Testing for infrastructure configuration management (OWASP-CM-003)