Hands-On Labs Added May 2025: AWS Blue Teaming
We added three new Hands-On Labs in May to Cybr’s growing catalog. Let’s take a look! Audit the Blast Radius of KMS Keys with Finders…
Explore these hands-on labs from Cybr’s May 2025 releases.
Audit the Blast Radius of KMS Keys with Finders Keypers

You’re a cloud security engineer tasked with auditing encryption across your AWS environment. Using Fog Security’s Finders Keypers tool, you’ll discover and document all resources protected by a specific KMS key—including S3 buckets, Secrets Manager secrets, and DynamoDB tables. You’ll learn to trace encryption dependencies, turn findings into a report, and gain visibility into the security posture of your cloud resources, all critical skills for meeting audit requirements and understanding the blast radius of your encryption keys.
Encrypting an unencrypted RDS database

You’ve recently joined a company as their cloud security engineer and are reviewing their established AWS environment. During your assessment, you notice that a business-critical RDS database is running without encryption enabled, which doesn’t align with security best practices. In this lab, you’ll implement encryption for this database using the best practice approach while minimizing service interruption. Please note: this lab takes approx. 7 minutes to launch.
