# Cloud Containers

> Cloud and container security testing - AWS, Azure, GCP, Docker, and Kubernetes misconfigurations and exploitation.

- Skill: `uhdyindy/cloud-containers` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add uhdyindy/cloud-containers`
- Raw SKILL.md: https://api.skillmd.com/api/skills/uhdyindy/cloud-containers/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: DevOps & Infra
- Author: UhdyIndy (https://skillmd.com/u/uhdyindy)
- Updated: 2026-09-22
- Page: https://skillmd.com/skills/uhdyindy/cloud-containers

---


# Cloud & Containers

Test cloud infrastructure and container environments for security misconfigurations and exploitation paths.

## Techniques

| Platform | Key Vectors |
|----------|-------------|
| **AWS** | S3 bucket exposure, IAM misconfig, metadata service, Lambda abuse |
| **Azure** | Blob storage, RBAC flaws, managed identity, App Service misconfig |
| **GCP** | Cloud Storage, service account keys, metadata server, IAM |
| **Docker** | Container escape, privileged mode, socket exposure, image vulnerabilities |
| **Kubernetes** | RBAC bypass, secret exposure, pod escape, API server access |

## Workflow

1. Enumerate cloud resources and services
2. Test IAM/RBAC configurations
3. Check storage and secrets exposure
4. Test container isolation and escape paths
5. Document findings with cloud-specific evidence

## Reference

- `reference/cloud-security.md` - Platform-specific attack guides (AWS, Azure, GCP, Docker, K8s)