Enumerating Cloud Resources
Discovering misconfigurations.
Goal of Cloud Enumeration
Enumeration turns a single credential or anonymous foothold into a map of the environment. You want to know what identity you hold, what it can do, and what resources exist.
- Identify the principal (who am I?).
- Inventory resources (what exists?).
- Discover permissions and trust paths (what can I reach?).
Identify Your Identity
Always start by confirming the active principal. This tells you the account, the identity type, and where to look next.
# AWS
aws sts get-caller-identity
# Azure
az account show
# GCP
gcloud auth list
gcloud config listAll lessons in this course
- Cloud Attack Surface
- Enumerating Cloud Resources
- Exploiting IAM Misconfigurations
- Persistence and Lateral Movement