---
title: "Hands-On Labs Added March & April 2025: AWS Blue Teaming - Cybr"
description: "Cybr's AWS Blue Team Hands-On Labs launches in March and April 2025."
url: https://cybr.com/blue-team/hands-on-labs-added-march-april-2025-aws-blue-teaming/
---

# Hands-On Labs Added March & April 2025: AWS Blue Teaming

We added two new Hands-On Labs to Cybr’s growing labs catalog, both of which focus on AWS security blue teaming activities. Let’s check them out!…

Christophe

Published May 1, 2025 · Updated June 4, 2025

We added two new Hands-On Labs to Cybr’s growing labs catalog, both of which focus on AWS security blue teaming activities. Let’s check them out!

## [Securing S3 Against Ransomware with YES3](https://cybr.com/hands-on-labs/lab/securing-s3-against-ransomware-with-yes3/)

![YES3 S3 Ransomware Hands-On Lab](https://media.cybr.com/2025/04/YES3-Ransomware-Banner.png)

[View lab >](https://cybr.com/hands-on-labs/lab/securing-s3-against-ransomware-with-yes3/)

Learn how to identify and remediate common S3 security misconfigurations that can lead to S3 ransomware vulnerability (and other issues) using Fog Security’s YES3 Scanner tool. Explore a pre-configured AWS S3 bucket with intentional security misconfigurations, run security scans to detect issues like disabled public access blocks, inadequate encryption, disabled versioning, and missing logging configurations. Then, implement security best practices by enabling versioning, turning on block public access, and removing public bucket policies. By the end of the lab, you will understand how to assess S3 security posture, address vulnerabilities that could lead to unauthorized access or ransomware attacks, and verify their remediation efforts through follow-up scans.

## [Policy as Code with CloudFormation Guard](https://cybr.com/hands-on-labs/lab/policy-as-code-with-cloudformation-guard/)

![Policy as Code with CloudFormation Guard Hands-On Lab Banner](https://media.cybr.com/2025/02/Policy-as-Code-with-CloudFormation-Guard-Banner_v2.jpg)

[View lab >](https://cybr.com/hands-on-labs/lab/policy-as-code-with-cloudformation-guard/)

Learn how to implement policy-as-code using AWS CloudFormation Guard – an open-source tool that helps validate infrastructure templates against organizational policies. You’ll install Guard, create a simple CloudFormation template defining an S3 bucket, and write Guard rules to enforce security standards like proper bucket naming conventions and versioning requirements. You’ll then run Guard and see how it identifies non-compliant resources. You’ll then correct the policy violations and verify compliance – demonstrating how policy-as-code can help catch configuration mistakes before deployment and ensure your infrastructure follows corporate governance standards.

## See you next month with more AWS security labs!

### [View all of our Hands-On Labs >](https://cybr.com/hands-on-labs)

### [Get started for free >](https://cybr.com/auth/register)

## Filed under

- [Announcements](https://cybr.com/announcements/)
- [Blue Team](https://cybr.com/blue-team/)
- [Cloud Security](https://cybr.com/cloud-security/)
- [AWS](https://cybr.com/tag/aws/)
- [AWS Security](https://cybr.com/tag/aws-security/)
- [Cloud Security](https://cybr.com/tag/cloud-security/)

## Comments

Loading comments…

Recommended resources

[![Explore the AWS Certified Security Specialty course](https://media.cybr.com/2023/12/cybr-aws-security-specialty-banner-768x432.jpg)](https://cybr.com/courses/aws-certified-security-specialty-course/)

## Build practical AWS security skills

Start with the core services, then prepare for the AWS Certified Security Specialty exam with guided lessons and hands-on practice.

[Introduction to AWS Security](https://cybr.com/courses/introduction-to-aws-security/) [Security Specialty course](https://cybr.com/courses/aws-certified-security-specialty-course/)