challenges in cloud penetration testing