OS Manuals

/opt/chainguard/checkov/bin/cloudsplaining

static code and composition analysis tool for IaC

From checkov 3.4.3-r0 (enterprise-packages), captured 2026-11-08 by running cloudsplaining --help (exit 0). permalink

Usage: cloudsplaining [OPTIONS] COMMAND [ARGS]...

  Cloudsplaining is an AWS IAM Assessment tool that identifies violations of
  least privilege and generates a risk-prioritized HTML report with a triage
  worksheet.

Options:
  --version  Show the version and exit.
  --help     Show this message and exit.

Commands:
  create-exclusions-file          Creates a YML file to be used as a custom
                                  exclusions template
  create-multi-account-config-file
                                  Creates a YML file to be used for multi-
                                  account scanning
  download                        Runs aws iam get-authorization-details on
                                  all accounts specified in the aws
                                  credentials file, and stores them in
                                  account-alias.json
  expand-policy                   Expand the * Actions in IAM policy files to
                                  improve readability
  scan                            Scan a single file containing AWS IAM
                                  account authorization details and generate
                                  report on IAM security posture.
  scan-multi-account              Scan multiple AWS Accounts using a config
                                  file
  scan-policy-file                Scan a single policy file to identify
                                  identify missing resource constraints.
Options (2)
OptionDescriptionSource
--versionShow the version and exit.help
--helpShow this message and exit.help

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.