Skip to main content

cnspec run aws ec2 ebs

Run an MQL query against an AWS instance using an EBS volume scan. This requires an AWS host.

cnspec run aws ec2 ebs INSTANCEID [flags]


      --ask-pass                         Prompt for connection password.
--ast Parse the query and return the abstract syntax tree (AST).
-c, --command string MQL query to execute.
--discover string Enable the discovery of nested assets. Supported: 'all|auto|instances|host-instances|host-machines|container|container-images|pods|cronjobs|statefulsets|deployments|jobs|replicasets|daemonsets' (default "auto")
--discover-filter stringToString Additional filter for asset discovery. (default [])
-h, --help help for ebs
--host-machines Also scan host machines like ESXi servers.
-i, --identity-file string Select a file from which to read the identity (private key) for public key authentication.
--insecure Disable TLS/SSL checks or SSH hostkey config.
--instances Also scan instances. This only applies to API targets like AWS, Azure, or GCP.
-j, --json Run the query and return the object in a JSON structure.
--option --option key=value Additional connection options. You can pass in multiple options using --option key=value (default [])
--parse Parse the query and return the logical structure.
-p, --password string Connection password, such as for SSH/WinRM.
--path string Path to a local file or directory for the connection to use.
--platform-id string Select a specific target asset by providing its platform ID.
--sudo Elevate privileges with sudo.

Options inherited from parent commands

      --api-proxy string   Set proxy for communications with Mondoo API
--config string Set config file path (default $HOME/.config/mondoo/mondoo.yml)
--log-level string Set log level: error, warn, info, debug, trace (default "info")
-v, --verbose Enable verbose output