Hands-On Labs Added May 2025: AWS Blue Teaming
We added three new Hands-On Labs in May to Cybr’s growing catalog. Let’s take a look!
Audit the Blast Radius of KMS Keys with Finders Keypers
You’re a cloud security engineer tasked with auditing encryption across your AWS environment. Using Fog Security’s Finders Keypers tool, you’ll discover and document all resources protected by a specific KMS key—including S3 buckets, Secrets Manager secrets, and DynamoDB tables. You’ll learn to trace encryption dependencies, turn findings into a report, and gain visibility into the security posture of your cloud resources, all critical skills for meeting audit requirements and understanding the blast radius of your encryption keys.
Masking PII in Real Time with Amazon SNS Data Protection
You’re a security engineer responsible for ensuring that your company’s customer data is protected when transmitted through AWS services. You need to configure Amazon SNS to automatically detect credit card numbers in messages and mask them before they’re delivered to subscribers, while also auditing any detection events for compliance purposes.
Encrypting an unencrypted RDS database
You’ve recently joined a company as their cloud security engineer and are reviewing their established AWS environment. During your assessment, you notice that a business-critical RDS database is running without encryption enabled, which doesn’t align with security best practices. In this lab, you’ll implement encryption for this database using the best practice approach while minimizing service interruption. Please note: this lab takes approx. 7 minutes to launch.
Responses