blaCCkHatHacEEkr / PENTESTING-BIBLE

articles
https://twitter.com/cry__pto
MIT License
12.74k stars 2.33k forks source link

check out https://cloudsecurityalliance.org/artifacts/cloud-penetration-testing-playbook/ #18

Open saryx123 opened 3 years ago

saryx123 commented 3 years ago

This work focuses on testing systems and services hosted in public cloud environments. This refers to customer-controlled or customer-managed systems and services. For example, a custom virtual machine, managed and controlled by the cloud customer, in an IaaS environment would be in-scope whereas the hypervisor of an IaaS environment that is controlled by the cloud service provider isn’t. As for testing hybrid clouds, this document does not cover the hybrid interface and on-premises environment.