Platform Agnostic Testing
- Attacking Serverless Servers: Reverse Engineering the AWS, Azure, and GCP Function Runtime - YouTube
- SANS - SEC588: Cloud Penetration Testing
Tools
GitHub - prowler-cloud/prowler: Prowler is an Open Source Security tool to perform Cloud Security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains hundreds of controls covering CIS, PCI-DSS, ISO27001, GDPR, HIPAA, FFIEC, SOC2, AWS FTR, ENS and custom security frameworks. GitHub - nccgroup/ScoutSuite: Multi-Cloud Security Auditing Tool
Interesting Reads/Talks
(2) Deep Dive on Bring Your Own IP - AWS Online Tech Talks - YouTube