Attack AWS environments
Think like an attacker in an environment built for safe practice.
- Enumerate identities, policies, data, and services
- Find exposed resources and excessive permissions
- Follow attack paths without risking an employer account
Real AWS environments
Practice AWS security, infrastructure, and deployments with real resources. We handle the accounts, cloud costs, and cleanup.
No credit card required

70,000+ people learn with Cybr







Choose your first lab
Get started with one of our popular AWS labs. Learn step-by-step or test yourself with our challenge and CTF labs.
Lab 01Learn how attackers inspect IAM users, roles, groups, and policies.
Open lab
Lab 02Set up the AWS CLI and run commands that you will use in many Cybr labs.
Open lab
Lab 03Find and inspect stored secrets in a controlled AWS environment.
Open lab
Lab 04Use an S3 bucket policy to discover an AWS Organizations ID.
Open lab
Lab 05Practice finding S3 buckets and reviewing the data that they expose.
Open labAttack and defend AWS
Understand how attacks work, then build controls that prevent, detect, and contain them.
Think like an attacker in an environment built for safe practice.
Build controls that prevent attacks and help teams respond when activity changes.
Free cheat sheets
Keep these free references nearby when you configure permissions, protect data, or test cloud defenses.
Compare AWS services for identity, detection, network protection, and data security.
IAM policy elements, role trust relationships, and cross-account access explained with JSON examples.
Access restrictions, object protection, encryption, and logging controls for S3 buckets.
Compare stateful and stateless traffic filtering, rule behavior, and scope in a VPC.
An introduction to KMS keys, key policies, grants, and data keys for AWS encryption and key management.
Atomic Red Team and Stratus Red Team workflows for simulating cloud attacks and validating defenses.
How the labs work
We prepare an isolated AWS environment just for you, so you can focus on learning instead of account setup and cleanup.
Pick a guided lesson or a challenge that matches your goal.
We create the AWS resources and give you the access for the lab.
Solve the scenario and pick up new skills.
Learn without exposing personal or company resources. We cover all cloud costs for the lab.
AWS learning paths
Follow a structured path when you want related lessons, labs, and practice in one place.
Build defensive skills in identity, monitoring, incident response, and security automation.
Learn how to enumerate AWS resources, find weaknesses, and escalate access safely.
Study how excessive IAM permissions create attack paths and how teams can stop them.
Combine AWS security lessons, labs, practice exams, and study sessions in one path.
Before you start
Yes. A free account gives you access to selected labs and other free content. You do not need a credit card. Create a free account
No. Cybr supplies the AWS environment and the access that each lab needs. Your personal and employer accounts stay separate.
No. Cybr provides the cloud environment, covers its AWS costs, and removes resources after the lab.
You can start with an introductory guided lab. Experienced learners can choose challenges and advanced learning paths.
From Cybr learners
See how community members were able to apply what they learned on the job.
These hands-on labs on the Cybr platform provided practical, real-world scenarios that have significantly improved my ability to implement and manage secure IAM policies in AWS.
I must say that after doing these courses and labs, my knowledge has not only increased in the offensive side, but on also how can we secure our accounts by adding multiple layers of access controls like Permission Boundaries, Resource Based Policies, SCPs etc.
Absolutely loving the content/labs, by far one of the best/easiest cloud resources I've worked with. I completed the IAM PrivEsc course which was a blast, going through it again for the 3rd to cement everything I've learned.
Practice with real AWS resources. We handle the account, costs, and cleanup.
No credit card required