a field guide to cloud security

Misconfigurations, tools, and useful commands for AWS, Azure, and GCP - the things I keep looking up while learning.

start with AWS

Pick a cloud

AWS

IAM misconfigs, S3 exposures, security groups, CloudTrail gaps.

Azure

AD misconfigs, storage account access, NSG rules, Key Vault.

GCP

GCS bucket perms, service account keys, IAM bindings.

I built this because I was tired of opening 5 tabs every time I needed the right az or gcloud command. The cheatsheets here are the ones I actually use - not exhaustive, just the things that come up in labs and CTFs. Last updated when I notice a new misconfig that I keep hitting.

How to use this

Each page is a quick reference for one cloud provider. Three sections per page:

Common misconfigurations - what to look for in audits or bug bounty recon.
Common tools - open-source scanners and offensive frameworks.
Useful commands - copy-paste-ready CLI snippets.

This is a learning resource, not a replacement for paid CSPM tools or hands-on labs. Always validate findings manually before acting on them.