domains / families / security / conducting-cloud-penetration-testing

conducting-cloud-penetration-testing

separate

'This skill outlines methodologies for performing authorized penetration

When to use

• When performing authorized security assessments of cloud environments before production deployment
• When validating cloud security controls after a major architectural change or migration
• When compliance requirements mandate annual penetration testing of cloud infrastructure
• When testing incident response readiness by simulating realistic cloud-based attack scenarios
• When assessing lateral movement risk across multi-account or multi-cloud environments

When not to use

• unauthorized testing against cloud accounts
• testing cloud provider infrastructure itself
• DDoS simulation without explicit cloud provider approval

Skill page

Source