Cloud penetration testing is the delivery of IT resources over the Internet with the pay-as-you-go principle. We can access lots of technology services such as computing power, storage, and databases instead of buying, owning, and maintaining physical data centers and servers. As we know, there are lots of popular cloud computing providers such as AWS, Google, Microsoft Azure, and Oracle that we rely on every day for our workloads. As the popularity of cloud services increases, attackers focus on cloud services and cloud vulnerabilities. Attackers use sustained attacks against managed cloud service providers and their customers. If companies use cloud technologies, they need to make sure they are secure. At this point, they need cloud penetration testing. Cloud penetration testing is an attack simulation performed to find vulnerabilities that can be exploited or misconfigurations in a cloud-based system. With cloud security assessment, companies learn about the strengths and weaknesses of their cloud system to improve its overall security posture.