Cloud Penetration Testing - Assess Azure, AWS, and GCP cloud security
Conducts authorized security assessments of Azure, AWS, and GCP infrastructure, including reconnaissance, authentication testing, resource enumeration, misconfiguration testing, and persistence analysis.
Tags
Updated: 2026-09-28Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Assess Azure security
- Assess AWS security
- Assess GCP security
- Enumerate cloud resources
- Test cloud authentication
- Identify cloud misconfigurations
- Extract exposed secrets
- Analyze persistence mechanisms
Inputs
- Target cloud platforms
- Testing scope
- Test credentials
- Access tokens
- Target domains
- Target IP addresses
- Cloud account configurations
- Rules of engagement
Outputs
- Cloud security assessment report
- Resource inventory
- Credential findings
- Risk ratings
- Remediation recommendations
- Created cloud identities
- Created access keys
Requirements
- Azure PowerShell modules
- AWS CLI
- GCP CLI
- ScoutSuite
- Pacu
- Written testing authorization
- Defined test scope