PEN TEST

Gathering information for a PEN test, below are some examples of what can be done to get started

Azure: Access required - Reader

• brew update
• brew install azure-cli
• brew install jq
• az login
• bash src/cloud/size_azure.sh {subscription}
• az account clear
• az logout

GCP: Access required - roles/viewer, roles/iam.securityReviewer and roles/actions.Viewer

• brew update
• brew install --cask google-cloud-sdk
• gcloud auth login
• bash src/cloud/size_gcp.sh {project}
• bash tst/cloud/audit_gcp.sh
• gcloud auth revoke --all

AWS: Access required - ViewOnlyAccess

• brew update
• brew install awscli

• aws configure sso
• aws sso login --sso-session 'Prod Eng'

• Manual

• cat ~/.aws/credentials

• cat ~/.aws/config

• pip3 install -r requirements.txt

• python3 src/cloud/size_aws.py --profile {profile} --output size_aws_{accountName}.csv

• aws sso logout --profile {profile}