Profile My skills Saved Collections Edit profile Submit a skill

Pentest Cloud Infrastructure

Cloud security posture management and container security assessment for AWS, Azure, GCP, and Kubernetes. Use when this capability is needed.

tomevault-io 48a7d14 2 files · 1.9 KB Updated
DevOps & Infra

File contents

Pentest Cloud Infrastructure

Purpose

Assess the security configuration of cloud environments and containerized infrastructure to detect misconfigurations, excessive permissions, and vulnerabilities.

Core Workflow

  1. Cloud Config Audit: Assess cloud provider configuration (AWS/Azure/GCP) using prowler and scoutsuite.
  2. IaC Scanning: Analyze Infrastructure-as-Code (Terraform, CloudFormation) for security flaws using checkov and terrascan.
  3. Container Security: Scan container images and runtime environments using trivy, clair, and dockle.
  4. Kubernetes Assessment: Audit K8s clusters for CIS compliance and vulnerabilities using kube-bench and kube-hunter.
  5. Runtime Monitoring: Analyze runtime behavior and rule violations using falco.

References

  • references/tools.md
  • references/workflows.md

Source: jd-opensource/JoySafeter — distributed by TomeVault.

tomevault-io/skills-registry/tree/main/jd-opensource--joysafeter--joysafeter commit 48a7d14b40

Browse category

Frequently asked questions

npx skillmds@latest add tomevault-io/pentest-cloud-infrastructure