#!/bin/bash
# Phase 4 — Cloud Platforms
source "$(dirname "$0")/lib.sh"

phase_header "PHASE 4 — Cloud Platforms (AWS / Azure / GCP)"

section "AWS"
chk "aws"               aws
chk "pacu"              pacu
chk "enumerate-iam"     enumerate-iam
chk "awswhoami"         awswhoami
chk_py "boto3"          boto3
chk_py "botocore"       botocore
chk_py "principalmapper" principalmapper
chk "cloudfox"          cloudfox
chk "s3scanner"         s3scanner        # binary not module
chk "prowler"           prowler
chk_opt "stratus"       stratus         # optional — binary build issues on some systems
chk_dir "cloud_enum"    /opt/cloud_enum
chk "checkov"           checkov

section "Azure"
chk "az"                az
chk "azcopy"            azcopy
chk "roadrecon"         roadrecon
chk_py "roadtools"      roadtools
chk "teamfiltration"    teamfiltration
chk_py "msticpy"        msticpy

section "GCP"
chk_py "google.cloud.storage" google.cloud.storage
chk_opt "gcp_scanner"   gcp_scanner     # optional — not always available

section "Kubernetes"
chk "kubectl"           kubectl
chk "kubectx"           kubectx
chk "kubens"            kubens
chk "helm"              helm
chk "kube-hunter"       kube-hunter
chk "kube-bench"        kube-bench
chk "peirates"          peirates
# kubesploit — removed (no public binary release for current version)

section "Container Escape"
chk "cdk"               cdk
chk "deepce"            deepce
chk "botb"              botb
chk "trivy"             trivy
chk "dive"              dive

section "IaC Security"
chk "checkov"           checkov
chk "syft"              syft
chk "grype"             grype
chk "dependency-check"  dependency-check

section "Multi-Cloud"
# scoutsuite — removed (Python 3.13 dependency conflicts, use Docker image instead)

phase_summary
