Container imagescontainer, dockercnquery shell container ubuntu:latest
Container registriescontainer registrycnquery shell container registry index.docker.io/library/rockylinux:8
DNS recordshostcnquery shell host mondoo.com
GitHub organizationsgithub orgcnquery shell github org mondoohq
GitHub repositoriesgithub repocnquery shell github repo mondoohq/cnquery
GitLab groupsgitlabcnquery shell gitlab --group mondoohq
Google Cloud projectsgcpcnquery shell gcp
Kubernetes cluster nodeslocal, sshcnquery shell ssh user@host
Kubernetes clustersk8scnquery shell k8s
Kubernetes manifestsk8scnquery shell k8s manifest.yaml
Kubernetes workloadsk8scnquery shell k8s --discover pods,deployments
Linux hostslocal, sshcnquery shell local or
cnquery shell ssh user@host
macOS hostslocal, sshcnquery shell local or
cnquery shell ssh user@IP_ADDRESS
Microsoft 365 accountsms365cnquery shell ms365 --tenant-id TENANT_ID --client-id CLIENT_ID --certificate-path PFX_FILE
Microsoft Azure accountsazurecnquery shell azure --subscription SUBSCRIPTION_ID
Microsoft Azure instancessshcnquery shell ssh user@host
Running containersdockercnquery shell docker CONTAINER_ID
SSL certificates on websiteshostcnquery shell host mondoo.com
Terraform HCLterraformcnquery shell terraform HCL_FILE_OR_PATH
Terraform planterraform plancnquery shell terraform plan plan.json
Terraform stateterraform statecnquery shell terraform state state.json
Vagrant virtual machinesvagrantcnquery shell vagrant HOST
VMware vSpherevspherecnquery shell vsphere user@domain@host --ask-pass
Windows hostslocal, ssh, winrmcnquery shell local,
cnquery shell ssh Administrator@IP_ADDRESS --ask-pass or
cnquery shell winrm Administrator@IP_ADDRESS --ask-pass