| name | pentest-cloud-infrastructure |
| description | Cloud security posture management and container security assessment for AWS, Azure, GCP, and Kubernetes. |
Pentest Cloud Infrastructure
Purpose
Assess the security configuration of cloud environments and containerized infrastructure to detect misconfigurations, excessive permissions, and vulnerabilities.
Core Workflow
- Cloud Config Audit: Assess cloud provider configuration (AWS/Azure/GCP) using
prowler and scoutsuite.
- IaC Scanning: Analyze Infrastructure-as-Code (Terraform, CloudFormation) for security flaws using
checkov and terrascan.
- Container Security: Scan container images and runtime environments using
trivy, clair, and dockle.
- Kubernetes Assessment: Audit K8s clusters for CIS compliance and vulnerabilities using
kube-bench and kube-hunter.
- Runtime Monitoring: Analyze runtime behavior and rule violations using
falco.
References
references/tools.md
references/workflows.md