New here? Create a safe read-only test user first (2 minutes):
- Go to AWS Console → IAM → Users → Create user
- Name it cloudguard-test
- Attach these 3 policies: SecurityAudit, AmazonS3ReadOnlyAccess, IAMReadOnlyAccess
- Go to Security credentials → Create access key
- Paste the keys below, scan, then delete the user after
Your keys are safe. They are used only for this scan and are never stored or logged anywhere. For extra safety, use a read-only IAM user as described above.