cross-account

What problem does it solve?

It removes the friction of repeating a single-account AWS security audit across many AWS accounts by automatically switching credentials, validating identity, and iterating the audit flow per account.

Core Features & Use Cases

• Sequential multi-account auditing: Runs the Director → Expert → Critic workflow independently for each enabled account and consolidates output into a single multi-account report.
• Credential switching strategies: Supports profile, assume_role, and environment modes per account so audits can be executed with the right identity each time.
• Account-scoped guardrails: Validates accounts.yaml, enforces account ID format and strategy requirements, isolates credentials between accounts, and scopes suppressions by account when specified.

Quick Start

Create config/accounts.yaml with your enabled account list (and either aws_profile or role_arn per entry), then run the audit workflow so the plugin iterates through each account with the correct credentials.