How does the cloud template scan?

[Caratpine]

Hi, team.

I see some templates about AWS, Azure, and Aliyun in nuclei-templates. I understand that using these templates for scanning requires configuring relevant credentials. What is the principle? Am I understanding it correctly?

Thank you

[princechaddha]

Hi @Caratpine,

Apologies for the delayed response, and thank you for taking the time to create this discussion.

Yes, you’re absolutely correct. The cloud-related templates for AWS, Azure, and Aliyun do require properly configured credentials using their respective CLIs (e.g., AWS CLI, Azure CLI, Aliyun CLI). These templates leverage the authenticated CLI sessions to run commands against your cloud environment and help identify potential security misconfigurations.

As for your question about “the principle,” could you please clarify what you meant? Are you referring to the underlying working mechanism of these templates, or something else?