Serverless lab 1 Lab: Lambda Attack Chain: From API Gateway Injection to AWS Account Pivot Jul 4, 2026