https://cybertoolchain.io/tools/cloud-nuke New releases and features in cloud-nuke, tracked by The Cyber Toolchain. en Sat, 13 Jun 2026 23:44:21 GMT https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.52.0 https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.52.0 Sat, 13 Jun 2026 23:44:21 GMT cloud-nuke v0.52.0 adds parallel scanning and nuking with a new `--parallelism` flag for faster multi-region teardowns. • New `--parallelism` flag (default 10) controls concurrent resource discovery and deletion across regions and resource types under a single global concurrency cap. • Regional resources are nuked concurrently while global resources (IAM, Route53, CloudFront) are deleted last, with within-region dependency order preserved. Breaking changes: • `aws.NukeAllResources` and `gcp.NukeAllResources` now require an additional `parallelism int` parameter, breaking any library consumers that call these functions directly. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloud-nuke https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.52.0 https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.52.0 Sat, 13 Jun 2026 23:44:21 GMT cloud-nuke v0.52.0 adds parallel scanning and deletion via a new --parallelism flag, dramatically speeding up multi-region cleanups. • Adds `--parallelism` flag (default 10) to control concurrent scanning and deletion of regions and resource types under a single global concurrency cap. • Enables concurrent nuking of regional resources while preserving within-region dependency order; global resources (IAM, Route53, CloudFront) are deleted last. • Breaking change for library consumers: `aws.NukeAllResources` and `gcp.NukeAllResources` now require an additional `parallelism int` parameter. Breaking changes: • Library consumers: `aws.NukeAllResources` and `gcp.NukeAllResources` now take an additional `parallelism int` parameter. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloud-nuke https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.51.0 https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.51.0 Wed, 10 Jun 2026 04:25:08 GMT cloud-nuke v0.51.0 adds AWS Backup Plan support and dry-run mode for defaults-aws • New `backup-plan` resource type enables nuking of AWS Backup plans. • Adds `--dry-run` flag to the `defaults-aws` command to preview which default VPCs and security group rules would be deleted before committing. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloud-nuke https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.49.0 https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.49.0 Tue, 14 Apr 2026 01:35:38 GMT cloud-nuke v0.49.0 adds RAM ResourceShares, Amazon MQ, and RDS cluster snapshots plus sweeping tag-filtering across 20+ resource types. • Adds support for nuking AWS RAM ResourceShares (`resource-shares` resource type). • Adds support for nuking Amazon MQ broker resources. • Adds support for nuking RDS cluster snapshots (`rds-cluster-snapshot` resource type). • Adds `SetConfigProvider` for programmatic AWS config injection when using cloud-nuke as a library. • Adds tag filtering support for Backup Vault resources. • Adds tag filtering support for RDS and ElastiCache resources. • Adds tag filtering support for EC2, ELB, and VPC Lattice resources. • Adds tag filtering support for CloudWatch, EventBridge, and DynamoDB resources. • Adds tag filtering support for Lambda, Kinesis, SNS, SQS, and ECR resources. • Adds tag filtering support for ACM, CloudFront, SageMaker, and miscellaneous resources. • Adds tag filtering support for CodeDeploy applications. • Adds tag filtering support for Security Hub. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloud-nuke https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.48.0 https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.48.0 Tue, 24 Mar 2026 22:49:37 GMT cloud-nuke v0.48.0 adds support for nuking AWS SSM Parameter Store resources. • Adds SSM Parameter Store as a supported resource type for discovery and deletion. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloud-nuke https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.47.0 https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.47.0 Sun, 22 Mar 2026 19:44:49 GMT cloud-nuke v0.47.0 adds AWS Data Pipeline, GCP Cloud Functions Gen2/Artifact Registry/Pub-Sub support, and a new --include-tag CLI flag. • Adds support for nuking AWS Data Pipeline resources. • Adds GCP Cloud Functions (Gen2) as a nuke-able resource type. • Adds GCP Artifact Registry as a nuke-able resource type. • Adds GCP Pub/Sub topic resource with first-seen label support. • New `--include-tag` CLI flag enables global tag-based resource filtering across all resource types. Breaking changes: • Config YAML keys are now case-sensitive and must match Go struct names exactly (e.g., `s3` → `S3`, `NatGateway` → `NATGateway`, `EcsCluster` → `ECSCluster`, `EksCluster` → `EKSCluster`, `RdsParameterGroup` → `RDSParameterGroup`); old keys are rejected with errors. • The `tag` and `tag_value` config fields have been removed; replace them with the `tags` map syntax (`tags:\n my-tag: my-value`). • Unknown fields in config YAML now cause errors instead of being silently ignored. • Some resource type names used with `--resource-type` have changed; run `cloud-nuke inspect` to see current names. • Nuke() now returns `[]NukeResult` instead of `error`. • GetAllResources() now requires an additional `*reporting.Collector` parameter. • The `report/` and `ui/` packages have been replaced by `reporting/` and `renderers/`. • The `PrepareContext` and `IsGlobal` interfaces have been removed. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloud-nuke https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.46.0 https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.46.0 Fri, 19 Dec 2025 03:33:37 GMT cloud-nuke v0.46.0 adds support for nuking Redshift Snapshot Copy Grants. • Adds support for nuking Redshift Snapshot Copy Grants as a new resource type. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloud-nuke https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.44.0 https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.44.0 Fri, 24 Oct 2025 03:31:55 GMT cloud-nuke v0.44.0 adds tag-based filtering support for ECS services, EC2 launch templates, and CloudMap namespaces/services. • Adds tag filtering support for ECS services, enabling inclusion/exclusion of services by tag when nuking. • Adds tag filtering support for CloudMap namespaces and services. • Enables tag filtering for EC2 launch templates. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloud-nuke https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.43.0 https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.43.0 Sun, 28 Sep 2025 23:57:37 GMT cloud-nuke v0.43.0 adds AWS Cloud Map, CloudFormation stacks, JSON output, and tag filtering for Launch Templates, ECS clusters, Lambda, and Secrets Manager. • Adds support for nuking AWS Cloud Map resources. • Adds support for nuking AWS CloudFormation stacks. • Adds JSON output format support (`--output json`) for machine-readable results. • Adds tag-based filtering for EC2 Launch Templates. • Adds tag-based filtering for ECS clusters. • Adds tag-based filtering for Lambda Functions. • Adds tag-based filtering for Secrets Manager secrets. • Adds deletion-protection handling for RDS clusters, automatically disabling it before deletion. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloud-nuke https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.42.0 https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.42.0 Sat, 02 Aug 2025 14:51:49 GMT cloud-nuke v0.42.0 adds GCP support and tag filtering for IAM roles, OIDC providers, IAM policies, and Route53 hosted zones. • Extends cloud-nuke to support GCP nuking operations alongside AWS. • Adds tag filtering support for OIDC providers, enabling include/exclude by tag. • Adds tag filtering support for IAM roles, enabling include/exclude by tag. • Adds tag filtering support for Route53 hosted zones, enabling include/exclude by tag. • Adds tag filtering support for IAM policies, enabling include/exclude by tag. • Automatically excludes AWS-managed service-linked IAM roles from nuke operations. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloud-nuke https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.41.0 https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.41.0 Sun, 15 Jun 2025 16:36:46 GMT cloud-nuke v0.41.0 adds SageMaker Endpoints, CloudFront distributions, S3 lifecycle rules, and CloudTrail tag filtering. • Adds support for nuking SageMaker Endpoint resources. • Adds support for nuking SageMaker Endpoint Configuration resources. • Adds support for nuking CloudFront distributions. • Adds tag-based filtering support for CloudTrail resources. • Adds nuking of S3 bucket lifecycle configurations. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloud-nuke https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.40.0 https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.40.0 Sat, 29 Mar 2025 22:58:24 GMT cloud-nuke v0.40.0 adds IAM instance profile nuking and automatic deletion-protection bypass. • Adds support for nuking AWS IAM instance profiles as a targetable resource type. • Automatically disables deletion protection on supported resources before nuking, unblocking previously protected resources. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloud-nuke https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.39.0 https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.39.0 Wed, 19 Mar 2025 01:04:55 GMT cloud-nuke v0.39.0 adds SageMaker Studio domain nuking, multi-tag exclusions, and env-based global region override. • Adds support for nuking SageMaker Studio domains as a new resource type. • Enables exclusion of resources using multiple tags simultaneously in config. • Allows the global region to be overridden via environment variable. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloud-nuke https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.38.0 https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.38.0 Tue, 17 Dec 2024 21:27:50 GMT cloud-nuke v0.38.0 adds China region support, EventBridge, ElastiCache Serverless, Grafana, and TGW Peering Attachment resources. • Adds support for AWS China region, enabling cloud-nuke to target China-region resources. • Adds EventBridge resource support for discovery and nuking of EventBridge resources. • Adds ElastiCache Serverless and Grafana as nukeable resource types. • Adds Transit Gateway Peering Attachment as a nukeable resource type. • Adds support for a `cloud-nuke-excluded` tag on VPCs to protect them from being nuked. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloud-nuke https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.37.2 https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.37.2 Wed, 28 Aug 2024 20:27:59 GMT cloud-nuke v0.37.2 adds resource protection via `cloud-nuke-after`, EC2 Placement Group support, and enables `--exclude-first-seen`. • New `cloud-nuke-after` feature lets you protect resources from being nuked until after a specified time. • Enables the `--exclude-first-seen` flag for the `aws` command, letting you skip resources whose first-seen timestamp predates a threshold. • Adds support for nuking EC2 Placement Groups as a new resource type. • Adds AWS SDK v2 support to enable targeting newer AWS resource types. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloud-nuke https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.37.0 https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.37.0 Wed, 03 Jul 2024 21:53:01 GMT Adds nuking support for Network Firewall, VPC Lattice, Kinesis Firehose, RDS Proxy, App Runner, DataSync and more • `cloud-nuke` now nukes Network Firewall resources (e.g., `network-firewall/resource-policies`, `network-firewall/firewalls`). • `cloud-nuke` now nukes VPC Lattice services (via the new `vpc-lattice` resource class). • `cloud-nuke` now nukes Kinesis Firehose delivery streams. • `cloud-nuke` now nukes RDS Proxy instances and proxy targets. • Adds support for nuking App Runner services (`apprunner/service`). • Adds support for nuking DataSync Tasks (`datasync/task`) and DataSync Locations (`datasync/location`). • `cloud-nuke` can now skip the 'cloud-nuke-first-seen' tag addition via a new configuration option. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloud-nuke https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.36.0 https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.36.0 Fri, 24 May 2024 16:40:28 GMT Adds Network Firewall, VPC peer connection, and Secrets Manager resource nuking capabilities • Adds `Network Firewall` resource nuking support via the existing `cloud-nuke` CLI. • Adds `VPC Peer Connection` resource nuking support via the existing `cloud-nuke` CLI. • Adds additional patterns for removing `Secrets Manager` resources. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloud-nuke https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.33.0 https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.33.0 Wed, 22 Nov 2023 07:56:13 GMT cloud-nuke v0.33.0 adds backup-vault support, newer_than filter, and tag-based inclusion/exclusion rules • Adds `backup-vault` to supported resource types for nuking. • Adds `newer_than` configuration key to filter resources by creation time. • Adds tag-based inclusion and exclusion filtering support via configuration keys. • Adds Amazon Managed Streaming for Apache Kafka (MSK) resource type support. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloud-nuke https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.32.0 https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.32.0 Mon, 03 Jul 2023 14:39:15 GMT cloud-nuke v0.32.0 adds nuke support for ACM, CodeDeploy, SNS filters, and RDS subnet groups • Adds ACM support to cloud-nuke's deletion capabilities • Adds CodeDeploy support to cloud-nuke's deletion capabilities • Adds ability to filter SNS resources by name and time via new filter logic • Implements nukeAllRdsDbSubnetGroups to delete all RDS subnet groups Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloud-nuke https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.31.0 https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.31.0 Tue, 09 May 2023 16:51:42 GMT cloud-nuke v0.31.0 adds Security Hub and Macie resource support • Adds AWS Security Hub resource type support for nuking findings and standards subscriptions • Updates Macie support to handle additional resource types and configurations Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloud-nuke https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.30.0 https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.30.0 Thu, 04 May 2023 12:59:42 GMT cloud-nuke v0.30.0 adds AWS ElastiCache and Redshift resource support • Adds `elasticache` parameter and subnet groups to supported resources • Adds `redshift` cluster support Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloud-nuke https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.29.4 https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.29.4 Thu, 13 Apr 2023 19:05:28 GMT Adds --delete-unaliased-kms-keys flag to enable deletion of KMS keys without aliases • Adds `--delete-unaliased-kms-keys` CLI flag to control whether unaliased KMS keys are deleted Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloud-nuke https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.28.0 https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.28.0 Tue, 04 Apr 2023 15:33:56 GMT cloud-nuke v0.28.0 adds support for deleting CloudWatch alarms • Adds `CloudWatchAlarm` resource type to the deletion workflow Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloud-nuke https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.23.0 https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.23.0 Fri, 20 Jan 2023 15:45:29 GMT cloud-nuke v0.23.0 adds support for nuking EC2 Dedicated Hosts and ECR resources • Adds `EC2 Dedicated Host` to the list of supported resource types that cloud-nuke can delete Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloud-nuke https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.22.0 https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.22.0 Wed, 14 Dec 2022 21:12:17 GMT cloud-nuke v0.22.0 adds IAM instance profile and EC2 key pair support, --log-level for inspect-aws, and rate limiting • Adds the `--log-level` flag to the `inspect-aws` command to control console output verbosity. • Adds support for deleting KMS key aliases in addition to standard KMS keys. • Adds the ability to delete EC2 key pairs via cloud-nuke. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloud-nuke https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.21.0 https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.21.0 Mon, 31 Oct 2022 15:41:54 GMT cloud-nuke v0.21.0 adds IAM group and customer managed policy support • Adds support for nuking IAM groups • Adds support for inspecting IAM groups • Adds support for nuking customer managed policies • Adds support for inspecting customer managed policies Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloud-nuke https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.15.0 https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.15.0 Tue, 19 Jul 2022 17:19:10 GMT Adds support for inspecting and nuking Sagemaker notebook instances in cloud-nuke v0.15.0 • Add capability to inspect and nuke AWS SageMaker notebook instances Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloud-nuke https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.12.3 https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.12.3 Fri, 15 Jul 2022 18:46:08 GMT cloud-nuke v0.12.3 adds `externalcreds.Set` for passing external AWS configs via library • Adds `Set` method to the `externalcreds` package for supplying an external `*aws.Config` pointer Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloud-nuke https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.11.2 https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.11.2 Wed, 16 Mar 2022 23:34:43 GMT cloud-nuke v0.11.2 adds name-based filtering for ElasticIPs, AutoScalingGroups, LaunchConfigurations and EC2 instances via config file. • Adds `filter_by_name` support in the config file to filter AutoScalingGroups by their names. • Adds `filter_by_name` support in the config file to filter LaunchConfigurations by their names. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloud-nuke https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.11.0 https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.11.0 Fri, 11 Mar 2022 16:57:01 GMT Adds `--exclude-resource-type cloudwatch-loggroup` and CloudWatch Log Groups deletion support • `cloud-nuke` will now delete CloudWatch Log Groups • Supports `--exclude-resource-type cloudwatch-loggroup` to avoid nuking Log Groups Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloud-nuke https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.10.0 https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.10.0 Tue, 01 Feb 2022 20:41:41 GMT Adds KMS Customer Managed Keys support with `--exclude-resource-type` flag • Config file can be used to specify resources to exclude from nuking. Breaking changes: • This release is considered backward incompatible as a new resource type (KMS Customer Managed Keys) is now included in the nuking process by default. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloud-nuke https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.9.0 https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.9.0 Tue, 18 Jan 2022 20:42:31 GMT cloud-nuke v0.9.0 adds support for nuking IAM OIDC providers • Adds deletion of IAM OpenID Connect (OIDC) Providers • Adds `--exclude-resource-type oidcprovider` flag to exclude OIDC providers from nuking Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloud-nuke https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.7.2 https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.7.2 Mon, 03 Jan 2022 20:43:50 GMT cloud-nuke v0.7.2 adds name-based filtering configuration for DynamoDB, ELBv2, ECS service, and ECS cluster resources. • Adds `exclude_name_regex` support to DynamoDB, ELBv2, ECS service, and ECS cluster resource types in the config file Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloud-nuke https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.7.0 https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.7.0 Tue, 16 Nov 2021 17:59:05 GMT Adds OpenSearch Service domain deletion support via `--exclude-resource-type opensearch` • `cloud-nuke` now deletes OpenSearch Service domains (formerly AWS Elasticsearch Service), with exclusion via `--exclude-resource-type opensearch`. • `cloud-nuke` now handles nuking of Managed Node groups and Fargate profiles attached to EKS clusters. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloud-nuke https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.6.0 https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.6.0 Fri, 12 Nov 2021 18:19:38 GMT Adds CloudWatch Dashboard deletion capability with `--exclude-resource-type` filtering • Adds `--exclude-resource-type cloudwatch-dashboard` flag to the CLI for excluding dashboards from nuking operations • Enables deletion of AWS CloudWatch Dashboards as a new resource type supported by cloud-nuke Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloud-nuke https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.5.2 https://github.com/gruntwork-io/cloud-nuke/releases/tag/v0.5.2 Wed, 03 Nov 2021 17:30:50 GMT cloud-nuke v0.5.2 adds support for nuking DynamoDB resources. • Adds `DynamoDB` to the list of cloud services that can be nuked Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloud-nuke