ask command allows you to query your cloud infrastructure using natural language. The AI analyzes your question, determines what operations are needed, executes them, and provides a comprehensive response.
Usage
Examples
Cloud provider flags
Include AWS infrastructure context in the query
Include GCP infrastructure context in the query
Include Azure infrastructure context in the query
Include Cloudflare infrastructure context in the query
Include GitHub repository context in the query
Include Terraform workspace context in the query
Route query to IAM agent for security analysis
AWS-specific flags
AWS profile to use for infrastructure queries
Run comprehensive infrastructure discovery across all AWS services
Generate compliance report showing all services, ports, and protocols (SSP format)
GCP-specific flags
GCP project ID to use for infrastructure queries
Azure-specific flags
Azure subscription ID to use for infrastructure queries
IAM-specific flags
Scope IAM query to a specific role ARN
Scope IAM query to a specific policy ARN
Terraform flags
Terraform workspace to use for infrastructure queries
AI provider flags
AI profile to use (overrides config default)
OpenAI API key (overrides config)
Anthropic API key (overrides config)
Gemini API key (overrides config and env vars)
DeepSeek API key (overrides config)
MiniMax API key (overrides config)
OpenAI model to use (overrides config)
Anthropic model to use (overrides config)
Gemini model to use (overrides config)
DeepSeek model to use (overrides config)
MiniMax model to use (overrides config)
Maker mode flags
Generate an AWS, GCP, Azure, or Cloudflare CLI plan (JSON) for infrastructure changes instead of executing a query
Allow destructive operations when using
--maker (requires explicit confirmation)Apply an approved maker plan (reads from stdin unless
--plan-file is provided)Path to maker plan JSON file for
--applyAdvanced flags
Show detailed coordinator agent lifecycle logs (overrides config)
Return routing decision as JSON without executing (for backend integration)
Discovery mode
Discovery mode enables comprehensive infrastructure analysis:- Enables AWS and Terraform contexts
- Scans all active AWS services
- Includes IAM roles and permissions
- Provides complete infrastructure inventory
Compliance mode
Generate SSP (System Security Plan) compliance reports:- Reference number for each service
- System name and vendor
- Ports and protocols used
- External IP addresses
- Security measures and mitigations
- Hosting environment details
- Risk/impact analysis
Tool calling
When AWS or GitHub contexts are enabled, the AI can execute operations:Output
The command outputs markdown-formatted responses with:- Structured tables for resource listings
- Code blocks for configuration details
- Links to relevant documentation
- Actionable recommendations
See also
- AWS maker command - Generate infrastructure plans
- AWS apply command - Execute infrastructure plans
- Configuration - Configure AI providers and credentials