config.yaml

# PathShield Configuration File

# AWS Configuration
aws:
  profile: "default"
  region: "us-east-1"
  # Optional: Assume a role for scanning
  role_arn: null
  # Optional: MFA serial for session token
  mfa_serial: null
  session_duration: 3600

# Logging Configuration
logging:
  level: "INFO"  # DEBUG, INFO, WARNING, ERROR
  format: "%(asctime)s - %(name)s - %(levelname)s - %(message)s"
  file: null  # Optional: path to log file
  verbose: false

# Output Configuration
output:
  format: "cli"  # cli, json, sarif, html
  output_file: null  # Optional: path to output file
  verbose: false

# Analysis Configuration
analysis:
  services:
    - ec2
    - lambda
    - s3
    - kms
    - rds
    - iam
  depth: 3  # Graph traversal depth for escalation path analysis
  include_metadata: true  # Include detailed metadata in output