@shieldly/cli

@shieldly/cli

AI-Powered Security Analysis for AWS — official CLI.

Analyze AWS IAM policies and CloudFormation templates for security risks from any terminal, shell script, or CI/CD pipeline. Powered by Shieldly.

npm install -g @shieldly/cli

Quick start

# Authenticate (get a key at https://www.shieldly.io/app/api)
export SHIELDLY_API_KEY=sk_live_...

# Analyze an IAM policy
shieldly analyze-iam policy.json

# Analyze a CloudFormation template
shieldly analyze-cf template.yaml

# Manage API keys
shieldly api-keys list

Without an API key, analyze-iam runs in demo mode (5 lifetime analyses, IAM only). analyze-cf and api-keys require a key.

Commands

Command	Description
shieldly analyze-iam <policy-file>	Analyze an IAM policy for security issues
shieldly analyze-cf <template-file>	Analyze a CloudFormation template
shieldly api-keys list|create|revoke	Manage API keys
shieldly completion bash|zsh|install	Shell completion

Global options

Option	Description
--api-key <key>	API key (or set SHIELDLY_API_KEY)
--version	Show version
-h, --help	Show help

Use in CI

- name: AI-Powered IAM Analysis
  run: |
    npm install -g @shieldly/cli
    shieldly analyze-iam ./iam-policy.json
  env:
    SHIELDLY_API_KEY: ${{ secrets.SHIELDLY_API_KEY }}

For pull-request gating with PR comments, use the Shieldly GitHub Action instead.

Privacy

Shieldly does not log your policy input. Cache keys are one-way SHA-256 hashes of the input.

Links

• Web app & demo: https://www.shieldly.io
• API reference: https://www.shieldly.io/docs/api
• Issues: https://github.com/shieldly-io/cli/issues

License

MIT © Shieldly

Amazon Web Services (AWS) is a trademark of Amazon.com, Inc. Shieldly is not affiliated with, endorsed by, or sponsored by Amazon Web Services.