cloud-penetration-testing - Assess Azure, AWS, and GCP cloud security
Conduct authorized security assessments of Azure, AWS, and GCP infrastructure, including reconnaissance, authentication testing, enumeration, exploitation, data extraction, and persistence testing.
Tags
Updated: 2026-09-28Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Reconnoiter cloud environments
- Test cloud authentication
- Enumerate cloud resources
- Exploit cloud misconfigurations
- Extract exposed credentials
- Execute commands on virtual machines
- Establish cloud persistence
- Assess IAM permissions
- Analyze serverless functions
- Generate security findings
Inputs
- Target cloud infrastructure
- Test credentials or access tokens
- Written authorization
- Testing scope
- Rules of engagement
- Target company name
- Resource inventory files
Outputs
- Cloud security assessment report
- Resource inventory
- Credential findings
- Risk ratings
- Remediation recommendations
- Enumerated cloud resources
- Extracted data
- Cloud configuration changes
Requirements
- Azure PowerShell modules
- MSOnline module
- AzureAD module
- AWS CLI
- GCP CLI
- ScoutSuite
- Pacu
- Cloud architecture knowledge
- IAM knowledge
- API authentication knowledge
- DevOps knowledge
- Authorized cloud access