- Pentesting Cloud Methodology (HackTricks)
- Cloud SSRF (HackTricks)
WSTG-CONF-11: Test Cloud Storage (OWASP Testing Guide)
Tools: CloudFail, CloudBrute, not tested yet: ScoutSuite, cloud-service-enum
Discovery
Use CloudBrute.
Amazon Web Services (AWS)
Cloudflare
Google Cloud
Microsoft Azure
Oracle
Get a free Oracle VM. See Oracle Cloud Free Tier (Oracle).