--- title: "Beginner Archives - Cybr" description: "Every Beginner hands-on lab at Cybr. Practice cloud security skills in real cloud environments you deploy in one click." url: https://cybr.com/hands-on-lab-category/beginner/ --- # Beginner Hands-On Labs 85 labs you deploy in one click and practice in real cloud environments. [Browse all hands-on labs >](https://cybr.com/hands-on-labs/) - ### Terraform Variables and Outputs View Lab > [Terraform Variables and Outputs](https://cybr.com/hands-on-labs/lab/writing-better-terraform/) - ### Investigate API Access Logs with Azure Application Insights View Lab > [Investigate API Access Logs with Azure Application Insights](https://cybr.com/hands-on-labs/lab/investigate-api-access-logs-with-azure-application-insights/) - ### Breaching Azure Through an Exposed Blob Storage Container View Lab > [Breaching Azure Through an Exposed Blob Storage Container](https://cybr.com/hands-on-labs/lab/breaching-azure-through-an-exposed-blob-storage-container/) - ### Intro to Azure Enumeration View Lab > [Intro to Azure Enumeration](https://cybr.com/hands-on-labs/lab/intro-to-azure-enumeration/) - ### Scan and secure Azure Terraform with Checkov View Lab > [Scan and secure Azure Terraform with Checkov](https://cybr.com/hands-on-labs/lab/scan-and-secure-azure-terraform-with-checkov/) - ### Secure Azure Resources with Private Endpoints View Lab > [Secure Azure Resources with Private Endpoints](https://cybr.com/hands-on-labs/lab/secure-azure-resources-with-private-endpoints/) - ### Deploying Azure resources with Terraform View Lab > [Deploying Azure resources with Terraform](https://cybr.com/hands-on-labs/lab/deploying-azure-resources-with-terraform/) - ### Deploying Azure resources with Bicep View Lab > [Deploying Azure resources with Bicep](https://cybr.com/hands-on-labs/lab/deploying-azure-resources-with-bicep/) - ### Harden Azure Functions with Managed Identity View Lab > [Harden Azure Functions with Managed Identity](https://cybr.com/hands-on-labs/lab/harden-azure-functions-with-managed-identity/) - ### Hunt and Remediate Azure Blob Exposure with Prowler View Lab > [Hunt and Remediate Azure Blob Exposure with Prowler](https://cybr.com/hands-on-labs/lab/hunt-and-remediate-azure-blob-exposure-with-prowler/) - ### Give AI Agents Tools for Read-Only Access to Azure Environments View Lab > [Give AI Agents Tools for Read-Only Access to Azure Environments](https://cybr.com/hands-on-labs/lab/give-ai-agents-tools-for-read-only-access-to-azure-environments/) - ### Give an AI agent access to operational runbooks in Azure View Lab > [Give an AI agent access to operational runbooks in Azure](https://cybr.com/hands-on-labs/lab/give-an-ai-agent-access-to-operational-runbooks-in-azure/) - ### Connect a web app to Microsoft Foundry View Lab > [Connect a web app to Microsoft Foundry](https://cybr.com/hands-on-labs/lab/connect-a-web-app-to-microsoft-foundry/) - ### Build your first prompt agent with Microsoft Foundry View Lab > [Build your first prompt agent with Microsoft Foundry](https://cybr.com/hands-on-labs/lab/build-your-first-prompt-agent-with-microsoft-foundry/) - ### Add a serverless API to an Azure Static Web App View Lab > [Add a serverless API to an Azure Static Web App](https://cybr.com/hands-on-labs/lab/add-a-serverless-api-to-an-azure-static-web-app/) - ### Require Microsoft Entra sign-in for an Azure App View Lab > [Require Microsoft Entra sign-in for an Azure App](https://cybr.com/hands-on-labs/lab/require-microsoft-entra-sign-in-for-an-azure-app/) - ### Deploy a website with Azure Static Web Apps View Lab > [Deploy a website with Azure Static Web Apps](https://cybr.com/hands-on-labs/lab/deploy-a-website-with-azure-static-web-apps/) - ### Investigate Unauthorized Changes in the Azure Activity Log View Lab > [Investigate Unauthorized Changes in the Azure Activity Log](https://cybr.com/hands-on-labs/lab/investigate-unauthorized-changes-in-the-azure-activity-log/) - ### Troubleshoot Azure Storage Permissions with the Azure CLI View Lab > [Troubleshoot Azure Storage Permissions with the Azure CLI](https://cybr.com/hands-on-labs/lab/troubleshoot-azure-storage-permissions-with-the-azure-cli/) - ### Deploy a static website to Azure Storage with the Azure CLI View Lab > [Deploy a static website to Azure Storage with the Azure CLI](https://cybr.com/hands-on-labs/lab/deploy-a-static-website-to-azure-storage-with-the-azure-cli/) - ### Getting Started with the Azure CLI View Lab > [Getting Started with the Azure CLI](https://cybr.com/hands-on-labs/lab/getting-started-with-the-azure-cli/) - ### Publish a static site on Azure View Lab > [Publish a static site on Azure](https://cybr.com/hands-on-labs/lab/publish-a-static-site-on-azure/) - ### Your First Day Inside the Azure Portal View Lab > [Your First Day Inside the Azure Portal](https://cybr.com/hands-on-labs/lab/your-first-day-inside-the-azure-portal/) - ### Breaking JWT to Forge an Admin Token View Lab > [Breaking JWT to Forge an Admin Token](https://cybr.com/hands-on-labs/lab/breaking-jwt-to-forge-an-admin-token/) - ### API Gateway Lambda Authorizer Bypass View Lab > [API Gateway Lambda Authorizer Bypass](https://cybr.com/hands-on-labs/lab/api-gateway-lambda-authorizer-bypass/) - ### Protect CloudWatch Logs data with masking policies View Lab > [Protect CloudWatch Logs data with masking policies](https://cybr.com/hands-on-labs/lab/protect-cloudwatch-logs-data-with-masking-policies/) - ### Install and Configure the Amazon CloudWatch Unified Agent on EC2 View Lab > [Install and Configure the Amazon CloudWatch Unified Agent on EC2](https://cybr.com/hands-on-labs/lab/install-and-configure-the-amazon-cloudwatch-unified-agent-on-ec2/) - ### AWS CLI Tips and Tricks View Lab > [AWS CLI Tips and Tricks](https://cybr.com/hands-on-labs/lab/aws-cli-tips-and-tricks/) - ### Security Observability with CloudWatch Dashboards View Lab > [Security Observability with CloudWatch Dashboards](https://cybr.com/hands-on-labs/lab/security-observability-with-cloudwatch-dashboards/) - ### Pentesting AWS Lambda with CloudFox View Lab > [Pentesting AWS Lambda with CloudFox](https://cybr.com/hands-on-labs/lab/pentesting-aws-lambda-with-cloudfox/) - ### Introduction to AWS Lambda Functions View Lab > [Introduction to AWS Lambda Functions](https://cybr.com/hands-on-labs/lab/introduction-to-aws-lambda-functions/) - ### Introduction to AWS Lambda Enumeration View Lab > [Introduction to AWS Lambda Enumeration](https://cybr.com/hands-on-labs/lab/introduction-to-aws-lambda-enumeration/) - ### Easily retrieve CloudWatch logs from the CLI with awslogs View Lab > [Easily retrieve CloudWatch logs from the CLI with awslogs](https://cybr.com/hands-on-labs/lab/easily-retrieve-cloudwatch-logs-from-the-cli-with-awslogs/) - ### Encrypting an unencrypted RDS database View Lab > [Encrypting an unencrypted RDS database](https://cybr.com/hands-on-labs/lab/encrypting-an-unencrypted-rds-database/) - ### Audit the Blast Radius of KMS Keys with Finders Keypers View Lab > [Audit the Blast Radius of KMS Keys with Finders Keypers](https://cybr.com/hands-on-labs/lab/audit-the-blast-radius-of-kms-keys-with-finders-keypers/) - ### Securing S3 Against Ransomware with YES3 View Lab > [Securing S3 Against Ransomware with YES3](https://cybr.com/hands-on-labs/lab/securing-s3-against-ransomware-with-yes3/) - ### Discover AWS Account ID via S3 Bucket View Lab > [Discover AWS Account ID via S3 Bucket](https://cybr.com/hands-on-labs/lab/discover-aws-account-id-via-s3-bucket/) - ### Generate IAM Credentials Reports View Lab > [Generate IAM Credentials Reports](https://cybr.com/hands-on-labs/lab/generate-iam-credentials-reports/) - ### Convert CLI credentials into AWS Console access with AWS\_Consoler View Lab > [Convert CLI credentials into AWS Console access with AWS\_Consoler](https://cybr.com/hands-on-labs/lab/convert-cli-credentials-into-aws-console-access-with-aws_consoler/) - ### Encrypting S3 data with SSE-C via the CLI View Lab > [Encrypting S3 data with SSE-C via the CLI](https://cybr.com/hands-on-labs/lab/encrypting-s3-data-with-sse-c-via-the-cli/) - ### Build a network and deploy AWS SSM to securely connect to EC2 instances with Terraform View Lab > [Build a network and deploy AWS SSM to securely connect to EC2 instances with Terraform](https://cybr.com/hands-on-labs/lab/build-a-network-and-deploy-aws-ssm-to-securely-connect-to-ec2-instances-with-terraform/) - ### Deploying EC2 instances in a custom VPC with Terraform View Lab > [Deploying EC2 instances in a custom VPC with Terraform](https://cybr.com/hands-on-labs/lab/deploying-ec2-instances-in-a-custom-vpc-with-terraform/) - ### Deploying VPC Endpoints for SSM with Terraform View Lab > [Deploying VPC Endpoints for SSM with Terraform](https://cybr.com/hands-on-labs/lab/deploying-vpc-endpoints-for-ssm-with-terraform/) - ### Building an SSM module and IAM role in Terraform View Lab > [Building an SSM module and IAM role in Terraform](https://cybr.com/hands-on-labs/lab/building-an-ssm-module-and-iam-role-in-terraform/) - ### Create a VPC using Terraform View Lab > [Create a VPC using Terraform](https://cybr.com/hands-on-labs/lab/create-a-vpc-using-terraform/) - ### Building reusable Terraform modules View Lab > [Building reusable Terraform modules](https://cybr.com/hands-on-labs/lab/building-reusable-terraform-modules/) - ### Import an existing Amazon S3 Bucket – Challenge View Lab > [Import an existing Amazon S3 Bucket – Challenge](https://cybr.com/hands-on-labs/lab/import-an-existing-amazon-s3-bucket-challenge/) - ### Importing AWS resources into Terraform View Lab > [Importing AWS resources into Terraform](https://cybr.com/hands-on-labs/lab/importing-aws-resources-into-terraform/) - ### Remote Terraform State View Lab > [Remote Terraform State](https://cybr.com/hands-on-labs/lab/remote-terraform-state/) - ### Encrypting S3 Data with SSE-KMS – CLI View Lab > [Encrypting S3 Data with SSE-KMS – CLI](https://cybr.com/hands-on-labs/lab/encrypting-s3-data-with-sse-kms-cli/) - ### Managing Terraform State and Drift View Lab > [Managing Terraform State and Drift](https://cybr.com/hands-on-labs/lab/managing-terraform-state-and-drift/) - ### Creating an S3 bucket with Terraform View Lab > [Creating an S3 bucket with Terraform](https://cybr.com/hands-on-labs/lab/creating-an-s3-bucket-with-terraform/) - ### Encrypting S3 Data with SSE-KMS – AWS Console View Lab > [Encrypting S3 Data with SSE-KMS – AWS Console](https://cybr.com/hands-on-labs/lab/encrypting-s3-data-with-sse-kms-aws-console/) - ### Check IAM policies against a deny list with IAM Access Analyzer View Lab > [Check IAM policies against a deny list with IAM Access Analyzer](https://cybr.com/hands-on-labs/lab/check-iam-policies-against-a-deny-list-with-iam-access-analyzer/) - ### Check policies for new access before deployment with IAM Access Analyzer View Lab > [Check policies for new access before deployment with IAM Access Analyzer](https://cybr.com/hands-on-labs/lab/check-policies-for-new-access-before-deployment-with-iam-access-analyzer/) - ### S3 ransomware simulation through client-side encryption View Lab > [S3 ransomware simulation through client-side encryption](https://cybr.com/hands-on-labs/lab/s3-ransomware-simulation-through-client-side-encryption/) - ### S3 ransomware simulation through batch file deletion View Lab > [S3 ransomware simulation through batch file deletion](https://cybr.com/hands-on-labs/lab/s3-ransomware-simulation-through-batch-file-deletion/) - ### Backdoor an S3 Bucket via its Bucket Policy View Lab > [Backdoor an S3 Bucket via its Bucket Policy](https://cybr.com/hands-on-labs/lab/backdoor-an-s3-bucket-via-its-bucket-policy/) - ### Compromising EC2 IMDSv2 with RCE to Access Sensitive S3 Data View Lab > [Compromising EC2 IMDSv2 with RCE to Access Sensitive S3 Data](https://cybr.com/hands-on-labs/lab/compromising-ec2-imdsv2-with-rce-to-access-sensitive-s3-data/) - ### Remediate Open SSH Security Groups with AWS Config and SSM View Lab > [Remediate Open SSH Security Groups with AWS Config and SSM](https://cybr.com/hands-on-labs/lab/remediate-open-ssh-security-groups-with-aws-config-and-ssm/) - ### Encrypt and Decrypt Data with KMS and Data Keys View Lab > [Encrypt and Decrypt Data with KMS and Data Keys](https://cybr.com/hands-on-labs/lab/encrypt-and-decrypt-data-with-kms-and-data-keys/) - ### IAM CreateAccessKey PrivEsc View Lab > [IAM CreateAccessKey PrivEsc](https://cybr.com/hands-on-labs/lab/iam-createaccesskey-privesc/) - ### Find vulnerable Lambda Functions with Amazon Inspector View Lab > [Find vulnerable Lambda Functions with Amazon Inspector](https://cybr.com/hands-on-labs/lab/amazon-inspector-sandbox/) - ### Amazon GuardDuty Sandbox View Lab > [Amazon GuardDuty Sandbox](https://cybr.com/hands-on-labs/lab/amazon-guardduty-sandbox/) - ### Privilege Escalation via IAM Versions View Lab > [Privilege Escalation via IAM Versions](https://cybr.com/hands-on-labs/lab/privilege-escalation-via-iam-versions/) - ### Deploy AWS WAF ACL for Application Load Balancer View Lab > [Deploy AWS WAF ACL for Application Load Balancer](https://cybr.com/hands-on-labs/lab/deploy-aws-waf-acl-for-application-load-balancer/) - ### Create a VPC with public and private subnets View Lab > [Create a VPC with public and private subnets](https://cybr.com/hands-on-labs/lab/create-a-vpc-with-public-and-private-subnets/) - ### Configure Security Groups (SGs) and NACLs View Lab > [Configure Security Groups (SGs) and NACLs](https://cybr.com/hands-on-labs/lab/configure-security-groups-sgs-and-nacls/) - ### Introduction to S3 Enumeration View Lab > [Introduction to S3 Enumeration](https://cybr.com/hands-on-labs/lab/introduction-to-s3-enumeration/) - ### Introduction to Secrets Manager Enumeration View Lab > [Introduction to Secrets Manager Enumeration](https://cybr.com/hands-on-labs/lab/introduction-to-secrets-manager-enumeration/) - ### Secure EC2 Access with SSM Session Manager and KMS View Lab > [Secure EC2 Access with SSM Session Manager and KMS](https://cybr.com/hands-on-labs/lab/secure-ec2-access-with-ssm-session-manager-and-kms/) - ### Introduction to AWS IAM Enumeration View Lab > [Introduction to AWS IAM Enumeration](https://cybr.com/hands-on-labs/lab/introduction-to-aws-iam-enumeration/) - ### Encrypt Existing Unencrypted EBS Volumes and Snapshots View Lab > [Encrypt Existing Unencrypted EBS Volumes and Snapshots](https://cybr.com/hands-on-labs/lab/encrypt-existing-unencrypted-ebs-volumes-and-snapshots/) - ### Launching an EC2 instance View Lab > [Launching an EC2 instance](https://cybr.com/hands-on-labs/lab/launching-an-ec2-instance/) - ### Find S3 Security Misconfigurations with Prowler View Lab > [Find S3 Security Misconfigurations with Prowler](https://cybr.com/hands-on-labs/lab/find-s3-security-misconfigurations-with-prowler/) - ### S3 Presigned URLs View Lab > [S3 Presigned URLs](https://cybr.com/hands-on-labs/lab/s3-presigned-urls/) - ### S3 Server Access Logs (CLI) View Lab > [S3 Server Access Logs (CLI)](https://cybr.com/hands-on-labs/lab/s3-server-access-logs-cli/) - ### S3 Server Access Logs (AWS Console) View Lab > [S3 Server Access Logs (AWS Console)](https://cybr.com/hands-on-labs/lab/s3-server-access-logs-aws-console/) - ### S3 Versioning (CLI) View Lab > [S3 Versioning (CLI)](https://cybr.com/hands-on-labs/lab/s3-versioning-cli/) - ### S3 Versioning (AWS Console) View Lab > [S3 Versioning (AWS Console)](https://cybr.com/hands-on-labs/lab/s3-versioning-aws-console/) - ### Creating Buckets & Uploading Objects In S3 (Role) View Lab > [Creating Buckets & Uploading Objects In S3 (Role)](https://cybr.com/hands-on-labs/lab/creating-buckets-uploading-objects-in-s3-role/) - ### Creating Buckets & Uploading Objects In S3 (CLI) View Lab > [Creating Buckets & Uploading Objects In S3 (CLI)](https://cybr.com/hands-on-labs/lab/creating-buckets-uploading-objects-in-s3-cli/) - ### Create a Static S3 Website Using Terraform View Lab > [Create a Static S3 Website Using Terraform](https://cybr.com/hands-on-labs/lab/create-a-static-s3-website-using-terraform/) - ### Creating Buckets & Uploading Objects In S3 (AWS Console) View Lab > [Creating Buckets & Uploading Objects In S3 (AWS Console)](https://cybr.com/hands-on-labs/lab/creating-buckets-uploading-objects-in-s3-aws-console/) - ### Getting Started with the AWS CLI View Lab > [Getting Started with the AWS CLI](https://cybr.com/hands-on-labs/lab/getting-started-with-the-aws-cli/) [See every hands-on lab, in every category >](https://cybr.com/hands-on-labs/)