Cloud Penetration Fundamentals
Course Description
Foundation course for cloud security testing. Learn common patterns and vulnerabilities across AWS, Azure, and GCP.
Course Structure
Modules
Module 1: Cloud Fundamentals (5h)
- Cloud service models
- Shared responsibility
- Multi-cloud overview
- Testing authorization
Module 2: IAM Security (7h)
- Identity concepts
- Policy analysis
- Privilege escalation
- Cross-account access
Module 3: Storage Security (6h)
- Object storage
- Access controls
- Encryption
- Data exposure
Module 4: Network Security (6h)
- VPC/VNet concepts
- Security groups
- Network ACLs
- Peering attacks
Module 5: Compute Security (6h)
- VM security
- Metadata attacks
- Serverless security
- Container security
Module 6: Detection & Logging (5h)
- CloudTrail/Activity Log
- Evasion techniques
- Detection rules
- Incident response
Tools
| Tool | Purpose |
|---|---|
| ScoutSuite | Multi-cloud audit |
| Prowler | AWS security |
| CloudSploit | Scanning |
| Steampipe | SQL queries |
📄️ Overview
Introduction to cloud security testing: concepts, tools, and methodologies