Skip to main content
Prowler for Scaleway scans IAM resources in your Scaleway organization for security misconfigurations. The current release ships one check that flags API keys still owned by the account root user.

Prerequisites

  1. A Scaleway organization with IAM access.
  2. A Scaleway API key with at least the IAMReadOnly policy bound to a dedicated IAM user (do not use the account root user).
  3. Your organization ID (visible at the top right of the Scaleway console).

Authentication

Prowler authenticates to Scaleway with a Scaleway API key. See Scaleway Authentication in Prowler for the full setup, environment variables, CLI flags, and required permissions.

Run a scan

To run only the IAM root-key check:

Checks shipped