Cloud Security & Attack

When to Activate

• Cloud infrastructure penetration testing
• AWS/Azure/GCP privilege escalation
• Container and Kubernetes security assessment
• Serverless function exploitation
• IaC (Terraform/CloudFormation) security review
• Cloud credential abuse and lateral movement

AWS Attacks

Initial Enumeration

# Caller identity
aws sts get-caller-identity