Multi-cloud tools

• ScoutSuite - multi-cloud auditing (AWS, Azure, GCP, OCI, Alibaba)
• Prowler - AWS/Azure/GCP security posture assessment
• Steampipe - SQL queries for cloud APIs (400+ mods)

AWS

• pacu - AWS exploitation framework
• enumerate-iam - enumerate IAM perms for a key
• AWSBucketDump - enumerate public S3 buckets
• CloudGoat - intentionally vulnerable AWS environment to practise against

Azure

• MicroBurst - Azure recon & exploitation (PowerShell)
• PowerZure - Azure recon and exploitation
• azucar - Azure security assessment
• Stormspotter - Azure AD attack path mapper

GCP

• gcp_scanner - enumerate GCP resources for misconfigs
• GCPBucketBrute - brute-force bucket names
• policyuniverse - parse and audit GCP IAM policies

Learning platforms

• Google Cloud Skills Boost - hands-on GCP labs
• AWS Skill Builder - AWS workshops and quests
• Microsoft Learn - Azure learning paths
• awesome-azure-security, awesome-aws-security, awesome-gcp-security - curated link lists