Cloud Penetration Testing

---
name: Cloud Penetration Testing
description: This skill should be used when the user asks to "perform cloud penetration testing", "assess Azure or AWS or GCP security", "enumerate cloud resources", "exploit cloud misconfigurations", "test O365 security", "extract secrets from cloud environments", or "audit cloud infrastructure". It provides comprehensive techniques for security assessment across major cloud platforms.
metadata:
  author: zebbern
  version: 4.1.0-fractal
---

# Cloud Penetration Testing

## Purpose

Conduct comprehensive security assessments of cloud infrastructure across Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP). This skill covers reconnaissance, authentication testing, resource enumeration, privilege escalation, data extraction, and persistence techniques for authorized cloud security engagements.

## Prerequisites

## 🧠 Knowledge Modules (Fractal Skills)

### 1. [Required Tools](./sub-skills/required-tools.md)
### 2. [Required Knowledge](./sub-skills/required-knowledge.md)
### 3. [Required Access](./sub-skills/required-access.md)
### 4. [Phase 1: Reconnaissance](./sub-skills/phase-1-reconnaissance.md)
### 5. [Phase 2: Azure Authentication](./sub-skills/phase-2-azure-authentication.md)
### 6. [Phase 3: Azure Enumeration](./sub-skills/phase-3-azure-enumeration.md)
### 7. [Phase 4: Azure Exploitation](./sub-skills/phase-4-azure-exploitation.md)
### 8. [Phase 5: Azure Persistence](./sub-skills/phase-5-azure-persistence.md)
### 9. [Phase 6: AWS Authentication](./sub-skills/phase-6-aws-authentication.md)
### 10. [Phase 7: AWS Enumeration](./sub-skills/phase-7-aws-enumeration.md)
### 11. [Phase 8: AWS Exploitation](./sub-skills/phase-8-aws-exploitation.md)
### 12. [Phase 9: AWS Persistence](./sub-skills/phase-9-aws-persistence.md)
### 13. [Phase 10: GCP Enumeration](./sub-skills/phase-10-gcp-enumeration.md)
### 14. [Phase 11: GCP Exploitation](./sub-skills/phase-11-gcp-exploitation.md)
### 15. [Azure Key Commands](./sub-skills/azure-key-commands.md)
### 16. [AWS Key Commands](./sub-skills/aws-key-commands.md)
### 17. [GCP Key Commands](./sub-skills/gcp-key-commands.md)
### 18. [Metadata Service URLs](./sub-skills/metadata-service-urls.md)
### 19. [Useful Tools](./sub-skills/useful-tools.md)
### 20. [Legal Requirements](./sub-skills/legal-requirements.md)
### 21. [Technical Limitations](./sub-skills/technical-limitations.md)
### 22. [Detection Considerations](./sub-skills/detection-considerations.md)
### 23. [Example 1: Azure Password Spray](./sub-skills/example-1-azure-password-spray.md)
### 24. [Example 2: AWS S3 Bucket Enumeration](./sub-skills/example-2-aws-s3-bucket-enumeration.md)
### 25. [Example 3: GCP Service Account Compromise](./sub-skills/example-3-gcp-service-account-compromise.md)