Serverless lab 1 Lab — Lambda Attack Chain: From API Gateway Injection to AWS Account Pivot Jul 4, 2026