CYB653 V1

Helmus, J. (2021). AWS penetration testing beginner’s guide to hacking AWS with tools such as Kali Linux, Metasploit, and Nmap. Packt Publishing.
This book guides you through security assessments of key AWS resources, covering tests like application exploitation and permission flaws. Additionally, it provides insights on establishing private-cloud access and navigating restricted areas while offering tips for maintaining a secure cloud environment professionally.

Required Chapter Readings:
Chapter 1: Building Your AWS Environment
Chapter 2: Pentesting and Ethical Hacking
Chapter 3 Exploring Pentesting and AWS

AWS Academy | Training and Certification | AWS. (n.d.). Amazon Web Services, Inc. https://www.awsacademy.com/
This course is designed to help you gain a foundational knowledge of cybersecurity principles and services for cloud computing through a guided hands-on approach. This course includes demonstrations, instructional guides, and real-life scenarios.

Ravindran, U., & Potukuchi, R. V. (2022). A Review on Web Application Vulnerability Assessment and Penetration Testing. Review of Computer Engineering Studies, 9(1).
This article is a good overview of the challenges faced in cloud penetration testing and assessments. To this end, this paper presents the common web application security vulnerabilities, prior requirements for performing any security assessment of the web application, and the do’s and don’ts of the assessment in accordance with each vulnerability. This paper also discusses various types of security testing and how VAPT is essential in every organization.

Monfared, A. T., & Jaatun, M. G. (2011, November). Monitoring intrusions and security breaches in highly distributed cloud environments. In 2011 IEEE Third International Conference on Cloud Computing Technology and Science (pp. 772-777). IEEE.
This paper reviews existing security monitoring mechanisms compared with new challenges that are caused by this new model. We highlight possible weaknesses in existing monitoring mechanisms and propose approaches to mitigate them.