HACKER Q&A
📣 Shazeb

Is it a good idea to Use cloud providers as a UAT env?


Hi Everyone,

I'm a pentester and I just want to understand. If my client wants to give me a UAT environment. Is it a good idea to use digital ocean? If not, then what is the best way to deploy application for Web application Pentest. Like (UAT cloud or something).

Thanks in advance. :) Shazeb

  👤 yuppie_scum Accepted Answer ✓
Best practice is to maintain separate prod and non-prod tiers (isolate by different cloud account or at least vpc/network segregation) but with as much parity as possible between prod and uat.