Cloud Security
Audit AWS, Azure and Google Cloud environments for misconfigurations, excessive permissions and exposed resources. Available on the Red Team and Enterprise plans.
Audit AWS, Azure and Google Cloud environments for misconfigurations, excessive permissions and exposed resources. Available on the Red Team and Enterprise plans.
- AWS: IAM, S3, EC2, Lambda
- Azure: Entra ID, Storage, VMs
- GCP: IAM, Cloud Storage, Compute
How to scan
- Create a read-only credential in your cloud account (see the table below).
- In New Scan, choose AWS, Azure or GCP.
- Pick a stored credential from the Secrets Vault, or enter a new one. It is saved to the vault first, and the scan carries a reference, never the key.
- Launch the scan. Results appear under Vulnerabilities → Cloud.
Credentials
| Provider | What you provide |
|---|---|
| AWS | Access key ID, secret access key, default region and optionally a role ARN to assume. |
| Azure | Tenant ID, client (application) ID, client secret and optionally a subscription ID. |
| GCP | Project ID and a service account JSON key. |
Tip: Use a dedicated, read-only identity such as AWS SecurityAudit, Azure Reader or GCP Viewer with security roles. Cyrion AI audits configuration, so it does not need write access.
What gets audited
- Identity and access — over-permissive roles and policies, unused credentials, missing MFA, privilege escalation paths.
- Storage — publicly readable or writable buckets and containers, missing encryption.
- Network — open security groups and firewall rules, exposed management ports.
- Compute and serverless — instances, functions and containers with risky configuration.
- Logging and monitoring — gaps in audit logging and alerting.
- Containers and infrastructure as code — vulnerable images and misconfigured templates.
Cloud findings are mapped to compliance frameworks so you can use them as audit evidence. See Reports & Compliance.
Works alongside your cloud tools
Connect AWS, Azure and Google Cloud from Integrations to bring in AWS Security Hub, Microsoft Defender and Security Command Center context. See Integrations.