> For the complete documentation index, see [llms.txt](https://notes.programmersecurity.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://notes.programmersecurity.com/cloud-pentesting/enumeration.md). # Enumeration ## AWSCLI Configuration We can configure Profile using awscli ```python aws configure --profile McDuck ```

## Getting Basic Information First Thing you need to do after setting the credentials is that you need to see your details and information ```python aws sts get-caller-identity --profile user1 aws iam get-user ```

### List Groups ```bash aws --profile user4 iam list-groups-for-user --user-name r_waterhouse ```

### List Policies ``` aws --profile user4 iam list-group-policies --group-name cg-developers ```

### List Group Policy ```python aws --profile user4 iam get-group-policy --group-name cg-developers --policy-name developer_policy ```

## S3 Buckets ### List s3 Buckets ```python aws s3 ls --profile McDuck ```

### Recursively Look at the S3 Buckets We can recursively see the S3 Buckets ```python aws s3 ls s3://cg-keystore-s3-bucket-rce-webapp --recursive --profile McDuck ```

### Download Files From S3 Buckets ``` aws s3 cp s3://cg-keystore-s3-bucket-rce-webapp/cloudgoat . --profile McDuck ```

## Describe-Instances ``` aws ec2 describe-instances --profile McDuck ```

## Describe DB Instances ``` aws rds describe-db-instances --region us-east-1 ```