AWS:
Setup
Covers cred types, tool install, and CLI config for AWS pentests
AWS Credential Types & Resolution Chain
Covers AWS credential types (keys, IAM roles, env vars) and the resolution chain order used by SDKs and CLI to authenticate requests.
AWS Pentesting Tools & Configuration
Covers AWS pentesting environment setup, including tool installation, credential configuration, IAM permissions, and CLI/SDK preparation for cloud security assessments.
Before testing an AWS environment, configure your tooling and verify your access scope. This phase covers CLI profile setup, credential management, tool installation, and confirming the permissions granted for the engagement.
Set up named AWS CLI profiles for each set of credentials. Install Pacu, enumerate-iam, ScoutSuite, and Prowler for automated checks. Verify your permissions with sts:GetCallerIdentity and dry-run API calls before running anything destructive. Confirm which accounts, regions, and services are in scope.