Assess Equinix Metal with cnspec

Rely on cnspec to query and assess your Equinix Metal infrastructure, including organizations, projects, devices, SSH keys, and users.

Prerequisites

To analyze your Equinix Metal environment with cnspec, you must have:

To create an API token:

To query resources within an organization:

cnspec shell equinix org ORG_ID --token YOUR_API_TOKEN

To query resources within a specific project:

cnspec shell equinix project PROJECT_ID --token YOUR_API_TOKEN

You can also set the PACKET_AUTH_TOKEN environment variable instead of passing the --token flag:

export PACKET_AUTH_TOKEN=your_token_here
cnspec shell equinix org ORG_ID

To scan your Equinix Metal organization:

cnspec scan equinix org ORG_ID --token YOUR_API_TOKEN

You can also create your own policies to meet your specific requirements.

cnspec> equinix.metal.organization

cnspec> equinix.metal.projects { name id createdAt }

cnspec> equinix.metal.projects[0].devices { hostname state }

cnspec> equinix.metal.devices { hostname state billingCycle os }

cnspec> equinix.metal.sshKeys

cnspec> equinix.metal.users

To learn more about how the MQL query language works, read Write Effective MQL.
For a list of all the Equinix resources and fields you can query, read the Equinix Resource Pack Reference.