domains / families / security / performing-cloud-penetration-testing-with-pacu

performing-cloud-penetration-testing-with-pacu

separate

'Run authorized AWS penetration tests with Pacu, the open-source AWS exploitation

When to use

• When conducting authorized penetration testing of AWS environments
• When validating the effectiveness of IAM policies, SCPs, and permission boundaries
• When assessing the blast radius of a compromised set of AWS credentials
• When testing detection capabilities of GuardDuty, Security Hub, and custom alerting
• When building red team exercises against AWS cloud infrastructure

When not to use

• unauthorized testing of any AWS account
• testing AWS infrastructure itself
• DDoS or volumetric attacks without AWS approval
• production account testing without explicit authorization

Skill page

Source