Usage:
  cliam [command]

Available Commands:
  aws         Enumerate AWS credentials for their permissions.
  azure       Enumerate Azure credentials for their permissions.
  completion  Generate the autocompletion script for the specified shell
  firebase    Enumerate Firebase permissions.
  gcp         Enumerate GCP service accounts for their permissions.
  help        Help about any command
  version     Show version and build info

Flags:
  -h, --help                  help for cliam
      --max-threads int       Maximum number of threads to use. (default 5)
      --request-timeout int   Timeout for each request in seconds. (default 5)
      --save-output           Save output to file on success
  -v, --verbose               Enable verbose output.

❯❯ cliam aws                                                        
Enumerate AWS credentials for their permissions.

Usage:
  cliam aws [command]

Available Commands:
  enumerate     Enumerate permissions for specified AWS resources.
  service-group Enumerate permissions for groups of AWS resources.

Flags:
      --access-key-id string         AWS Access Key ID
  -h, --help                         help for aws
      --known-value stringToString   AWS Resource Name. When known-resource-name is set, additional permissions where a resource needs to be specified is enumerated. (default [])
      --profile string               AWS Profile. When profile is set, access-key-id, secret-access-key, and session-token are ignored.
      --region string                AWS Region (default "us-east-1")
      --secret-access-key string     AWS Secret Access Key
      --session-json string          AWS Session JSON file. This flag attempts to read session information from the specified file. Helpful with temporary credentials.
      --session-token string         AWS Session Token

Global Flags:
      --max-threads int       Maximum number of threads to use. (default 5)
      --request-timeout int   Timeout for each request in seconds. (default 5)
  -v, --verbose               Enable verbose output.

cliam aws enumerate lamda --known-value function-name=<function_name>

❯❯ cliam aws service-group serverless --profile=my-profile

❯❯ cliam aws enumerate ec2 --session-json=creds.json

Where creds.json has
{
  "Type" : "AWS-HMAC",
  "AccessKeyId" : "ASIA...",
  "SecretAccessKey" : "...",
  "Token" : "...",
}

❯❯ cliam aws enumerate s3 iam ec2

cliam gcp --help
Enumerate GCP service accounts for their permissions.

Usage:
  cliam gcp [command]

Available Commands:
  bruteforce  Enumerate all GCP permissions
  enumerate   Enumerate specified GCP permissions
  rest        GCP permissions using the REST API

Flags:
  -h, --help                     help for gcp
      --project-id string        GCP project id
      --region string            GCP Region (default "us-central1")
      --service-account string   GCP service account path
      --zone string              GCP Zone (default "us-central1-a")

Global Flags:
      --max-threads int       Maximum number of threads to use. (default 5)
      --request-timeout int   Timeout for each request in seconds. (default 10)

Use "cliam gcp [command] --help" for more information about a command.

❯❯ cliam azure
Enumerate Azure credentials for their permissions.
In most cases, a valid Azure Subscription ID is required. If one 
is not provided, the CLI will attempt to lookup available subscriptions 
and use the first one.

Usage:
  cliam azure [command]

Available Commands:
  access-token  Get access token to use with REST apis
  enumerate     Enumerate permissions for specified azure resources.
  service       Enumerate permissions for a specific group of azure services.
  subscriptions List all subscriptions