OWASP Cloud Testing Guide Table of Contents

Here is the draft index:

Amazon AWS

- Testing S3 buckets -- Identify S3 buckets -- Testing listing bucket's content -- Testing for writing privileges on bucket -- Testing if bucket ACL can be read -- Testing if bucket ACL can be written -- Testing for "any authenticated AWS client" -- Leaked AWS S3 key secret -- References

- Testing Amazon EC2 -- Publicly accessible EC2 snapshots -- AWS Metadata leakage -- AWS Elastic Load Balancer -- AWS SNS -- AWS SQS -- AWS RDS -- AWS Cognito -- AWS CloudFront -- AWS-CLI tiny man -- Tools

Google Cloud -- Doc -- Tools