---
title: ToolRouter — Workflow
description: A multi-tool workflow showing how to combine ToolRouter tools for a complex task.
url: https://toolrouter.com/workflows/cloud-security-audit
---
# Cloud Security Audit

Audit cloud infrastructure by discovering assets, probing for misconfigurations, testing cloud-specific attacks, and checking CVEs.

Cloud infrastructure introduces unique security challenges that traditional security tools often miss. Misconfigured storage buckets, exposed metadata services, overly permissive IAM roles, and serverless function vulnerabilities require specialized testing approaches that understand cloud-native architectures.

This workflow audits cloud security by discovering all cloud-hosted assets through DNS enumeration, probing endpoints for common cloud misconfigurations, testing for cloud-specific attacks like SSRF to metadata services, and checking for known vulnerabilities in cloud services. It covers AWS, GCP, and Azure environments with focus areas applicable across all major cloud providers.

**Tools:** security-httpx, dns-domain, pentest, vulnerability-database
**Category:** security

## Steps

### 1. Discover Cloud Assets

Enumerate DNS records to discover cloud-hosted assets including storage buckets, CDN endpoints, and serverless functions.

- **Tool:** dns-domain
- **Skill:** lookup_dns
- **Input:** Domain to enumerate for cloud asset discovery.
- **Output:** DNS records pointing to cloud services with provider identification (AWS, GCP, Azure).

### 2. Probe Cloud Endpoints

Probe discovered cloud endpoints for misconfigurations, exposed services, and insecure default settings.

- **Tool:** security-httpx
- **Skill:** probe_hosts
- **Input:** Cloud endpoints and service URLs to probe.
- **Output:** Cloud service configurations, exposed endpoints, and detected misconfigurations.

### 3. Test Cloud-Specific Vulnerabilities

Test for cloud-specific vulnerabilities including SSRF to metadata services, misconfigured IAM, and exposed cloud APIs.

- **Tool:** pentest
- **Skill:** test_ssrf
- **Input:** Cloud application endpoints to test for SSRF and cloud-specific attacks.
- **Output:** Cloud-specific vulnerability findings including metadata access, SSRF results, and IAM issues.

### 4. Check Cloud Service CVEs

Search for known vulnerabilities in the cloud services and platforms identified in your infrastructure.

- **Tool:** vulnerability-database
- **Skill:** search_vulnerabilities
- **Input:** Cloud service names and versions to check for known vulnerabilities.
- **Output:** CVEs affecting your cloud services with severity ratings and remediation guidance.

## Benefits

- Discover shadow cloud assets not tracked in asset inventories
- Detect common cloud misconfigurations like exposed storage buckets
- Test for cloud-specific attacks including SSRF to metadata services
- Check cloud services against known CVE databases
- Coverage across AWS, GCP, and Azure environments
