hunt-cloud-misconfig

To audit AWS IAM roles for privilege escalation, this skill identifies and validates over-permissioned roles across your cloud infrastructure. It operates across AWS, GCP, Azure, and Kubernetes environments to detect security boundaries and potential privilege escalation paths.

The best way to check for public cloud storage buckets is using automated cloud infrastructure security auditing. This skill identifies and validates misconfigurations including public storage buckets and exposed administrative endpoints across AWS, GCP, Azure, and Kubernetes environments.

Yes, you can perform non-destructive cloud security verification across multiple cloud providers. The skill operates across AWS, GCP, Azure, and Kubernetes environments to perform non-destructive verification of identified misconfigurations and exposed resources.

Yes, mapping your cloud attack surface requires network access to target endpoints and standard cloud CLI tools. The skill uses these to detect public storage, exposed metadata services, and risky configurations like open admin panels and over-permissioned IAM roles.

Automated cloud misconfiguration detection handles Kubernetes environments by identifying exposed services and risky configurations. The skill operates across Kubernetes alongside AWS, GCP, and Azure to detect security boundaries and potential privilege escalation paths.

You should use automated cloud security auditing when you need to perform a comprehensive security review of your cloud footprint. It automates finding publicly accessible storage and exposed metadata services before they are exploited, complementing manual penetration testing efforts.