In our last AWS penetration testing post, we explored what a pentester could do after compromising credentials of a cloud server. In this installment, we’ll look at an Amazon Web Service (AWS) instance from a no-credential situation and specifically, potential security vulnerabilities in AWS S3 “Simple Storage” buckets. After walking through the AWS S3 methodology, we’ll apply that to the Alexa to
![Penetration Testing Amazon Web Services (AWS) - Rhino Security Labs](https://cdn-ak-scissors.b.st-hatena.com/image/square/9175c02f972cbb27c855b230d7342b52b53f900c/height=288;version=1;width=512/https%3A%2F%2Frhinosecuritylabs.com%2Fwp-content%2Fuploads%2F2017%2F05%2Fpassive_recon-aws.png)