You're reading from Cloud Penetration Testing Learn how to effectively pentest AWS, Azure, and GCP applications

Product type Paperback

Published in Nov 2023

Publisher Packt

ISBN-13 9781803248486

Length 298 pages

Edition 1st Edition

Tools

AWS

Concepts

Cloud Security

Author (1):

Kim Crawley

View More author details

Table of Contents (20) Chapters

Preface

1. Part 1: Today’s Cloud Networks and Their Security Implications

2. Chapter 1: How Do Enterprises Utilize and Implement Cloud Networks? FREE CHAPTER

3. Chapter 2: How Are Cloud Networks Cyber Attacked?

4. Chapter 3: Key Concepts for Pentesting Today’s Cloud Networks

5. Part 2: Pentesting AWS

6. Chapter 4: Security Features in AWS

7. Chapter 5: Pentesting AWS Features through Serverless Applications and Tools

8. Chapter 6: Pentesting Containerized Applications in AWS

9. Part 3: Pentesting Microsoft Azure

10. Chapter 7: Security Features in Azure

11. Chapter 8: Pentesting Azure Features through Serverless Applications and Tools

12. Chapter 9: Pentesting Containerized Applications in Azure

13. Part 4: Pentesting GCP

14. Chapter 10: Security Features in GCP

15. Chapter 11: Pentesting GCP Features through Serverless Applications and Tools

16. Chapter 12: Pentesting Containerized Applications in GCP

17. Chapter 13: Best Practices and Summary

18. Index

Why subscribe?

19. Other Books You May Enjoy

AWS IaaS features

IaaS or infrastructure-as-a-service features are the parts of AWS where enterprises have the most control and the most responsibility. There’s more that pentesters are allowed to do with these components than with PaaS and SaaS. But you are still on Amazon’s infrastructure, therefore they still have rules of engagement to abide by. Refer to AWS’s pentesting policies in Chapters 2 and 3, or you can find them on their website (https://aws.amazon.com/security/penetration-testing/).

AWS IaaS can be divided into two general categories: compute and storage.

Compute services

Amazon EC2 is AWS’s debut compute service. It stands for Amazon Elastic Compute Cloud. EC2 is largely used by enterprises that develop their own software but need tons and tons of computer processing power to process their databases, conduct scientific research, and so on.

I’ll summarize some company testimonials.

Orangetheory Fitness is a popular gym...