B3: Cloud, Containers & Kubernetes
Cloud Pentesting Deep: AWS, Azure & GCP
Cloud identity, storage, metadata, logging, lateral movement, and assessment tools.
Open the interactive lesson & lab →
Cloud pentesting is identity and configuration testing at scale. The target is accounts, subscriptions, projects, IAM, storage, serverless, secrets, networking, and logs.
| Provider | Identity model | Common risk areas |
|---|---|---|
| AWS | Accounts, IAM users/roles/policies, STS | Overbroad IAM, public S3, metadata exposure, Lambda secrets, weak org boundaries. |
| Azure | Tenants, Entra ID, subscriptions, managed identities | App registrations, role assignments, Key Vault access, storage exposure, conditional access gaps. |
| GCP | Organizations, folders, projects, service accounts | Service account keys, IAM bindings, storage buckets, Cloud Functions, metadata scopes. |
- Pacu helps model AWS attack paths in an authorized lab or assessment.
- ScoutSuite helps audit cloud posture across providers and produce evidence.
- Cloud provider CLIs are essential because real assessment work is API-driven.
- Logs matter: CloudTrail, Azure Activity Logs, Entra sign-ins, and GCP Audit Logs tell the story.