chore(docs): improve GCP docs (#2242)

This commit is contained in:
Sergio Garcia
2023-04-20 14:15:28 +02:00
committed by GitHub
parent 559c4c0c2c
commit 1f6319442e

View File

@@ -254,14 +254,27 @@ prowler aws --profile custom-profile -f us-east-1 eu-south-2
``` ```
> By default, `prowler` will scan all AWS regions. > By default, `prowler` will scan all AWS regions.
See more details about AWS Authentication in [Requirements](getting-started/requirements.md)
### Google Cloud ### Google Cloud
Optionally, you can provide the location of an application credential JSON file with the following argument: Prowler will use by default your User Account credentials, you can configure it using:
- `gcloud init` to use a new account
- `gcloud config set account <account>` to use an existing account
Then, obtain your access credentials using: `gcloud auth application-default login`
Otherwise, you can generate and download Service Account keys in JSON format (refer to https://cloud.google.com/iam/docs/creating-managing-service-account-keys) and provide the location of the file with the following argument:
```console ```console
prowler gcp --credentials-file path prowler gcp --credentials-file path
``` ```
> `prowler` will scan the GCP project associated with the credentials.
See more details about GCP Authentication in [Requirements](getting-started/requirements.md)
### Azure ### Azure
With Azure you need to specify which auth method is going to be used: With Azure you need to specify which auth method is going to be used:
@@ -280,7 +293,7 @@ prowler azure --browser-auth
prowler azure --managed-identity-auth prowler azure --managed-identity-auth
``` ```
More details in [Requirements](getting-started/requirements.md) See more details about Azure Authentication in [Requirements](getting-started/requirements.md)
Prowler by default scans all the subscriptions that is allowed to scan, if you want to scan a single subscription or various concrete subscriptions you can use the following flag (using az cli auth as example): Prowler by default scans all the subscriptions that is allowed to scan, if you want to scan a single subscription or various concrete subscriptions you can use the following flag (using az cli auth as example):
```console ```console