B3: Cloud, Containers & Kubernetes

AWS/Azure/GCP Assessment Playbooks

Provider-specific checklists for authorized reviews and lab practice.

Advanced · 30 min

Open the interactive lesson →

1. Confirm written scope: accounts/subscriptions/projects, regions, allowed tests, and excluded services.
2. Inventory identities: users, roles, groups, service principals/accounts, access keys, and trust relationships.
3. Inventory internet exposure: load balancers, public IPs, storage buckets, CDN origins, serverless endpoints.
4. Review secrets: vaults, parameter stores, CI/CD variables, function env vars, and long-lived keys.
5. Assess logging: retention, tamper resistance, alerting, and coverage for identity and data access.
6. Report attack paths as business risk: data exposure, privilege escalation, persistence, or account takeover.

Take the quiz →