AWS, Azure / Entra ID & GCP — recon, credential access, privilege escalation, lateral movement, persistence & exfil, mapped to MITRE ATT&CK Cloud