---
title: "Hands-On Labs Added January 2025: AWS Red Teaming - Cybr"
description: "AWS Security Labs launched in January 2025. These focus on red teaming activities, including discovering AWS account IDs from S3 buckets"
url: https://cybr.com/announcements/hands-on-labs-added-january-2025-aws-red-teaming/
---

# Hands-On Labs Added January 2025: AWS Red Teaming

Here’s a list of the Hands-On Labs we launched in December 2024

Christophe

Published January 31, 2025 · Updated June 4, 2025

This month, we added two new Hands-On Labs to Cybr, and both of them focus on AWS security red teaming activities! Let’s check them out.

*(P.S.: Don’t worry blue team, we haven’t forgotten about you! We’ve got a few planned for you launching in February!)*

*(P.P.S.: with these 2 new labs, we’re now at 77 AWS security-focused Hands-On Labs. 100 here we come!)*

## [Discover AWS account ID via S3 Bucket](https://cybr.com/hands-on-labs/lab/discover-aws-account-id-via-s3-bucket/)

![Discover AWS Account ID via S3 Bucket-banner](https://media.cybr.com/2025/01/Discover-AWS-Account-ID-via-S3-Bucket-banner_v3.jpg)

[View Lab >](https://cybr.com/hands-on-labs/lab/discover-aws-account-id-via-s3-bucket/)

Learn how to enumerate AWS account IDs with very limited access to S3 buckets. This lab simulates compromised credentials and makes use of a clever automated tool to reduce guesses from 1 trillion possible combinations down to only 120.

## [Access environment variables via Lambda Function with SSTI](https://cybr.com/hands-on-labs/lab/access-environment-variables-via-lambda-function-with-ssti/)

![SSTI Lambda CTF hands-on cloud security lab on Cybr](https://media.cybr.com/2025/01/SSTI-Lambda-CTF_v2.jpg)

[View Lab >](https://cybr.com/hands-on-labs/lab/access-environment-variables-via-lambda-function-with-ssti/)

Learn how to exploit a Server-Side Template Injection (SSTI) vulnerability in an AWS Lambda-based web application. In this lab, you’ll discover default credentials in a startup’s web portal with a template-based audit report system, then craft SSTI payloads to execute system commands and access sensitive Lambda environment variables. Through hands-on practice, you’ll understand both the attack methodology and learn essential mitigation strategies for securing serverless applications.

## See you next month with more AWS security labs!

### [View all of our Hands-On Labs >](https://cybr.com/hands-on-labs)

### [Get started for free >](https://cybr.com/auth/register)

## Filed under

- [Announcements](https://cybr.com/announcements/)
- [Cloud Security](https://cybr.com/cloud-security/)
- [Red Team](https://cybr.com/red-team/)
- [AWS](https://cybr.com/tag/aws/)
- [AWS Security](https://cybr.com/tag/aws-security/)
- [Cloud Security](https://cybr.com/tag/cloud-security/)

## Comments

Loading comments…

Recommended resources

[![Explore the AWS Certified Security Specialty course](https://media.cybr.com/2023/12/cybr-aws-security-specialty-banner-768x432.jpg)](https://cybr.com/courses/aws-certified-security-specialty-course/)

## Build practical AWS security skills

Start with the core services, then prepare for the AWS Certified Security Specialty exam with guided lessons and hands-on practice.

[Introduction to AWS Security](https://cybr.com/courses/introduction-to-aws-security/) [Security Specialty course](https://cybr.com/courses/aws-certified-security-specialty-course/)