Run the audit without giving Nuberio access to your AWS account

You run a script on your own machine, using your own AWS credentials — nothing is granted to us, and Nuberio never sees your AWS account, resources, or the JSON you paste. Parsing your file and scoring the report happens entirely in your browser. The only thing that reaches our server is a single anonymous click-count, so it can show up in the “accounts audited” number on our homepage — no score, no AWS data, nothing else, unless you choose to leave your email at the bottom of your report for product updates.

Run the collector locally

Requires the AWS CLI (v2) and jq installed, with credentials already configured — any of these work: an aws configure profile, aws sso login, an assumed role, or instance/environment credentials. If you’re not sure whether yours are set up, run aws sts get-caller-identity first — if that prints your account ID, you’re ready. The script checks the same thing before doing anything else, and stops with a clear message if it can’t authenticate — it never fails silently. It’s read-only regardless: it cannot modify, create, or delete anything in your account.

git clone https://github.com/convops-io/nuberio-audit-collector.git && cd nuberio-audit-collector && ./collect.sh

Read the script first →Prefer scoped read-only credentials? →Need to configure the AWS CLI first? →

Paste or upload the output

Prefer the one-click version? Connect your AWS account instead →