Cloud CTF

Goal: solve cloud security CTF tasks by enumerating from a known entry point, confirming identity and permissions at every hop, and following the shortest validated path to the objective.

When this skill applies

• Leaked AWS access key / secret key pair in a challenge description.
• AWS ARN unique ID (AROA, AIDA, ASIA, AKIA prefix) to resolve.
• GCP service account JSON key file provided.
• Azure credentials, tenant/subscription context, managed-identity shell, storage URL, SAS token, or Key Vault clue provided.
• SSH access to a cloud VM instance.
• Challenge involves S3/GCS/Blob buckets, IAM roles, KMS keys, EC2 snapshots, Firestore, WorkDocs, Secret Manager, or cloud metadata.

Operating model