Perform Cloud Penetration Tests

This skill enables comprehensive security assessments of cloud infrastructure across the three major cloud platforms: Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP). It covers reconnaissance, authentication testing, resource enumeration, privilege escalation, data extraction, and persistence techniques for authorized cloud security engagements.

Use this skill when conducting authorized security assessments of your organization's cloud infrastructure, performing red team exercises to validate cloud security controls, or testing the effectiveness of cloud security monitoring and incident response capabilities. It is appropriate for security teams evaluating multi-cloud environments or assessing cloud migration security posture.

Do NOT use this skill for unauthorized testing of cloud infrastructure you do not own or have explicit written permission to assess. Do NOT use it for production environments without proper change control, backup procedures, and stakeholder approval, as penetration testing activities can impact availability and trigger security alerts.

Users provide cloud environment credentials or access tokens, scope definitions specifying which cloud resources and services are in-scope for testing, and authorization documentation for the security engagement. The testing parameters should include the specific cloud platforms (Azure, AWS, or GCP) and the depth of assessment required.

The skill returns comprehensive security assessment findings covering reconnaissance results, authentication testing results, enumerated cloud resources, identified privilege escalation paths, data extraction findings, and potential persistence mechanisms.

This skill is for those conducting authorized security assessments of cloud infrastructure across Azure, AWS, and GCP.