Multi-Cloud Security Audit (AWS/Azure/GCP) (offensive-cloud)

Authorization & Scope Notice: This skill is part of the REA_Skill + claude-red Unified Security & Reverse Engineering Suite. It is designed strictly for authorized security assessments, defensive architecture reviews, vulnerability triage, bug bounty verification, and remediation engineering on software, infrastructure, and assets you own or have explicit permission to test.

Overview

AWS, Azure, and GCP cloud security assessment covering IAM privilege escalation paths (iam:PassRole, policy versioning, Azure RBAC/Entra roles, GCP service account impersonation), storage bucket public exposure, IMDSv2 enforcement, and VPC endpoints.

Operational Workflow