- S3Scanner enumerates public AWS S3 buckets by provider keyword + suffix pattern - GCSScanner enumerates public GCS buckets with JSON listing format - Shared bucketNames() helper and isConfigFile() filter for config-pattern files - Both credentialless (anonymous HTTP), always Enabled, BaseURL override for tests