# Cloud Reconnaissance

> Master cloud reconnaissance techniques. Learn to enumerate assets, map attack surfaces, and gather intelligence without triggering alarms.

Canonical: https://codelivly.com/rooms/cloud-reconnaissance
Last updated: 2026-09-25

| | |
|---|---|
| Level | Intermediate |
| Category | Cloud Security |
| Lessons | 4 |
| Estimated time | 30 min |
| XP | 100 |

This intermediate module explores the critical first phase of any cloud attack: reconnaissance. You will learn how adversaries and red teams map cloud environments, enumerate assets, and gather actionable intelligence. The curriculum covers passive OSINT techniques, active enumeration using cloud-native tools (like AWS CLI and Azure CLI), identifying exposed storage buckets, mapping IAM identities, and understanding how to gather intelligence while evading basic detection mechanisms. By mastering reconnaissance, you will learn to identify the exact footholds attackers seek before they strike.

## Lessons

1. What Is Cloud Reconnaissance and Why Does It Matter (30 min)
2. Enumerating Cloud Assets and Public Exposure (30 min)
3. Recon with ScoutSuite and CloudFox (30 min)
4. Guided Lab: Mapping the Attack Surface of a Cloud Account (30 min)

## Related

- [Learning path: Cloud Attack Techniques and Offensive Security](https://codelivly.com/learning-paths/cloud-attack-techniques-and-offensive-security)
- [All rooms](https://codelivly.com/rooms)