macOS
brew install cloud-nukelocal Homebrew formula metadata
安装
brew install cloud-nukelocal Homebrew formula metadata
nix profile install nixpkgs#cloud-nukenixpkgs package indexes · pkgs/by-name/cl/cloud-nuke/package.nix · 来源: api.github.com
scoop install main/cloud-nukeScoop official bucket manifest trees · bucket/cloud-nuke.json · 来源: api.github.com
winget install --id Gruntwork.cloud-nuke -eWindows Package Manager source index · Gruntwork.cloud-nuke · 来源: cdn.winget.microsoft.com
概览
CLI tool to nuke (delete) cloud resources
历史
cloud-nuke is Gruntwork's destructive cleanup CLI for deleting cloud resources, mainly used around test accounts, ephemeral infrastructure, and default AWS resource cleanup. Its history is source-backed enough to treat it as a real package-manager tool rather than just a GitHub utility.
The gruntwork-io/cloud-nuke repository was created in 2017 and is maintained by Gruntwork. The README frames the tool as a way to remove leftover resources, clean test accounts, and delete defaults such as default VPCs and permissive security group rules.
The tool evolved from AWS-focused cleanup into a CLI with inspect, dry-run, filtering, config-file, and GCP commands. The README also documents telemetry added as of v0.29.0, showing a maintained packaged CLI rather than a one-off script.
Official installation docs point users to GitHub release binaries and explicitly list Homebrew for macOS and Linux plus winget for Windows. The input package-manager facts also record Nix, Scoop, and winget identifiers, so adoption is package-manager centric even though upstream cautions that package-manager builds may lag releases.
The CLI is significant in infrastructure shops because it turns account cleanup into a repeatable command with filters, dry-run, region selection, resource-type selection, and config-driven targeting.
Common use is `cloud-nuke aws` for deletion, `cloud-nuke inspect-aws` for inspection, `cloud-nuke defaults-aws` for default VPC and security group cleanup, and `cloud-nuke gcp` for GCP deletion. The official docs emphasize dry-run and filtering because the default delete path is intentionally dangerous.
Credentials come from standard AWS CLI credential mechanisms for AWS usage, and the tool accepts command flags plus an optional user-supplied config file path for granular filtering.
cloud-nuke is a good example of a high-blast-radius CLI where package freshness, binary provenance, and default behavior matter. Upstream warns users to compare package-manager versions with GitHub releases.
For Homebrew and cross-platform package indexes, it is notable because it packages operational cloud deletion behavior as a one-command executable rather than a library.
安全态势
infrastructure mutation or orchestration signal.
orange 风险 · 中 置信度 · infrastructure
在无人值守的代理使用前,请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。
local files
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Credential-bearing paths to review before unattended agent runs.
~/.aws/credentials~/.aws/config%UserProfile%\.aws\credentials%UserProfile%\.aws\config可执行文件
| 命令 | 类型 | 暴露范围 | 备注 |
|---|---|---|---|
cloud-nuke | 可执行文件 | 已索引可执行文件 | 从本地可执行文件索引发现。 |
新鲜度
这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时,才会提示版本落后。
安装元数据
| 软件包键 | brew:cloud-nuke |
|---|---|
| 版本 | 0.52.0 |
| 软件包管理器 | Homebrew |
| 主页 | https://gruntwork.io/ |
| 仓库 | https://github.com/gruntwork-io/cloud-nuke |
| 最后更新 | 2026-07-27T22:04:01+02:00 |
| Pulse | updated |
| Bottle | 未记录 |
| 服务 | 未声明 |
源数据库匹配
匹配项来自外部软件包管理器索引,并与本地 Automic Vault 软件包链接分开显示。
cloud-nuke
nix profile install nixpkgs#cloud-nukemain/cloud-nuke
scoop install main/cloud-nukeGruntwork.cloud-nuke
winget install --id Gruntwork.cloud-nuke -e来源线索
此页面由 av-web 从 scripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。
View the package source record on GitHub.