I want to know about some of the good resources for pen-testing cloud based services or web-apps (such as AWS). I googled for it but there are really few good resources out there. For example, I liked this article by SANS: http://pen-testing.sans.org/blog/2012/07/05/pen-testing-in-the-cloud
Apart from this, does anyone have good resources for pen-testing cloud based services/web-apps? It would also be great if someone could share their experience of performing a pen-test on service/web-app hosted on the cloud.