Resource ARN-based Scanning - Prowler Documentation

Prowler enables scanning of resources based on specific AWS Resource ARNs.

Resource ARN-Based Scanning

Prowler enables scanning of resources based on specific AWS Resource Amazon Resource Names (ARNs). To perform this scan, use the designated flag --resource-arn followed by one or more ARNs, separated by spaces.

prowler aws --resource-arn arn:aws:iam::012345678910:user/test arn:aws:ec2:us-east-1:123456789012:vpc/vpc-12345678

Example: This configuration scans only the specified two resources using their ARNs.

Related topics

Tag-based scan Secret-Scanning Checks GCP Project Scanning in Prowler Configuration File Scanning Unused Services