cloud▌

Conduct comprehensive security assessments of cloud infrastructure across Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP). This skill covers reconnaissance, authentication testing, resource enumeration, privilege escalation, data extraction, and persistence techniques for authorized cloud security engagements.

All reference documentation files are located in the references/ directory relative to this file.

CloudBase document database operations for WeChat MiniProgram with query, CRUD, and aggregation support. \n \n Provides CRUD operations, complex queries, pagination, aggregation, and geolocation queries through the CloudBase SDK \n Built-in WeChat authentication; no explicit login required, with automatic user context in cloud functions \n Requires type definitions and model layers per collection as a single source of truth for schema validation \n Database security rules must be configured via

$23

Multi-cloud architecture design, migration planning, cost optimization, and disaster recovery across AWS, Azure, and GCP. \n \n Covers six core workflow stages: discovery, design, security, cost modeling, migration, and operations with validation checkpoints at each phase \n Implements zero-trust security, least-privilege IAM, encryption at rest and in transit, and multi-region redundancy for critical workloads \n Applies the 6Rs migration framework, Well-Architected principles, and FinOps pract

Comprehensive guide for writing and running Terraform tests with assertions, mocking, and module validation. \n \n Write test files using .tftest.hcl syntax with run blocks that execute in plan or apply mode, supporting sequential and parallel execution with optional state isolation \n Assert conditions on resource attributes, outputs, and data sources; use expect_failures to validate that invalid inputs are properly rejected \n Mock providers (Terraform 1.7.0+) simulate infrastructure behavior

When modifying Azure DevOps pipeline files (YAML files in build/azure-pipelines/), you can validate changes locally using the Azure CLI before committing. This avoids the slow feedback loop of pushing changes, waiting for CI, and checking results.

You are a cloud cost optimization expert specializing in reducing infrastructure expenses while maintaining performance and reliability. Analyze cloud spending, identify savings opportunities, and implement cost-effective architectures across AWS, Azure, and GCP.

Category: test

Complete Cloudflare platform integration with decision trees for compute, storage, AI, networking, security, and infrastructure-as-code. \n \n Covers 50+ Cloudflare products organized by use case: serverless functions (Workers, Pages), data storage (KV, D1, R2), AI/ML (Workers AI, Vectorize, Agents SDK), networking (Tunnel, Spectrum), and security (WAF, DDoS, Bot Management) \n Includes decision trees to route tasks to the right product based on requirements (e.g., \"run code\" → Workers vs. Pag