AWS Defense
AWS Credential Evidence Review
Review IAM credential-report CSV, distinguish unknown usage from inactivity, and turn findings into owned remediation decisions.
40 minutes · Reviewed
Open lab → Download exerciseCloudSecCorner / Practice
Hands-on Security Labs
Executable exercises for AWS identity reviews, deployment boundaries, private storage, CloudTrail investigations, and agent runtime controls. Each lab includes prerequisites, failure cases, evidence, and cleanup.
10 labs to explore
AWS Defense
AWS Deployment Role Boundaries
Test PassRole scope, destination-service conditions, Lambda deployment access, and execution-role trust as distinct review boundaries.
50 minutes · Reviewed
Open lab → Download exerciseAWS Defense
Private S3 Terraform Plan Review
Check a real Terraform plan for bucket-bound public-access controls, ownership, encryption, versioning, and the transport-policy contract.
60 minutes · Reviewed
Open lab → Download exerciseAWS Defense
AWS CloudTrail Evidence Triage
Normalize CLI and trail exports, separate failed requests from outcomes, deduplicate events, and preserve session-level investigation evidence.
50 minutes · Reviewed
Open lab → Download exerciseAgentic Security
Agentic Cloud Security Essentials
Run tool-policy, tenant, schema, budget, approval-binding, expiry, and replay tests; connect the results to current MCP authorization guidance.
45–60 minutes · Reviewed
Open lab → Download exerciseSecurity Engineering
Zero-Trust Architecture
Establish real local mTLS, authorize certificate URI identities, and reject missing certificates, spoofed headers, and unauthorized routes.
45–60 minutes · Reviewed
Open lab → Download exerciseSecurity Engineering
Threat Modeling Practical Guide
Turn RAG tenant boundaries, document permissions, cache isolation, and deletion scenarios into an owned threat register and regression tests.
60 minutes · Reviewed
Open lab → Download exerciseSecurity Engineering
Security Engineering Fundamentals
Verify real local signatures, artifact digests, approved builders, and source revisions; distinguish SBOMs and provenance from deployment permission.
45–60 minutes · Reviewed
Open lab → Download exerciseNetwork Security
NMAP Practical Auditing Labs
Run a bounded Nmap audit against an owned loopback listener, compare before/after port states, and separate exposure from vulnerability evidence.
30–45 minutes · Reviewed
Open lab → Download exerciseEthical Hacking
Ethical Hacker Practical Lab
Catch privileged containers, host access, ambient tokens, mutable images, and unsafe init containers in local policy regressions before deployment.
45–60 minutes · Reviewed
Open lab → Download exerciseA practical starting path
AWS Defender Practice Path
Start with local evidence and regression tests. Extend to authorized AWS exports and a reviewed Terraform plan when ready.
-
Step 1 · 40 minutes
AWS Credential Evidence Review
Review IAM credential-report CSV, distinguish unknown usage from inactivity, and turn findings into owned remediation decisions.
-
Step 2 · 50 minutes
AWS Deployment Role Boundaries
Test PassRole scope, destination-service conditions, Lambda deployment access, and execution-role trust as distinct review boundaries.
-
Step 3 · 60 minutes
Private S3 Terraform Plan Review
Check a real Terraform plan for bucket-bound public-access controls, ownership, encryption, versioning, and the transport-policy contract.
-
Step 4 · 50 minutes
AWS CloudTrail Evidence Triage
Normalize CLI and trail exports, separate failed requests from outcomes, deduplicate events, and preserve session-level investigation evidence.
The local exercises require Python 3.10+. They include their own sample evidence and do not create cloud resources.