You're reading from Cloud Penetration Testing Learn how to effectively pentest AWS, Azure, and GCP applications

Product type Paperback

Published in Nov 2023

Publisher Packt

ISBN-13 9781803248486

Length 298 pages

Edition 1st Edition

Tools

AWS

Concepts

Cloud Security

Author (1):

Kim Crawley

View More author details

Table of Contents (20) Chapters

Preface

1. Part 1: Today’s Cloud Networks and Their Security Implications

2. Chapter 1: How Do Enterprises Utilize and Implement Cloud Networks? FREE CHAPTER

3. Chapter 2: How Are Cloud Networks Cyber Attacked?

4. Chapter 3: Key Concepts for Pentesting Today’s Cloud Networks

5. Part 2: Pentesting AWS

6. Chapter 4: Security Features in AWS

7. Chapter 5: Pentesting AWS Features through Serverless Applications and Tools

8. Chapter 6: Pentesting Containerized Applications in AWS

9. Part 3: Pentesting Microsoft Azure

10. Chapter 7: Security Features in Azure

11. Chapter 8: Pentesting Azure Features through Serverless Applications and Tools

12. Chapter 9: Pentesting Containerized Applications in Azure

13. Part 4: Pentesting GCP

14. Chapter 10: Security Features in GCP

15. Chapter 11: Pentesting GCP Features through Serverless Applications and Tools

16. Chapter 12: Pentesting Containerized Applications in GCP

17. Chapter 13: Best Practices and Summary

18. Index

Why subscribe?

19. Other Books You May Enjoy

Security Features in GCP

Welcome to Google Cloud Platform, or GCP for short. GCP is the last of the top three most popular cloud platforms mentioned in this book. A lot of how GCP works is similar to AWS and Azure, but there are definitely some aspects to GCP that are unique and important for pentesters to understand before they pentest in the platform.

First, let’s examine some of the most commonly used aspects of the GCP ecosystem. In this chapter, you’ll learn about the most popular GCP services, applications, and features, and why they’re used. Next, we’ll look into GCP Software-as-a-Service (SaaS), Infrastructure-as-a-Service (IaaS), and Platform-as-a-Service (PaaS) features. We will conclude the chapter by discussing Google’s own GCP security tools and third-party security tools.

Before we pentest GCP, it helps to understand how the company we’re working for may use GCP, and what security features Google provides that can help pentesters...