/iblai-security-cloud-audit

Audit AWS, GCP, and Azure infrastructure for misconfigurations, excessive permissions, public exposure, and compliance gaps.

Do NOT touch accounts or projects the user doesn't have access to. Do NOT exploit findings — produce remediation, not attacks.

Step 0: Scope the Audit

1. Cloud provider(s) and account(s).
2. Regions in scope.
3. CLI access (aws, gcloud, az) or IaC files (Terraform, CloudFormation, Pulumi).

Audit Categories

Identity and Access Management

AWS: