AWS:

Setup

Covers cred types, tool install, and CLI config for AWS pentests

2 guides • Created May 24, 2026 • Updated May 24, 2026

2 guides

AWS Credential Types & Resolution Chain

Covers AWS credential types (keys, IAM roles, env vars) and the resolution chain order used by SDKs and CLI to authenticate requests.

May 24, 2026 • 4 min read

AWS Pentesting Tools & Configuration

Covers AWS pentesting environment setup, including tool installation, credential configuration, IAM permissions, and CLI/SDK preparation for cloud security assessments.

May 24, 2026 • 3 min read

Before testing an AWS environment, configure your tooling and verify your access scope. This phase covers CLI profile setup, credential management, tool installation, and confirming the permissions granted for the engagement.

Set up named AWS CLI profiles for each set of credentials. Install Pacu, enumerate-iam, ScoutSuite, and Prowler for automated checks. Verify your permissions with sts:GetCallerIdentity and dry-run API calls before running anything destructive. Confirm which accounts, regions, and services are in scope.