You're reading from Cloud Penetration Testing for Red Teamers

Product type Book

Published in Nov 2023

Publisher Packt

ISBN-13 9781803248486

Pages 298 pages

Edition 1st Edition

Languages

Concepts

Cloud Security

Author (1):

Kim Crawley

Table of Contents (20) Chapters

Preface

1. Part 1:Today’s Cloud Networks and Their Security Implications

2. Chapter 1: How Do Enterprises Utilize and Implement Cloud Networks?

3. Chapter 2: How Are Cloud Networks Cyber Attacked?

4. Chapter 3: Key Concepts for Pentesting Today’s Cloud Networks

5. Part 2:Pentesting AWS

6. Chapter 4: Security Features in AWS

7. Chapter 5: Pentesting AWS Features through Serverless Applications and Tools

8. Chapter 6: Pentesting Containerized Applications in AWS

9. Part 3:Pentesting Microsoft Azure

10. Chapter 7: Security Features in Azure

11. Chapter 8: Pentesting Azure Features through Serverless Applications and Tools

12. Chapter 9: Pentesting Containerized Applications in Azure

13. Part 4:Pentesting GCP

14. Chapter 10: Security Features in GCP

15. Chapter 11: Pentesting GCP Features through Serverless Applications and Tools

16. Chapter 12: Pentesting Containerized Applications in GCP

17. Chapter 13: Best Practices and Summary

18. Index

Why subscribe?

19. Other Books You May Enjoy

Frequently used GCP SaaS applications

There are a large number of applications and services within the GCP ecosystem. Many of those services are classified as SaaS. That means that Google provides the infrastructure, the platform, and the application that runs in it. As a user or organization, you’re only responsible for the code or data you enter into its applications.

As Google has more responsibility and control over its SaaS services, your ability to pentest those services while abiding by their policies is very limited to nonexistent. Google Support says the following (https://support.google.com/cloud/answer/6262505?hl=en#zippy=%2Cdo-i-need-to-notify-google-that-i-plan-to-do-a-penetration-test-on-my-project):

Do I need to notify Google that I plan to do a penetration test on my project?

If you plan to evaluate the security of your Cloud Platform infrastructure with penetration testing, you are not required to contact us. You will have to abide by the Cloud Platform...