preloader
TMGM
Penetration Testing

Cloud Pentesting.

Penetration testing on the AWS cloud is unique, bringing its own set of security considerations. While some vulnerabilities are mitigated through Amazon’s security measures, the complexity of these services leaves many companies exposed. One of AWS’ strongest features is the immense flexibility that is provided to the users in setting up the environment. While the flexibility is great to have, it’s also a significant security concern. TMGM’s AWS penetration testing services are aimed specifically at these needs, identifying the configuration and implementation flaws which often go unchecked.

Traditional Infrastructure vs AWS Pentesting

Traditional security infrastructure and AWS clouds differ in various ways. From setup and configuration to identity and user permissions, the technology stacks could not be more distinct.

The AWS architecture is comprised of a set of powerful APIs. Deeply integrated into the AWS ecosystem, our security engineers test for a range of AWS-specific misconfigurations, including the following:

  • EC2 instance and application exploitation
  • Targeting and compromising AWS IAM keys
  • Testing S3 bucket configuration and permission flaws
  • Establishing private cloud access through Lambda backdoor functions
  • Covering tracks by obfuscating CloudTrail logs

AWS Cloud Penetration Testing

In an AWS cloud assessment the client provides a secured account on the AWS management console to the Rhino assessment team. By enabling this view into specific implementation details, our AWS experts can provide guidance on security details otherwise inaccessible to attackers.

This approach is designed as an informed, audit-style engagement. If you’re looking for an in-depth security assessment of your AWS infrastructure, we recommend this approach.