Cloud Scoping
Which Third party Cloud is in use?
How many projects(if GCP) or root accounts(if AWS) are in scope?
(AWS) Number of the root accounts in scope?
(GCP) Names of the projects?
Which cloud regions are in scope?
What are the Cloud resources/services in use?
(AWS) Ec2, EBS, EFS, S3, IAM, Amplify, Lambda, RDS, GKE, etc.
(GCP) https://cloud.google.com/products
What are the Objectives? What is the Cloud project used for?
What Kind of test account will be provided?
(AWS) IAM or SSO account (ADFS, Azure SAML)
(GCP) IAM or SSO AD account
Permissions required for Cloud Config review
Login URL?
What kind of data is used and operated in Cloud (C4/C3)?
What environment will be provided during testing?
If it requires corporate network, Check if STLAB public Ip can be whitelisted?
Does the project make use of Kubernetes Engine?
Last updated