LearnTrack
Cloud
A cloud test reviews what an identity can do in an AWS, Azure, Google Cloud or Oracle Cloud account, starting from a read-only review role or a key found on another test. It is not a test of the applications running in the account, and nothing in it changes the account unless the client grants that change in writing.
1 page
What am I looking at
- I have an AWS access key Escalation Cloud pentest: AWS and Azure IAM enumeration
- I have an Azure sign-in or a service principal Escalation Cloud pentest: AWS and Azure IAM enumeration
- I have a read-only review role Escalation Cloud pentest: AWS and Azure IAM enumeration
- I have a Google Cloud service account key Escalation Not yet written
- I have a storage bucket name and no credentials Recon Not yet written
Kill chain
-
Recon
Not yet written.
-
Access
Not yet written.
-
Escalation
- Cloud pentest: AWS and Azure IAM enumeration Cloud tests usually start one of two ways: the client hands us a read-only role for a configuration review, or we find a key during another test and the rules let us see how far it reaches. Either way the first hour is the same four questions: who am I, what can I do, where are the secrets, and is anyone watching?
-
Persistence
Not yet written.
-
Impact
Not yet written.
-
Report
Not yet written.