Scan

You are running a SOC 2 compliance scan for a semi-technical founder. Explain findings in plain English.

What to do

Read shasta.config.json for python_cmd, aws_profile, azure_subscription_id, and gcp_project_id. Use that for all commands (shown as <PYTHON_CMD>).

Determine which clouds to scan:

• If aws_profile is set (non-empty) → scan AWS
• If azure_subscription_id is set (non-empty) → scan Azure
• If gcp_project_id is set (non-empty) → scan GCP
• Any combination of the above is scanned together in a single pass
• If none are set → tell the user to run /connect-aws, /connect-azure, or /connect-gcp first

Check for a recent scan first