CloudAccess

AWS

IAM Role with SecurityAudit Policy

Azure

App with SecurityReader Role

GCP

Service Account with Viewer Access
Oracle
API User with Audit Access


These are the suggested level of access needed for each cloud, though you can manually modify the permissions given as needed, with the understanding that future plugins may not have the necessary permissions. To see a current list of permissions, see our GitHub page.