AWS Security Labs 11
- Lab Secrets Manager and KMS Key Abuse: When One Shared Key Decrypts Everything
- Lab CloudTrail Tampering and GuardDuty Evasion: How Attackers Go Dark
- Lab: Lambda Attack Chain: From API Gateway Injection to AWS Account Pivot
- Lab: Cross-Account Role Chaining: One Compromised Account to Full Org Access
- Lab: S3 Misconfiguration Deep Dive: Public Buckets, Presigned URLs, Terraform State, and Snapshot Exposure
- Lab: Kubernetes Pod Escape and IRSA Abuse: From Container to AWS Account
- Lab: CI/CD Pipeline Attack: GitHub Actions Secret Theft and OIDC Hardening
- Lab: IAM Privilege Escalation: 8 Paths from Low-Privilege to Admin
- Lab: SSRF to IMDS: Steal AWS Credentials Through a Web App
- Lab: EC2 Attack Chain: Reverse Shell, IMDS Credential Theft, and GuardDuty Detection
- Lab: GuardDuty Sample Findings: What It Actually Detects (Zero Cost, Zero Risk)