Application security audit and red teaming of a cloud solution