Audit five exposure classes in local normalized AWS, Azure, or GCP exports: public storage, broad inbound administrative access, active long-lived key age, privileged MFA, and required audit logging. Node 22+ ESM, zero dependencies, offline and read-only.
This walkthrough uses the tool's public README and checked-in example files. Run the command from a repository checkout with Node.js 22+.
Run the checked-in example
node bin/cloud-exposure-auditor.mjs --root examples/aws/pass --manifest manifest.json --now 2026-10-13T00:00:00Z
node bin/cloud-exposure-auditor.mjs --root examples/aws/fail --manifest manifest.json --now 2026-10-13T00:00:00Z --human
node scripts/check.mjsRead the result
Replace aws with azure or gcp for their synthetic pass/fail examples. Pass examples exit 0; fail examples intentionally exit 1 and exercise all five exposure rules. Dates are injected fixture dates, not claims of real cloud collection. Use the actual evidence/evaluation date for real runs.