cloud-nuke

No entries match these filters. Clear filters

1. v0.52.0 Jun 13, 2026 · release notes

   cloud-nuke v0.52.0 adds parallel scanning and nuking with a new --parallelism flag for faster multi-region teardowns.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v0.52.0 https://github.com/gruntwork-io/cloud-nuke.git
   # already have the repo? check out this version:
   $ git checkout v0.52.0

   └──▷ TRY IT
   Speed up a full account teardown across many regions by raising the concurrency limit beyond the default of 10.
   copy

   $ cloud-nuke aws --parallelism 25

   • New --parallelism flag (default 10) controls concurrent resource discovery and deletion across regions and resource types under a single global concurrency cap.
   • Regional resources are nuked concurrently while global resources (IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access., Route53, CloudFront) are deleted last, with within-region dependency order preserved.

   2 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !aws.NukeAllResources and gcp.NukeAllResources now require an additional parallelism int parameter, breaking any library consumers that call these functions directly.
2. v0.52.0 Jun 13, 2026 · issue 014

   cloud-nuke v0.52.0 adds parallel scanning and deletion via a new --parallelism flag, dramatically speeding up multi-region cleanups.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v0.52.0 https://github.com/gruntwork-io/cloud-nuke.git
   # already have the repo? check out this version:
   $ git checkout v0.52.0

   └──▷ TRY IT
   Speed up a full AWS account cleanup across many regions by raising the concurrency well above the default of 10.
   copy

   $ cloud-nuke aws --region us-east-1 --region us-west-2 --region eu-west-1 --parallelism 25

   Throttle parallelism to 3 when nuking a large account where API rate limits are a concern, while still scanning concurrently.
   copy

   $ cloud-nuke aws --parallelism 3 --resource-type ec2 --resource-type s3 --dry-run

   • Adds --parallelism flag (default 10) to control concurrent scanning and deletion of regions and resource types under a single global concurrency cap.
   • Enables concurrent nuking of regional resources while preserving within-region dependency order; global resources (IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access., Route53, CloudFront) are deleted last.
   • Breaking change for library consumers: aws.NukeAllResources and gcp.NukeAllResources now require an additional parallelism int parameter.

   3 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !Library consumers: aws.NukeAllResources and gcp.NukeAllResources now take an additional parallelism int parameter.
3. v0.51.0 Jun 10, 2026 · release notes

   cloud-nuke v0.51.0 adds AWS Backup Plan support and dry-run mode for defaults-aws

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v0.51.0 https://github.com/gruntwork-io/cloud-nuke.git
   # already have the repo? check out this version:
   $ git checkout v0.51.0

   └──▷ TRY IT
   Preview what default VPCsVPCsVirtual Private Clouds — isolated, software-defined network environments inside a public cloud provider such as AWS, Azure, or GCP — give cyber tools a controlled network boundary with configurable routing, subnets, and access rules. and security group rules would be removed in a region before actually deleting them.
   copy

   $ cloud-nuke defaults-aws --dry-run

   • New backup-plan resource type enables nuking of AWS Backup plans.
   • Adds --dry-run flag to the defaults-aws command to preview which default VPCs and security group rules would be deleted before committing.

   2 details in Everything

4. v0.49.0 Apr 14, 2026 · release notes

   cloud-nuke v0.49.0 adds RAMRAMWorking memory that holds programs and data while a computer is running. Its contents usually disappear when power is removed. ResourceShares, Amazon MQ, and RDS cluster snapshots plus sweeping tag-filtering across 20+ resource types.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v0.49.0 https://github.com/gruntwork-io/cloud-nuke.git
   # already have the repo? check out this version:
   $ git checkout v0.49.0

   • Adds support for nuking AWS RAMAWS RAMAWS Resource Access Manager is an Amazon service that lets an AWS account share resources such as subnets or Transit Gateways with other accounts or AWS Organizations, removing the need to duplicate infrastructure across account boundaries. ResourceShares (resource-shares resource type).
   • Adds support for nuking Amazon MQ broker resources.
   • Adds support for nuking RDS cluster snapshots (rds-cluster-snapshot resource type).
   • Adds SetConfigProvider for programmatic AWS config injection when using cloud-nuke as a library.
   • Adds tag filtering support for Backup Vault resources.

   +7 more show less

   • Adds tag filtering support for RDS and ElastiCache resources.
   • Adds tag filtering support for EC2EC2Amazon's cloud virtual-machine service, letting tools run on-demand servers without managing physical hardware., ELB, and VPCVPCA logically isolated virtual network inside a public cloud provider's infrastructure, letting tools deploy resources with private addressing, controlled routing, and firewall rules without managing physical hardware. Lattice resources.
   • Adds tag filtering support for CloudWatch, EventBridgeEventBridgeAWS's managed event bus service that routes events between cloud services, SaaS apps, and custom code using rules and targets, letting tools react to state changes without polling or managing message infrastructure., and DynamoDB resources.
   • Adds tag filtering support for Lambda, Kinesis, SNSSNSAmazon Simple Notification Service, a managed pub/sub messaging service from AWS that lets tools fan out alerts or events to multiple subscribers — queues, email, HTTP endpoints, or Lambda functions — without managing broker infrastructure., SQS, and ECRECRAmazon Elastic Container Registry, AWS's managed service for storing and distributing Docker and OCI container images, giving cyber tools a private, IAM-gated registry without self-hosting infrastructure. resources.
   • Adds tag filtering support for ACM, CloudFront, SageMaker, and miscellaneous resources.
   • Adds tag filtering support for CodeDeploy applications.
   • Adds tag filtering support for Security Hub.

   12 details in Everything

5. v0.48.0 Mar 24, 2026 · release notes

   cloud-nuke v0.48.0 adds support for nuking AWS SSMAWS SSMAWS Systems Manager, an Amazon service that lets operators manage EC2 instances and on-premises servers without opening inbound ports, replacing SSH with API-driven session and command execution. Parameter Store resources.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v0.48.0 https://github.com/gruntwork-io/cloud-nuke.git
   # already have the repo? check out this version:
   $ git checkout v0.48.0

   • Adds SSM Parameter Store as a supported resource type for discovery and deletion.

   1 detail in Everything

6. v0.47.0 Mar 22, 2026 · release notes

   cloud-nuke v0.47.0 adds AWS Data Pipeline, GCP Cloud Functions Gen2/Artifact Registry/Pub-Sub support, and a new --include-tag CLI flag.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v0.47.0 https://github.com/gruntwork-io/cloud-nuke.git
   # already have the repo? check out this version:
   $ git checkout v0.47.0

   └──▷ USE IT
   Use the updated tags map syntax in your nuke config to filter resources by tag instead of the removed tag/tag_value fields.
   yaml copy

   # nuke_config.yml
   S3:
     include:
       tags:
         Environment: staging

   • Adds support for nuking AWS Data Pipeline resources.
   • Adds GCP Cloud Functions (Gen2) as a nuke-able resource type.
   • Adds GCP Artifact Registry as a nuke-able resource type.
   • Adds GCP Pub/Sub topic resource with first-seen label support.
   • New --include-tag CLI flag enables global tag-based resource filtering across all resource types.

   5 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !Config YAML keys are now case-sensitive and must match Go struct names exactly (e.g., s3 → S3, NatGateway → NATGateway, EcsCluster → ECSCluster, EksCluster → EKSCluster, RdsParameterGroup → RDSParameterGroup); old keys are rejected with errors.
   • !The tag and tag_value config fields have been removed; replace them with the tags map syntax (tags:\n my-tag: my-value).
   • !Unknown fields in config YAML now cause errors instead of being silently ignored.
   • !Some resource type names used with --resource-type have changed; run cloud-nuke inspect to see current names.
   • !Nuke() now returns []NukeResult instead of error.
   • !GetAllResources() now requires an additional *reporting.Collector parameter.
   • !The report/ and ui/ packages have been replaced by reporting/ and renderers/.
   • !The PrepareContext and IsGlobal interfaces have been removed.
7. v0.46.0 Dec 19, 2025 · release notes

   cloud-nuke v0.46.0 adds support for nuking Redshift Snapshot Copy Grants.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v0.46.0 https://github.com/gruntwork-io/cloud-nuke.git
   # already have the repo? check out this version:
   $ git checkout v0.46.0

8. v0.44.0 Oct 24, 2025 · release notes

   cloud-nuke v0.44.0 adds tag-based filtering support for ECSECSElastic Common Schema, an open specification maintained by Elastic that defines a standard field naming convention for log and event data, letting cyber tools share and correlate records without per-source field mapping. services, EC2EC2Amazon's cloud virtual-machine service, letting tools run on-demand servers without managing physical hardware. launch templates, and CloudMap namespaces/services.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v0.44.0 https://github.com/gruntwork-io/cloud-nuke.git
   # already have the repo? check out this version:
   $ git checkout v0.44.0

   • Adds tag filtering support for ECS services, enabling inclusion/exclusion of services by tag when nuking.
   • Adds tag filtering support for CloudMap namespaces and services.
   • Enables tag filtering for EC2 launch templates.

   3 details in Everything

9. v0.43.0 Sep 28, 2025 · release notes

   cloud-nuke v0.43.0 adds AWS Cloud Map, CloudFormationCloudFormationAn AWS service that lets you describe and provision cloud infrastructure as declarative YAML or JSON templates, so a cyber tool can reproducibly spin up or tear down its entire AWS environment with a single API call. stacks, JSON output, and tag filtering for Launch Templates, ECSECSElastic Common Schema, an open specification maintained by Elastic that defines a standard field naming convention for log and event data, letting cyber tools share and correlate records without per-source field mapping. clusters, Lambda, and Secrets Manager.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v0.43.0 https://github.com/gruntwork-io/cloud-nuke.git
   # already have the repo? check out this version:
   $ git checkout v0.43.0

   • Adds support for nuking AWS Cloud Map resources.
   • Adds support for nuking AWS CloudFormationAWS CloudFormationAn AWS service for declaring cloud infrastructure as code in JSON or YAML templates, letting cyber tools provision and tear down entire environments reproducibly without manual console steps. stacks.
   • Adds JSON output format support (--output json) for machine-readable results.
   • Adds tag-based filtering for EC2EC2Amazon's cloud virtual-machine service, letting tools run on-demand servers without managing physical hardware. Launch Templates.
   • Adds tag-based filtering for ECS clusters.

   +3 more show less

   • Adds tag-based filtering for Lambda Functions.
   • Adds tag-based filtering for Secrets Manager secrets.
   • Adds deletion-protection handling for RDS clusters, automatically disabling it before deletion.

   8 details in Everything

10. v0.42.0 Aug 2, 2025 · release notes

    cloud-nuke v0.42.0 adds GCP support and tag filtering for IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. roles, OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. providers, IAM policies, and Route53 hosted zones.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.42.0 https://github.com/gruntwork-io/cloud-nuke.git
    # already have the repo? check out this version:
    $ git checkout v0.42.0

    • Extends cloud-nuke to support GCP nuking operations alongside AWS.
    • Adds tag filtering support for OIDC providers, enabling include/exclude by tag.
    • Adds tag filtering support for IAM roles, enabling include/exclude by tag.
    • Adds tag filtering support for Route53 hosted zones, enabling include/exclude by tag.
    • Adds tag filtering support for IAM policies, enabling include/exclude by tag.

    +1 more show less

    • Automatically excludes AWS-managed service-linked IAM roles from nuke operations.

    6 details in Everything

11. v0.41.0 Jun 15, 2025 · release notes

    cloud-nuke v0.41.0 adds SageMaker Endpoints, CloudFront distributions, S3 lifecycle rules, and CloudTrailCloudTrailAWS service that records API calls and account activity across an AWS environment, giving cyber tools an audit log to detect anomalous or malicious actions. tag filtering.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.41.0 https://github.com/gruntwork-io/cloud-nuke.git
    # already have the repo? check out this version:
    $ git checkout v0.41.0

    • Adds support for nuking SageMaker Endpoint resources.
    • Adds support for nuking SageMaker Endpoint Configuration resources.
    • Adds support for nuking CloudFront distributions.
    • Adds tag-based filtering support for CloudTrail resources.
    • Adds nuking of S3 bucket lifecycle configurations.

    5 details in Everything

12. v0.40.0 Mar 29, 2025 · release notes

    cloud-nuke v0.40.0 adds IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. instance profile nuking and automatic deletion-protection bypass.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.40.0 https://github.com/gruntwork-io/cloud-nuke.git
    # already have the repo? check out this version:
    $ git checkout v0.40.0

    └──▷ TRY IT
    Nuke only IAM instance profiles in a sandbox account to clean up leftover EC2EC2Amazon's cloud virtual-machine service, letting tools run on-demand servers without managing physical hardware. role associations.
    copy

    $ cloud-nuke aws --resource-type iam_instance_profile --region us-east-1

    • Adds support for nuking AWS IAMAWS IAMAWS Identity and Access Management is Amazon's service for controlling who and what can call AWS APIs, by attaching policies that allow or deny actions on resources. Cyber tools use it to scope credentials to least privilege. instance profiles as a targetable resource type.
    • Automatically disables deletion protection on supported resources before nuking, unblocking previously protected resources.

    2 details in Everything

13. v0.39.0 Mar 19, 2025 · release notes

    cloud-nuke v0.39.0 adds SageMaker Studio domain nuking, multi-tag exclusions, and env-based global region override.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.39.0 https://github.com/gruntwork-io/cloud-nuke.git
    # already have the repo? check out this version:
    $ git checkout v0.39.0

    • Adds support for nuking SageMaker Studio domains as a new resource type.
    • Enables exclusion of resources using multiple tags simultaneously in config.
    • Allows the global region to be overridden via environment variable.

    3 details in Everything

14. v0.38.0 Dec 17, 2024 · release notes

    cloud-nuke v0.38.0 adds China region support, EventBridgeEventBridgeAWS's managed event bus service that routes events between cloud services, SaaS apps, and custom code using rules and targets, letting tools react to state changes without polling or managing message infrastructure., ElastiCache Serverless, Grafana, and TGW Peering Attachment resources.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.38.0 https://github.com/gruntwork-io/cloud-nuke.git
    # already have the repo? check out this version:
    $ git checkout v0.38.0

    • Adds support for AWS China region, enabling cloud-nuke to target China-region resources.
    • Adds EventBridge resource support for discovery and nuking of EventBridge resources.
    • Adds ElastiCache Serverless and Grafana as nukeable resource types.
    • Adds Transit GatewayTransit GatewayAn AWS-managed network hub that connects VPCs and on-premises networks through a single gateway, replacing complex peering meshes and giving cyber tools a central point to route or inspect cross-network traffic. Peering Attachment as a nukeable resource type.
    • Adds support for a cloud-nuke-excluded tag on VPCsVPCsVirtual Private Clouds — isolated, software-defined network environments inside a public cloud provider such as AWS, Azure, or GCP — give cyber tools a controlled network boundary with configurable routing, subnets, and access rules. to protect them from being nuked.

    5 details in Everything

15. v0.37.2 Aug 28, 2024 · release notes

    cloud-nuke v0.37.2 adds resource protection via cloud-nuke-after, EC2EC2Amazon's cloud virtual-machine service, letting tools run on-demand servers without managing physical hardware. Placement Group support, and enables --exclude-first-seen.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.37.2 https://github.com/gruntwork-io/cloud-nuke.git
    # already have the repo? check out this version:
    $ git checkout v0.37.2

    • New cloud-nuke-after feature lets you protect resources from being nuked until after a specified time.
    • Enables the --exclude-first-seen flag for the aws command, letting you skip resources whose first-seen timestamp predates a threshold.
    • Adds support for nuking EC2 Placement Groups as a new resource type.
    • Adds AWS SDK v2 support to enable targeting newer AWS resource types.

    4 details in Everything

16. v0.37.0 Jul 3, 2024 · release notes

    Adds nuking support for Network Firewall, VPCVPCA logically isolated virtual network inside a public cloud provider's infrastructure, letting tools deploy resources with private addressing, controlled routing, and firewall rules without managing physical hardware. Lattice, Kinesis Firehose, RDS Proxy, App Runner, DataSync and more

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.37.0 https://github.com/gruntwork-io/cloud-nuke.git
    # already have the repo? check out this version:
    $ git checkout v0.37.0

    • cloud-nuke now nukes Network Firewall resources (e.g., network-firewall/resource-policies, network-firewall/firewalls).
    • cloud-nuke now nukes VPC Lattice services (via the new vpc-lattice resource class).
    • cloud-nuke now nukes Kinesis Firehose delivery streams.
    • cloud-nuke now nukes RDS Proxy instances and proxy targets.
    • Adds support for nuking App Runner services (apprunner/service).

    +2 more show less

    • Adds support for nuking DataSync Tasks (datasync/task) and DataSync Locations (datasync/location).
    • cloud-nuke can now skip the cloud-nuke-first-seen tag addition via a new configuration option.

    7 details in Everything

17. v0.36.0 May 24, 2024 · release notes

    Adds Network Firewall, VPCVPCA logically isolated virtual network inside a public cloud provider's infrastructure, letting tools deploy resources with private addressing, controlled routing, and firewall rules without managing physical hardware. peer connection, and Secrets Manager resource nuking capabilities

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.36.0 https://github.com/gruntwork-io/cloud-nuke.git
    # already have the repo? check out this version:
    $ git checkout v0.36.0

    • Adds Network Firewall resource nuking support via the existing cloud-nuke CLI.
    • Adds VPC Peer Connection resource nuking support via the existing cloud-nuke CLI.
    • Adds additional patterns for removing Secrets Manager resources.

    3 details in Everything

18. v0.35.0 Apr 8, 2024 · release notes

    Adds internet_gateway, egress_only_internet_gateway, ec2_endpoint, security_group, network_interface, and network_acl resource types to cloud-nuke

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.35.0 https://github.com/gruntwork-io/cloud-nuke.git
    # already have the repo? check out this version:
    $ git checkout v0.35.0

    • Adds support for nuking EC2EC2Amazon's cloud virtual-machine service, letting tools run on-demand servers without managing physical hardware. Internet Gateways (internet_gateway)
    • Adds support for nuking Egress Only Internet Gateways (egress_only_internet_gateway)
    • Adds support for nuking EC2 Endpoints (ec2_endpoint)
    • Adds support for nuking Security Groups (security_group)
    • Adds support for nuking Network Interfaces (network_interface)

    +1 more show less

    • Adds support for nuking Network ACLsACLsAn access control list, a set of rules allowing or denying operations for particular users, services or network addresses. It decides who can use a resource. (network_acl)

    6 details in Everything

19. v0.34.0 Mar 18, 2024 · release notes

    cloud-nuke v0.34.0 adds support for MSK, S3 access points, DB parameter groups, Route53, API GW client certs, SES, IPAM, and Elastic Beanstalk resources.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.34.0 https://github.com/gruntwork-io/cloud-nuke.git
    # already have the repo? check out this version:
    $ git checkout v0.34.0

    • Adds msk_cluster to supported resource types for nuking MSK clusters
    • Adds s3_access_point to supported resource types for nuking S3 access points
    • Adds db_parameter_group to supported resource types for nuking DB parameter groups
    • Adds route53 services to supported resource types for nuking Route53 resources
    • Adds api_gateway_client_cert support to remove attached client certificates from API Gateway

    +3 more show less

    • Adds ses_resource types to supported resource types for nuking SES resources
    • Adds ipam_resource types to supported resource types for nuking IPAM resources
    • Adds elastic_beanstalk_application to supported resource types for nuking Elastic Beanstalk applications

    8 details in Everything

20. v0.33.0 Nov 22, 2023 · release notes

    cloud-nuke v0.33.0 adds backup-vault support, newer_than filter, and tag-based inclusion/exclusion rules

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.33.0 https://github.com/gruntwork-io/cloud-nuke.git
    # already have the repo? check out this version:
    $ git checkout v0.33.0

    • Adds backup-vault to supported resource types for nuking.
    • Adds newer_than configuration key to filter resources by creation time.
    • Adds tag-based inclusion and exclusion filtering support via configuration keys.
    • Adds Amazon Managed Streaming for Apache Kafka (MSK) resource type support.

    4 details in Everything

21. v0.32.0 Jul 3, 2023 · release notes

    cloud-nuke v0.32.0 adds nuke support for ACM, CodeDeploy, SNSSNSAmazon Simple Notification Service, a managed pub/sub messaging service from AWS that lets tools fan out alerts or events to multiple subscribers — queues, email, HTTP endpoints, or Lambda functions — without managing broker infrastructure. filters, and RDS subnet groups

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.32.0 https://github.com/gruntwork-io/cloud-nuke.git
    # already have the repo? check out this version:
    $ git checkout v0.32.0

    • Adds ACM support to cloud-nuke's deletion capabilities
    • Adds CodeDeploy support to cloud-nuke's deletion capabilities
    • Adds ability to filter SNS resources by name and time via new filter logic
    • Implements nukeAllRdsDbSubnetGroups to delete all RDS subnet groups

    4 details in Everything

22. v0.31.0 May 9, 2023 · release notes

    cloud-nuke v0.31.0 adds Security Hub and Macie resource support

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.31.0 https://github.com/gruntwork-io/cloud-nuke.git
    # already have the repo? check out this version:
    $ git checkout v0.31.0

    • Adds AWS Security Hub resource type support for nuking findings and standards subscriptions
    • Updates Macie support to handle additional resource types and configurations

    2 details in Everything

23. v0.30.0 May 4, 2023 · release notes

    cloud-nuke v0.30.0 adds AWS ElastiCache and Redshift resource support

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.30.0 https://github.com/gruntwork-io/cloud-nuke.git
    # already have the repo? check out this version:
    $ git checkout v0.30.0

    • Adds elasticache parameter and subnet groups to supported resources
    • Adds redshift cluster support

    2 details in Everything

24. v0.29.4 Apr 13, 2023 · release notes

    Adds --delete-unaliased-kms-keys flag to enable deletion of KMSKMSA managed service that creates, stores, rotates and controls access to encryption keys, usually backed by HSMs. Applications ask it to encrypt or decrypt rather than holding keys themselves. keys without aliases

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.29.4 https://github.com/gruntwork-io/cloud-nuke.git
    # already have the repo? check out this version:
    $ git checkout v0.29.4

    └──▷ USE IT
    Delete all resources including KMS keys that do not have an alias attached.
    shell copy

    cloud-nuke --all --region us-east-1 --delete-unaliased-kms-keys

    • Adds --delete-unaliased-kms-keys CLI flag to control whether unaliased KMS keys are deleted

    1 detail in Everything

25. v0.28.0 Apr 4, 2023 · release notes

    cloud-nuke v0.28.0 adds support for deleting CloudWatch alarms

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.28.0 https://github.com/gruntwork-io/cloud-nuke.git
    # already have the repo? check out this version:
    $ git checkout v0.28.0

    • Adds CloudWatchAlarm resource type to the deletion workflow

    1 detail in Everything

26. v0.25.0 Feb 6, 2023 · release notes

    Adds nuke support for AWS CloudWatch Events recorders and rules

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.25.0 https://github.com/gruntwork-io/cloud-nuke.git
    # already have the repo? check out this version:
    $ git checkout v0.25.0

    • Supports cloudwatch-event-rule resources in the --resource-type flag
    • Supports cloudwatch-event-recorder resources in the --resource-type flag

    2 details in Everything

27. v0.24.0 Feb 1, 2023 · release notes

    cloud-nuke v0.24.0 adds Launch Template support and SG IPv6IPv6The current version of the Internet Protocol, standardized by the IETF, using 128-bit addresses to replace the exhausted IPv4 space. Cyber tools target it because modern networks run dual-stack or IPv6-only. egress handling in defaults-aws.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.24.0 https://github.com/gruntwork-io/cloud-nuke.git
    # already have the repo? check out this version:
    $ git checkout v0.24.0

    • Launch template cleanup is now supported in cloud-nuke
    • defaults-aws also nukes the SG's IPv6 egress rule

    2 details in Everything

28. v0.23.0 Jan 20, 2023 · release notes

    cloud-nuke v0.23.0 adds support for nuking EC2EC2Amazon's cloud virtual-machine service, letting tools run on-demand servers without managing physical hardware. Dedicated Hosts and ECRECRAmazon Elastic Container Registry, AWS's managed service for storing and distributing Docker and OCI container images, giving cyber tools a private, IAM-gated registry without self-hosting infrastructure. resources

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.23.0 https://github.com/gruntwork-io/cloud-nuke.git
    # already have the repo? check out this version:
    $ git checkout v0.23.0

    • Adds EC2 Dedicated Host to the list of supported resource types that cloud-nuke can delete

    1 detail in Everything

29. v0.22.0 Dec 14, 2022 · release notes

    cloud-nuke v0.22.0 adds IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. instance profile and EC2EC2Amazon's cloud virtual-machine service, letting tools run on-demand servers without managing physical hardware. key pair support, --log-level for inspect-aws, and rate limiting

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.22.0 https://github.com/gruntwork-io/cloud-nuke.git
    # already have the repo? check out this version:
    $ git checkout v0.22.0

    • Adds the --log-level flag to the inspect-aws command to control console output verbosity.
    • Adds support for deleting KMSKMSA managed service that creates, stores, rotates and controls access to encryption keys, usually backed by HSMs. Applications ask it to encrypt or decrypt rather than holding keys themselves. key aliases in addition to standard KMS keys.
    • Adds the ability to delete EC2 key pairs via cloud-nuke.

    3 details in Everything

30. v0.21.0 Oct 31, 2022 · release notes

    cloud-nuke v0.21.0 adds IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. group and customer managed policy support

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.21.0 https://github.com/gruntwork-io/cloud-nuke.git
    # already have the repo? check out this version:
    $ git checkout v0.21.0

    • Adds support for nuking IAM groups
    • Adds support for inspecting IAM groups
    • Adds support for nuking customer managed policies
    • Adds support for inspecting customer managed policies

    4 details in Everything

31. v0.16.0 Jul 21, 2022 · release notes

    cloud-nuke v0.16.0 adds Kinesis Stream inspection and nuking support

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.16.0 https://github.com/gruntwork-io/cloud-nuke.git
    # already have the repo? check out this version:
    $ git checkout v0.16.0

32. v0.15.0 Jul 19, 2022 · release notes

    Adds support for inspecting and nuking Sagemaker notebook instances in cloud-nuke v0.15.0

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.15.0 https://github.com/gruntwork-io/cloud-nuke.git
    # already have the repo? check out this version:
    $ git checkout v0.15.0

    • Add capability to inspect and nuke AWS SageMaker notebook instances

    1 detail in Everything

33. v0.12.3 Jul 15, 2022 · release notes

    cloud-nuke v0.12.3 adds externalcreds.Set for passing external AWS configs via library

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.12.3 https://github.com/gruntwork-io/cloud-nuke.git
    # already have the repo? check out this version:
    $ git checkout v0.12.3

    └──▷ USE IT
    Integrate cloud-nuke into a Go application with custom AWS credentials
    go copy

    package main
    
    import (
    	"context"
    	"fmt"
    
    	"github.com/gruntwork-io/cloud-nuke/config"
    	"github.com/gruntwork-io/cloud-nuke/externalcreds"
    	cloudnuke "github.com/gruntwork-io/cloud-nuke/aws"
    	"github.com/gruntwork-io/go-commons/errors"
    	"github.com/aws/aws-sdk-go-v2/config"
    )
    
    func main() {
    	// Load external AWS configuration
    	aCfg, err := config.LoadDefaultConfig(context.TODO())
    	if err != nil {
    		err = errors.Access(err, "loading default config")
    		fmt.Println(errors.ToString(err))
    		return
    	}
    
    	// Inject the config into cloud-nuke
    	externalcreds.Set(&aCfg)
    
    	cfg := &config.Config{}
    	cloudnuke.CloudNukeAWS(cfg, nil, "2024-01-01T01:02:03Z", false)
    }

    • Adds Set method to the externalcreds package for supplying an external *aws.Config pointer

    1 detail in Everything

34. v0.12.0 Jul 7, 2022 · release notes

    cloud-nuke v0.12.0 adds GuardDuty Detector deletion with --exclude-resource-type guardduty flag

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.12.0 https://github.com/gruntwork-io/cloud-nuke.git
    # already have the repo? check out this version:
    $ git checkout v0.12.0

    └──▷ TRY IT
    Run cloud-nuke but keep your GuardDuty detectors intact.
    copy

    $ cloud-nuke aws --exclude-resource-type guardduty

    • Adds --exclude-resource-type guardduty CLI argument to control GuardDuty detector exclusion.
    • Enables deletion of AWS GuardDuty Detectors via the main cloud-nuke command.

    2 details in Everything

35. v0.11.8 Jun 8, 2022 · release notes

    cloud-nuke v0.11.8 adds non-destructive inspect-aws CLI command and Go library API support

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.11.8 https://github.com/gruntwork-io/cloud-nuke.git
    # already have the repo? check out this version:
    $ git checkout v0.11.8

    • Adds the inspect-aws subcommand to list or search for AWS resources without deleting anything.
    • Enables using cloud-nuke as a Go library by exposing its internal logic programmatically.

    2 details in Everything

36. v0.11.2 Mar 16, 2022 · release notes

    cloud-nuke v0.11.2 adds name-based filtering for ElasticIPs, AutoScalingGroups, LaunchConfigurations and EC2EC2Amazon's cloud virtual-machine service, letting tools run on-demand servers without managing physical hardware. instances via config file.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.11.2 https://github.com/gruntwork-io/cloud-nuke.git
    # already have the repo? check out this version:
    $ git checkout v0.11.2

    • Adds filter_by_name support in the config file to filter AutoScalingGroups by their names.
    • Adds filter_by_name support in the config file to filter LaunchConfigurations by their names.

    2 details in Everything

37. v0.11.0 Mar 11, 2022 · release notes

    Adds --exclude-resource-type cloudwatch-loggroup and CloudWatch Log Groups deletion support

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.11.0 https://github.com/gruntwork-io/cloud-nuke.git
    # already have the repo? check out this version:
    $ git checkout v0.11.0

    └──▷ TRY IT
    Delete all resources except CloudWatch Log Groups
    copy

    $ cloud-nuke --exclude-resource-type cloudwatch-loggroup

    Configure cloud-nuke to skip Log Groups by default
    yaml copy

    # Add the following to your config file:
    resource_types:
      exclude:
        - cloudwatch-loggroup

    • cloud-nuke will now delete CloudWatch Log Groups
    • Supports --exclude-resource-type cloudwatch-loggroup to avoid nuking Log Groups

    2 details in Everything

38. v0.10.0 Feb 1, 2022 · release notes

    Adds KMSKMSA managed service that creates, stores, rotates and controls access to encryption keys, usually backed by HSMs. Applications ask it to encrypt or decrypt rather than holding keys themselves. Customer Managed Keys support with --exclude-resource-type flag

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.10.0 https://github.com/gruntwork-io/cloud-nuke.git
    # already have the repo? check out this version:
    $ git checkout v0.10.0

    └──▷ USE IT
    Run cloud-nuke but exclude KMS Customer Managed Keys from being deleted.
    shell copy

    cloud-nuke --exclude-resource-type kmscustomerkeys

    • Config file can be used to specify resources to exclude from nuking.

    1 detail in Everything

    └──▷ BREAKING ON UPGRADE

    • !This release is considered backward incompatible as a new resource type (KMS Customer Managed Keys) is now included in the nuking process by default.
39. v0.9.0 Jan 18, 2022 · release notes

    cloud-nuke v0.9.0 adds support for nuking IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. providers

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.9.0 https://github.com/gruntwork-io/cloud-nuke.git
    # already have the repo? check out this version:
    $ git checkout v0.9.0

    └──▷ USE IT
    Nuke all resources except IAM OIDC Providers using a CLI flag.
    shell copy

    cloud-nuke --exclude-resource-type oidcprovider

    Nuke all resources except IAM OIDC Providers using the config file.
    config copy

    # In your cloud-nuke config file (e.g., .cloud-nuke/config.yaml)
    # Add or update the exclude_resource_types list:
    exclude_resource_types:
      - oidcprovider

    • Adds deletion of IAM OpenID ConnectOpenID ConnectOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. (OIDC) Providers
    • Adds --exclude-resource-type oidcprovider flag to exclude OIDC providers from nuking

    2 details in Everything

40. v0.8.0 Jan 12, 2022 · release notes

    cloud-nuke v0.8.0 now supports deleting Elasticache instances via --exclude-resource-type elasticache

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.8.0 https://github.com/gruntwork-io/cloud-nuke.git
    # already have the repo? check out this version:
    $ git checkout v0.8.0

    └──▷ USE IT
    Exclude ElastiCache clusters from a general nuke operation.
    shell copy

    cloud-nuke aws --exclude-resource-type elasticache

    • Adds support for nuking elasticache resource type to cover AWS ElastiCache clusters.

    1 detail in Everything

    └──▷ BREAKING ON UPGRADE

    • !The release is marked backward incompatible in the changelog to warn that a new resource type (Elasticache) is now included in nuking operations by default, though no flags or APIs were renamed.
41. v0.7.2 Jan 3, 2022 · release notes

    cloud-nuke v0.7.2 adds name-based filtering configuration for DynamoDB, ELBv2, ECSECSElastic Common Schema, an open specification maintained by Elastic that defines a standard field naming convention for log and event data, letting cyber tools share and correlate records without per-source field mapping. service, and ECS cluster resources.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.7.2 https://github.com/gruntwork-io/cloud-nuke.git
    # already have the repo? check out this version:
    $ git checkout v0.7.2

    • Adds exclude_name_regex support to DynamoDB, ELBv2, ECS service, and ECS cluster resource types in the config file

    1 detail in Everything

42. v0.7.0 Nov 16, 2021 · release notes

    Adds OpenSearchOpenSearchAn open-source search and analytics engine, forked from Elasticsearch by AWS in 2021, that lets cyber tools store, query, and visualize large volumes of log or event data without licensing restrictions. Service domain deletion support via --exclude-resource-type opensearch

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.7.0 https://github.com/gruntwork-io/cloud-nuke.git
    # already have the repo? check out this version:
    $ git checkout v0.7.0

    └──▷ TRY IT
    Nuke all resources except OpenSearch domains by using the exclusion flag.
    copy

    $ cloud-nuke --exclude-resource-type opensearch

    Configure cloud-nuke to permanently skip OpenSearch domains via a config file.
    yaml copy

    # Add to your config file:
    resource_types:
      exclude:
        - opensearch

    • cloud-nuke now deletes OpenSearch Service domains (formerly AWS Elasticsearch Service), with exclusion via --exclude-resource-type opensearch.
    • cloud-nuke now handles nuking of Managed Node groups and Fargate profiles attached to EKSEKSAmazon's managed Kubernetes service, run by AWS, that handles control-plane provisioning so teams can deploy containerized workloads without operating the underlying cluster infrastructure themselves. clusters.

    2 details in Everything

43. v0.6.0 Nov 12, 2021 · release notes

    Adds CloudWatch Dashboard deletion capability with --exclude-resource-type filtering

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.6.0 https://github.com/gruntwork-io/cloud-nuke.git
    # already have the repo? check out this version:
    $ git checkout v0.6.0

    └──▷ TRY IT
    Nuke all supported resources except CloudWatch Dashboards in the current AWS account.
    copy

    $ cloud-nuke --exclude-resource-type cloudwatch-dashboard

    • Adds --exclude-resource-type cloudwatch-dashboard flag to the CLI for excluding dashboards from nuking operations
    • Enables deletion of AWS CloudWatch Dashboards as a new resource type supported by cloud-nuke

    2 details in Everything

44. v0.5.2 Nov 3, 2021 · release notes

    cloud-nuke v0.5.2 adds support for nuking DynamoDB resources.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.5.2 https://github.com/gruntwork-io/cloud-nuke.git
    # already have the repo? check out this version:
    $ git checkout v0.5.2

    • Adds DynamoDB to the list of cloud services that can be nuked

    1 detail in Everything

45. v0.5.0 Aug 24, 2021 · release notes

    cloud-nuke v0.5.0 now supports deleting AWS ACM Private Certificate Authorities (PCAs)

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.5.0 https://github.com/gruntwork-io/cloud-nuke.git
    # already have the repo? check out this version:
    $ git checkout v0.5.0

    └──▷ TRY IT
    Nuke all supported cloud resources except ACM Private Certificate Authorities
    copy

    $ cloud-nuke --all --exclude-resource-type acmpca

    • Adds acmpca as a supported resource type for deletion
    • Adds the --exclude-resource-type acmpca flag to skip ACM PCA resources during nuke operations

    2 details in Everything

46. v0.4.0 Jul 26, 2021 · release notes

    Adds support for deleting AWS IAMAWS IAMAWS Identity and Access Management is Amazon's service for controlling who and what can call AWS APIs, by attaching policies that allow or deny actions on resources. Cyber tools use it to scope credentials to least privilege. Access Analyzers with --exclude-resource-type accessanalyzer

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.4.0 https://github.com/gruntwork-io/cloud-nuke.git
    # already have the repo? check out this version:
    $ git checkout v0.4.0

    └──▷ TRY IT
    Nuke all AWS resources while preserving Access Analyzers.
    copy

    $ cloud-nuke aws --exclude-resource-type accessanalyzer

    • Adds deletion of AWS IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. Access Analyzers; use --exclude-resource-type accessanalyzer to exclude them
    • Supports excluding resources via a config file as documented in the README

    2 details in Everything

47. v0.3.0 Jun 30, 2021 · release notes

    cloud-nuke v0.3.0 adds NAT gateway deletion capability

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.3.0 https://github.com/gruntwork-io/cloud-nuke.git
    # already have the repo? check out this version:
    $ git checkout v0.3.0

    └──▷ USE IT
    Delete all supported resources except NAT gateways in the current AWS account
    shell copy

    cloud-nuke --exclude-resource-type nat-gateway

    Configure cloud-nuke to permanently exclude NAT gateways from all future runs via config file
    yaml copy

    # Add the following to your cloud-nuke config file (default ~/.config/cloud-nuke/config.yaml):
    resources:
      excluded_types:
        - "nat-gateway"

    • Adds support for deleting nat-gateway resource types during cloud account cleanup operations
    • Adds --exclude-resource-type nat-gateway flag to skip NAT gateways during nuke operations

    2 details in Everything

48. v0.2.0 Jun 28, 2021 · release notes

    cloud-nuke v0.2.0 adds Secrets Manager support and marks new resources as minor bumps

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.2.0 https://github.com/gruntwork-io/cloud-nuke.git
    # already have the repo? check out this version:
    $ git checkout v0.2.0

    └──▷ USE IT
    Exclude Secrets Manager from nuking to prevent accidental deletion of active secrets
    shell copy

    cloud-nuke aws --exclude-resource-type secretsmanager

    Example config snippet to exclude secretsmanager
    yaml copy

    # In .config/cloud-nuke/config.yaml
    exclude_resource_types:
      - secretsmanager

    • Adds deletion of AWS Secrets Manager secrets via the secretsmanager resource type

    1 detail in Everything

    └──▷ BREAKING ON UPGRADE

    • !Addition of new nuked resources (including Secrets Manager secrets) is now a minor version bump (v0.X.Y) rather than patch, indicating potential disruption for CI practices that did not expect these resources to be deleted.
49. v0.1.24 Nov 23, 2020 · release notes

    cloud-nuke v0.1.24 adds Lambda resource support

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.1.24 https://github.com/gruntwork-io/cloud-nuke.git
    # already have the repo? check out this version:
    $ git checkout v0.1.24

    └──▷ TRY IT
    Nuke all Lambda functions in the current AWS profile
    copy

    $ cloud-nuke --resource-type lambda

    • Adds --resource-type lambda flag to enable nuking AWS Lambda functions

    1 detail in Everything

50. v0.1.22 Oct 13, 2020 · release notes

    Adds ecscluster resource support to cloud-nuke, enabling AWS ECSAWS ECSAmazon's managed container orchestration service that runs Docker containers on clusters of EC2 instances or Fargate, letting tools offload scheduling, scaling, and infrastructure management to AWS. cluster deletion and age filtering via CLI

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.1.22 https://github.com/gruntwork-io/cloud-nuke.git
    # already have the repo? check out this version:
    $ git checkout v0.1.22

    └──▷ TRY IT
    Delete all AWS ECSECSElastic Common Schema, an open specification maintained by Elastic that defines a standard field naming convention for log and event data, letting cyber tools share and correlate records without per-source field mapping. clusters older than 10 minutes using the new resource type support.
    copy

    $ cloud-nuke aws --resource-type ecscluster --older-than 10m

    • Adds support for nuking ecscluster resources on AWS with age-based filtering (e.g., --older-than).
    • New ecscluster value for the --resource-type flag.
    • Supports filtering ecscluster resources by age using the --older-than CLI argument.

    3 details in Everything

51. v0.1.20 Jun 17, 2020 · release notes

    Adds --config flag for granular filtering of cloud resources in cloud-nuke

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.1.20 https://github.com/gruntwork-io/cloud-nuke.git
    # already have the repo? check out this version:
    $ git checkout v0.1.20

    └──▷ TRY IT
    Filter nuked resources using an external YAML configuration file.
    copy

    $ cloud-nuke --config my-filters.yaml

    • Adds --config CLI flag to specify a configuration file for complex resource filtering

    1 detail in Everything

52. v0.1.18 Apr 14, 2020 · release notes

    Adds --log-level CLI flag and concurrent S3 bucket enumeration

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.1.18 https://github.com/gruntwork-io/cloud-nuke.git
    # already have the repo? check out this version:
    $ git checkout v0.1.18

    └──▷ USE IT
    Set verbose logging to debug specific cloud resource operations.
    shell copy

    cloud-nuke --log-level debug

    • Adds --log-level flag to control the log verbosity of cloud-nuke.
    • Speeds up S3 bucket enumeration by fetching bucket info concurrently (5-10x faster).

    2 details in Everything

53. v0.1.17 Apr 2, 2020 · release notes

    Adds S3 bucket nuking support and --exclude-resource-type CLI flag

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.1.17 https://github.com/gruntwork-io/cloud-nuke.git
    # already have the repo? check out this version:
    $ git checkout v0.1.17

    └──▷ TRY IT
    Exclude a specific resource type from a cloud nuke run
    copy

    $ cloud-nuke aws --exclude-resource-type s3

    Tag an S3 bucket to prevent it from being nuked in future runs
    copy

    $ # Tag the bucket with key `cloud-nuke-excluded` and value `true`
    aws s3api put-bucket-tagging --bucket <bucket-name> --tagging '{"TagSet": [{"Key": "cloud-nuke-excluded", "Value": "true"}]}'

    • Adds --exclude-resource-type CLI argument to omit specific resource types from the execution scope
    • Adds S3 bucket nuke capability with tag-based exclusion via the cloud-nuke-excluded=true key-value pair

    2 details in Everything

54. v0.1.13 Dec 9, 2019 · release notes

    cloud-nuke v0.1.13 adds --region filtering to defaults-aws and introduces --sg-only subcommand for SG-only nuking

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.1.13 https://github.com/gruntwork-io/cloud-nuke.git
    # already have the repo? check out this version:
    $ git checkout v0.1.13

    └──▷ USE IT
    Limit default VPCVPCA logically isolated virtual network inside a public cloud provider's infrastructure, letting tools deploy resources with private addressing, controlled routing, and firewall rules without managing physical hardware. and SG cleanup to a single AWS region instead of running globally.
    shell copy

    cloud-nuke defaults-aws --region us-east-1

    Nuke only default security group rules, ignoring default VPCsVPCsVirtual Private Clouds — isolated, software-defined network environments inside a public cloud provider such as AWS, Azure, or GCP — give cyber tools a controlled network boundary with configurable routing, subnets, and access rules..
    shell copy

    cloud-nuke defaults-aws --sg-only

    • defaults-aws now accepts --region and --exclude-region flags to reduce scope when nuking default VPCs and security group rules.
    • Adds --sg-only option to skip nuking default VPCs and only nuke default security group rules.

    2 details in Everything

55. v0.1.8 Aug 15, 2019 · release notes

    cloud-nuke v0.1.8 adds the defaults-aws subcommand to remove default VPCsVPCsVirtual Private Clouds — isolated, software-defined network environments inside a public cloud provider such as AWS, Azure, or GCP — give cyber tools a controlled network boundary with configurable routing, subnets, and access rules. and security groups

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.1.8 https://github.com/gruntwork-io/cloud-nuke.git
    # already have the repo? check out this version:
    $ git checkout v0.1.8

    └──▷ TRY IT
    Non-interactively remove all default VPCs and security groups from your AWS account for compliance or cleanup.
    copy

    $ ./cloud-nuke defaults-aws --force

    • Adds the cloud-nuke defaults-aws subcommand that identifies and removes default VPCs and their associated resources across all enabled AWS regions.
    • Adds support for the --force flag in cloud-nuke defaults-aws to enable non-interactive execution.

    2 details in Everything

56. v0.1.3 Oct 5, 2018 · release notes

    cloud-nuke v0.1.3 improves error resilience and adds EC2EC2Amazon's cloud virtual-machine service, letting tools run on-demand servers without managing physical hardware. launch configuration nuking

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.1.3 https://github.com/gruntwork-io/cloud-nuke.git
    # already have the repo? check out this version:
    $ git checkout v0.1.3

    • Continues nuking on individual resource errors instead of failing the entire run
    • Adds support for nuking EC2 Auto Scaling launch configurations

    2 details in Everything