--- title: "Blue Team Archives - Cybr" description: "Every Blue Team hands-on lab at Cybr. Practice cloud security skills in real cloud environments you deploy in one click." url: https://cybr.com/hands-on-lab-category/blue-team/ --- # Blue Team Hands-On Labs 38 labs you deploy in one click and practice in real cloud environments. [Browse all hands-on labs >](https://cybr.com/hands-on-labs/) - ### Investigate API Access Logs with Azure Application Insights View Lab > [Investigate API Access Logs with Azure Application Insights](https://cybr.com/hands-on-labs/lab/investigate-api-access-logs-with-azure-application-insights/) - ### Intro to Azure Enumeration View Lab > [Intro to Azure Enumeration](https://cybr.com/hands-on-labs/lab/intro-to-azure-enumeration/) - ### Scan and secure Azure Terraform with Checkov View Lab > [Scan and secure Azure Terraform with Checkov](https://cybr.com/hands-on-labs/lab/scan-and-secure-azure-terraform-with-checkov/) - ### Hunt and Remediate Azure Blob Exposure with Prowler View Lab > [Hunt and Remediate Azure Blob Exposure with Prowler](https://cybr.com/hands-on-labs/lab/hunt-and-remediate-azure-blob-exposure-with-prowler/) - ### Give AI Agents Tools for Read-Only Access to Azure Environments View Lab > [Give AI Agents Tools for Read-Only Access to Azure Environments](https://cybr.com/hands-on-labs/lab/give-ai-agents-tools-for-read-only-access-to-azure-environments/) - ### Give an AI agent access to operational runbooks in Azure View Lab > [Give an AI agent access to operational runbooks in Azure](https://cybr.com/hands-on-labs/lab/give-an-ai-agent-access-to-operational-runbooks-in-azure/) - ### Require Microsoft Entra sign-in for an Azure App View Lab > [Require Microsoft Entra sign-in for an Azure App](https://cybr.com/hands-on-labs/lab/require-microsoft-entra-sign-in-for-an-azure-app/) - ### Investigate Unauthorized Changes in the Azure Activity Log View Lab > [Investigate Unauthorized Changes in the Azure Activity Log](https://cybr.com/hands-on-labs/lab/investigate-unauthorized-changes-in-the-azure-activity-log/) - ### Reduce your AWS attack surface with port scanning View Lab > [Reduce your AWS attack surface with port scanning](https://cybr.com/hands-on-labs/lab/reduce-aws-attack-surface-with-port-scanning/) - ### Detect Suspicious Network Traffic with VPC Flow Logs View Lab > [Detect Suspicious Network Traffic with VPC Flow Logs](https://cybr.com/hands-on-labs/lab/detect-suspicious-network-traffic-with-vpc-flow-logs/) - ### Protect CloudWatch Logs data with masking policies View Lab > [Protect CloudWatch Logs data with masking policies](https://cybr.com/hands-on-labs/lab/protect-cloudwatch-logs-data-with-masking-policies/) - ### Install and Configure the Amazon CloudWatch Unified Agent on EC2 View Lab > [Install and Configure the Amazon CloudWatch Unified Agent on EC2](https://cybr.com/hands-on-labs/lab/install-and-configure-the-amazon-cloudwatch-unified-agent-on-ec2/) - ### Remediating Ghost Databases in the Cloud View Lab > [Remediating Ghost Databases in the Cloud](https://cybr.com/hands-on-labs/lab/remediating-ghost-databases-in-the-cloud/) - ### Hunting for Ghost Databases in the Cloud View Lab > [Hunting for Ghost Databases in the Cloud](https://cybr.com/hands-on-labs/lab/hunting-for-ghost-databases-in-the-cloud/) - ### Automated Security Response with EventBridge and Lambda View Lab > [Automated Security Response with EventBridge and Lambda](https://cybr.com/hands-on-labs/lab/automated-security-response-with-eventbridge-and-lambda/) - ### Security Observability with CloudWatch Dashboards View Lab > [Security Observability with CloudWatch Dashboards](https://cybr.com/hands-on-labs/lab/security-observability-with-cloudwatch-dashboards/) - ### Easily retrieve CloudWatch logs from the CLI with awslogs View Lab > [Easily retrieve CloudWatch logs from the CLI with awslogs](https://cybr.com/hands-on-labs/lab/easily-retrieve-cloudwatch-logs-from-the-cli-with-awslogs/) - ### Encrypting an unencrypted RDS database View Lab > [Encrypting an unencrypted RDS database](https://cybr.com/hands-on-labs/lab/encrypting-an-unencrypted-rds-database/) - ### Audit the Blast Radius of KMS Keys with Finders Keypers View Lab > [Audit the Blast Radius of KMS Keys with Finders Keypers](https://cybr.com/hands-on-labs/lab/audit-the-blast-radius-of-kms-keys-with-finders-keypers/) - ### Securing S3 Against Ransomware with YES3 View Lab > [Securing S3 Against Ransomware with YES3](https://cybr.com/hands-on-labs/lab/securing-s3-against-ransomware-with-yes3/) - ### Policy as Code with CloudFormation Guard View Lab > [Policy as Code with CloudFormation Guard](https://cybr.com/hands-on-labs/lab/policy-as-code-with-cloudformation-guard/) - ### Create an IAM Role for Secure S3 Access View Lab > [Create an IAM Role for Secure S3 Access](https://cybr.com/hands-on-labs/lab/create-an-iam-role-for-secure-s3-access/) - ### Automated S3 Remediation to Enforce Block Public Access View Lab > [Automated S3 Remediation to Enforce Block Public Access](https://cybr.com/hands-on-labs/lab/automated-s3-remediation-to-enforce-block-public-access/) - ### Query IAM Credentials Reports with Steampipe View Lab > [Query IAM Credentials Reports with Steampipe](https://cybr.com/hands-on-labs/lab/query-iam-credentials-reports-with-steampipe/) - ### Generate IAM Credentials Reports View Lab > [Generate IAM Credentials Reports](https://cybr.com/hands-on-labs/lab/generate-iam-credentials-reports/) - ### Encrypting S3 data with SSE-C via the CLI View Lab > [Encrypting S3 data with SSE-C via the CLI](https://cybr.com/hands-on-labs/lab/encrypting-s3-data-with-sse-c-via-the-cli/) - ### Check IAM policies against a deny list with IAM Access Analyzer View Lab > [Check IAM policies against a deny list with IAM Access Analyzer](https://cybr.com/hands-on-labs/lab/check-iam-policies-against-a-deny-list-with-iam-access-analyzer/) - ### Check policies for new access before deployment with IAM Access Analyzer View Lab > [Check policies for new access before deployment with IAM Access Analyzer](https://cybr.com/hands-on-labs/lab/check-policies-for-new-access-before-deployment-with-iam-access-analyzer/) - ### Remediate Open SSH Security Groups with AWS Config and SSM View Lab > [Remediate Open SSH Security Groups with AWS Config and SSM](https://cybr.com/hands-on-labs/lab/remediate-open-ssh-security-groups-with-aws-config-and-ssm/) - ### Encrypt and Decrypt Data with KMS and Data Keys View Lab > [Encrypt and Decrypt Data with KMS and Data Keys](https://cybr.com/hands-on-labs/lab/encrypt-and-decrypt-data-with-kms-and-data-keys/) - ### Find vulnerable Lambda Functions with Amazon Inspector View Lab > [Find vulnerable Lambda Functions with Amazon Inspector](https://cybr.com/hands-on-labs/lab/amazon-inspector-sandbox/) - ### Amazon GuardDuty Sandbox View Lab > [Amazon GuardDuty Sandbox](https://cybr.com/hands-on-labs/lab/amazon-guardduty-sandbox/) - ### Deploy AWS WAF ACL for Application Load Balancer View Lab > [Deploy AWS WAF ACL for Application Load Balancer](https://cybr.com/hands-on-labs/lab/deploy-aws-waf-acl-for-application-load-balancer/) - ### Create a VPC with public and private subnets View Lab > [Create a VPC with public and private subnets](https://cybr.com/hands-on-labs/lab/create-a-vpc-with-public-and-private-subnets/) - ### Configure Security Groups (SGs) and NACLs View Lab > [Configure Security Groups (SGs) and NACLs](https://cybr.com/hands-on-labs/lab/configure-security-groups-sgs-and-nacls/) - ### Encrypt Existing Unencrypted EBS Volumes and Snapshots View Lab > [Encrypt Existing Unencrypted EBS Volumes and Snapshots](https://cybr.com/hands-on-labs/lab/encrypt-existing-unencrypted-ebs-volumes-and-snapshots/) - ### Query AWS accounts for S3 security issues using Steampipe View Lab > [Query AWS accounts for S3 security issues using Steampipe](https://cybr.com/hands-on-labs/lab/query-aws-accounts-for-s3-security-issues-using-steampipe/) - ### Find S3 Security Misconfigurations with Prowler View Lab > [Find S3 Security Misconfigurations with Prowler](https://cybr.com/hands-on-labs/lab/find-s3-security-misconfigurations-with-prowler/) [See every hands-on lab, in every category >](https://cybr.com/hands-on-labs/)