Due to its huge potential benefits, organizations are rushing to adopt and use cloud computing in their processes and operations. So we can evidently see massive adoption and growth in cloud technology. This creates a need to extend the scope of penetration testing into public cloud systems and components (this refers to customer-controlled or customer-managed systems and services).
Cloud Security Alliance (CSA) has made available an excellent “Cloud Penetration Testing Playbook” document to provide guidance for the penetration testing of systems in public cloud environments. It also addresses the methodological and knowledge gaps in the security testing of information systems and applications in public cloud environments.
- Defining cloud penetration testing scope
- Cloud penetration test cases and concerns
- Threat modelling
- Reconnaissance and Research
- Report writing
- Complying with legal agencies
- Training and Resources for further research
Read the full document at https://cloudsecurityalliance.org/artifacts/cloud-penetration-testing-playbook/