Skip to main content

cnspec shell aws ec2 ebs

Connect to an AWS instance using an EBS volume scan. This requires an AWS host.

Synopsis​

Connect to an AWS instance using an EBS volume scan. This requires that the scan execute on an instance that is running inside of AWS.

cnspec shell aws ec2 ebs INSTANCEID [flags]

Options​

      --ask-pass                         Prompt for connection password.
  -c, --command string                   MQL query to execute in the shell.
      --discover string                  Enable the discovery of nested assets. Supported: 'all|auto|instances|host-instances|host-machines|container|container-images|pods|cronjobs|statefulsets|deployments|jobs|replicasets|daemonsets' (default "auto")
      --discover-filter stringToString   Additional filter for asset discovery. (default [])
  -h, --help                             help for ebs
      --host-machines                    Also scan host machines like ESXi server.
  -i, --identity-file string             Select a file from which to read the identity (private key) for public key authentication.
      --insecure                         Disable TLS/SSL checks or SSH hostkey config.
      --instances                        Also scan instances. This only applies to API targets like AWS, Azure, or GCP.
      --option --option key=value        Additional connection options. You can pass multiple options using --option key=value. (default [])
  -p, --password string                  Set the connection password, such as for SSH/WinRM.
      --path string                      Path to a local file or directory for the connection to use.
      --platform-id string               Select a specific target asset by providing its platform ID.
      --sudo                             Elevate privileges with sudo.

Options inherited from parent commands​

      --api-proxy string   Set proxy for communications with Mondoo API
      --config string      Set config file path (default $HOME/.config/mondoo/mondoo.yml)
      --log-level string   Set log level: error, warn, info, debug, trace (default "info")
  -v, --verbose            Enable verbose output

SEE ALSO​