Supported Query Targets
cnquery can request information from:
Target | Provider | Example |
---|---|---|
AWS accounts | aws | cnquery shell aws |
AWS EC2 instances | ssh | cnquery shell ssh user@host |
AWS EC2 Instance Connect | aws ec2 instance-connect | cnquery shell aws ec2 instance-connect ec2-user@INSTANCEID |
AWS EC2 EBS snapshot | aws ec2 ebs snapshot | cnquery shell aws ec2 ebs snapshot SNAPSHOTID |
AWS EC2 EBS volume | aws ec2 ebs volume | cnquery shell aws ec2 ebs volume VOLUMEID |
Container images | container , docker | cnquery shell container ubuntu:latest |
Container registries | container registry | cnquery shell container registry index.docker.io/library/rockylinux:8 |
DNS records | host | cnquery shell host mondoo.com |
GitHub organizations | github org | cnquery shell github org mondoohq |
GitHub repositories | github repo | cnquery shell github repo mondoohq/cnquery |
GitLab groups | gitlab | cnquery shell gitlab --group mondoohq |
Google Cloud projects | gcp | cnquery shell gcp |
Google Workspace | google-workspace | cnquery shell google-workspace --customer-id CUSTOMER_ID --impersonated-user-email EMAIL --credentials-path JSON_FILE |
Kubernetes cluster nodes | local , ssh | cnquery shell ssh user@host |
Kubernetes clusters | k8s | cnquery shell k8s |
Kubernetes manifests | k8s | cnquery shell k8s manifest.yaml |
Kubernetes workloads | k8s | cnquery shell k8s --discover pods,deployments |
Linux hosts | local , ssh | cnquery shell local orcnquery shell ssh user@host |
macOS hosts | local , ssh | cnquery shell local orcnquery shell ssh user@IP_ADDRESS |
Microsoft 365 accounts | ms365 | cnquery shell ms365 --tenant-id TENANT_ID --client-id CLIENT_ID --certificate-path PFX_FILE |
Microsoft Azure accounts | azure | cnquery shell azure --subscription SUBSCRIPTION_ID |
Microsoft Azure instances | ssh | cnquery shell ssh user@host |
Okta | okta | cnquery shell okta --token TOKEN --organization ORGANIZATION |
Running containers | docker | cnquery shell docker CONTAINER_ID |
Slack | slack | cnquery shell slack --token TOKEN |
SSL certificates on websites | host | cnquery shell host mondoo.com |
Terraform HCL | terraform | cnquery shell terraform HCL_FILE_OR_PATH |
Terraform plan | terraform plan | cnquery shell terraform plan plan.json |
Terraform state | terraform state | cnquery shell terraform state state.json |
Vagrant virtual machines | vagrant | cnquery shell vagrant HOST |
VMware vSphere | vsphere | cnquery shell vsphere user@domain@host --ask-pass |
Windows hosts | local , ssh , winrm | cnquery shell local ,cnquery shell ssh Administrator@IP_ADDRESS --ask-pass orcnquery shell winrm Administrator@IP_ADDRESS --ask-pass |