PENETRATION TESTING ON CLOUD ENVIRONMENTS: CHALLENGES AND BEST PRACTICES