nimbus-cli

AWS Security AI fix suggestions powered by Bedrock — no server needed.

Install

pip install nimbus-assist-cli

Or with pipx for isolated CLI installs (recommended):

pipx install nimbus-assist-cli

Prerequisites

• AWS credentials configured (aws configure or env vars)
• Bedrock model access enabled:
  • amazon.titan-embed-text-v2:0
  • anthropic.claude-haiku-4-5-20251001-v1:0

Usage

First-time setup

nimbus-cli --init
# or specify a region (default: us-east-1)
nimbus-cli --init --region us-east-2

Validates AWS credentials and provisions the RAG pipeline (S3 docs bucket, S3 Vectors, Bedrock KB).

Get AI fix suggestions

nimbus-cli --suggest-fix --text "S3 bucket is publicly accessible"
nimbus-cli --suggest-fix --text "EC2 instance has no IMDSv2 enforced"
nimbus-cli --suggest-fix --text "IAM role has wildcard * permissions"

Calls Bedrock directly — no backend server required.

Switch AWS account or refresh credentials

nimbus-cli --reconfigure
# or switch to a different region (warns if existing infra is in another region)
nimbus-cli --reconfigure --region us-east-1

Clears ~/.nimbus-cli.json and re-runs init with current credentials. Preserves the existing region unless --region is explicitly passed.

Tear down all AWS resources

nimbus-cli --destroy

Deletes the Bedrock KB, S3 buckets, vector store, IAM role, and local config.