Hello People! This article is to share my understanding about cloudsploit and the service they provide to the people. What they do? CloudSploit is a service which analysis your AWS/Azure account for security holes/risks. With people moving to serverless technologies, Azure and AWS are gaining popularity these days at higher rate. Also alot of developers/dev-ops engineers tend to overlook some of the security considerations while setting up services in cloud. CloudSploit is here to address such problems for you! How do they do it? CloudSploit asks you for a access key with read only permissions to your cloud resources. They have a set of plugins, which run using this access key. Each plugin is a javascript function which uses some node cloud SDKs to analyse the services in cloud. Result of what they do When you run CloudSploit, as a final output you get to see different plugins and their test results. The plugins also have recommended actions section which tell...