Please note: this list is not updated in real time and may be missing some of our newer content. If you have any questions, don’t hesitate to contact us!

IAM

• IAM Roles concepts and practical uses: https://cybr.com/courses/practical-guide-to-aws-iam-roles/
• Key concepts, getting started with IAM, creating users, understanding policies, roles, and enabling Identity Center:
  • Section titled "Identity and Access Management (IAM)”: https://cybr.com/courses/introduction-to-aws-security/
• Enabling & using Identity Center in action: https://cybr.com/courses/incident-response-with-cloudtrail-and-athena/
• Understanding how to enumerate IAM information for security assessments: https://cybr.com/courses/introduction-to-aws-enumeration/
• [LAB] Exploiting IAM misconfigurations: https://cybr.com/courses/iam-privilege-escalation-labs/
• [LAB] IAM Privilege Escalation by Misconfiguration: https://cybr.com/courses/pentesting-aws-environments-with-pacu-cloudgoat-and-chatgpt/lessons/scenario-overview/
• [LAB] IAM Privilege Escalation by Rollback: https://cybr.com/courses/pentesting-aws-environments-with-pacu-cloudgoat-and-chatgpt/lessons/scenario-overview-3/
• IAM Access Analyzer:
  • About the service and core features: https://cybr.com/courses/introduction-to-aws-security/lessons/iam-access-analyzer/
  • [DEMO] IAM Access Analyzer Unused Access: https://cybr.com/courses/introduction-to-aws-security/lessons/demo-iam-access-analyzer-unused-access/
  • [LAB] Check policies for new access before deployment with IAM Access Analyzer: https://cybr.com/courses/introduction-to-aws-security/lessons/lab-check-policies-for-new-access-before-deployment-with-iam-access-analyzer/
  • [LAB] Check IAM policies against a deny list with IAM Access Analyzer: https://cybr.com/courses/introduction-to-aws-security/lessons/lab-check-iam-policies-against-a-deny-list-with-iam-access-analyzer/

S3

• [Course] Securing Amazon S3: https://cybr.com/courses/securing-amazon-s3/
• Amazon S3 buckets and data protection including bucket policies, encrypting data, and more (section titled “Amazon S3 Bucket Protection”): https://cybr.com/courses/introduction-to-aws-security/
• [LAB] Creating Buckets and Uploading Objects in S3: https://cybr.com/courses/introduction-to-aws-security/lessons/lab-creating-buckets-and-uploading-objects-in-s3/

Lambda

• Exploiting Lambda functions (section titled “Vulnerable Lambda”): https://cybr.com/courses/pentesting-aws-environments-with-pacu-cloudgoat-and-chatgpt/

KMS