SEC588: Cloud Penetration Testing
About This Course
SEC588: Cloud Penetration Testing provides comprehensive training empowering security professionals to effectively assess modern cloud environments. The course bridges the gap between traditional penetration testing and cloud-specific challenges, covering critical areas like microservices, serverless functions, and Kubernetes deployments. Students will address unique cloud security challenges including service plane vulnerabilities, shared hosting environments, and cloud-native application assessment, learning practical techniques for testing both AWS and Azure environments, which dominate the market. Whether you are a seasoned penetration tester expanding into cloud or a cloud security professional, the course delivers hands-on experience with modern attack vectors and risk assessment methodologies.
What You'll Learn
- Learn cloud-specific attack methodologies and service plane vulnerability assessment techniques
- Test microservices, serverless functions, and Kubernetes environments
- Implement AWS and Azure penetration testing strategies and platform-specific tools
- Assess cloud storage systems including buckets and in-memory datastores
- Master cloud-native application security testing and exploitation methods
Entry Requirements
Participants should be proficient in written and spoken English. Please refer to our website for more details on the content taught:
https://www.sans.org/cyber-security-courses/cloud-penetration-testing
There are no minimum entry requirements for years of experience in the domain, education level or age group; but participants should possess the relevant prerequisite skills mentioned above.