Abstract: A computer-implemented method is executed using a threat assessment server that is communicatively coupled via one or more networks to one or more different cloud computing service providers and comprises receiving first input data specifying a first cloud service account that is associated with two or more cloud computing instances and/or two or more cloud storage instances, the cloud computing instances or cloud storage instances being hosted at a first cloud computing service provider, the first cloud service account being from among one or more different cloud service accounts that are associated with the one or more different cloud computing service providers each hosting respective cloud computing instances and/or cloud storage instances; receiving second input data specifying an entry point identifier of a particular cloud resource from among the two or more cloud computing instances and/or two or more cloud storage instances; using a plurality of first network calls from the threat assessment server t