pentest-cloud-infrastructure

Original：🇺🇸 English

Translated

Cloud security posture management and container security assessment for AWS, Azure, GCP, and Kubernetes.

1installs

Sourcejd-opensource/joysafeter

Added on2026-03-01

NPX Install

npx skill4agent add jd-opensource/joysafeter pentest-cloud-infrastructure

SKILL.md Content

View Translation Comparison →

Pentest Cloud Infrastructure

Purpose

Assess the security configuration of cloud environments and containerized infrastructure to detect misconfigurations, excessive permissions, and vulnerabilities.

Core Workflow

Cloud Config Audit: Assess cloud provider configuration (AWS/Azure/GCP) using
```
prowler
```
and
```
scoutsuite
```
.
IaC Scanning: Analyze Infrastructure-as-Code (Terraform, CloudFormation) for security flaws using
```
checkov
```
and
```
terrascan
```
.
Container Security: Scan container images and runtime environments using
```
trivy
```
,
```
clair
```
, and
```
dockle
```
.
Kubernetes Assessment: Audit K8s clusters for CIS compliance and vulnerabilities using
```
kube-bench
```
and
```
kube-hunter
```
.
Runtime Monitoring: Analyze runtime behavior and rule violations using
```
falco
```
.

References

```
references/tools.md
```
```
references/workflows.md
```