---
title: "AWS Hands-On Labs for Cloud Security | Cybr"
description: "Practice AWS security, infrastructure, and Terraform skills in real cloud environments. Start a free Cybr lab with no cloud bill."
url: https://cybr.com/hands-on-labs/aws/
---

Real AWS environments

# AWS Hands-On Labs for Cloud Security

Practice AWS security, infrastructure, and deployments with real resources. We handle the accounts, cloud costs, and cleanup.

[Start a free AWS lab →](https://cybr.com/hands-on-labs/lab/introduction-to-aws-iam-enumeration/)

No credit card required

![The Cybr lab player, with lab instructions and a running AWS environment](https://cybr.com/hands-on-labs/aws/lab-player-screenshot.png)

![Johnny Endrihs](https://media.cybr.com/2025/12/johnny-endrihs.jpg)![Christopher](https://media.cybr.com/2023/09/christopher-krisnd.jpeg)![Rafael Martinez](https://media.cybr.com/2024/02/rafael-martinez.jpeg)![Lixin Zhang](https://media.cybr.com/2023/07/lixin-zhang.jpeg)![Karan Thakkar](https://media.cybr.com/2025/11/karan-thakkar.png)

**80,000+** people learn with Cybr

- Real AWS resources
- One-click launch
- No cloud bill

![Cisco](https://cybr.comhttps//media.cybr.com/2026/08/cisco-light-360.png)![Verizon](https://cybr.comhttps//media.cybr.com/2026/08/verizon-light-360.png)![Toyota](https://cybr.comhttps//media.cybr.com/2026/08/toyota-light-360.png)![Check Point](https://cybr.comhttps//media.cybr.com/2026/08/checkpoint-light-360.png)![Moody’s](https://cybr.comhttps//media.cybr.com/2026/08/moodys-light-360.png)![AT&T](https://cybr.comhttps//media.cybr.com/2026/08/att-light-360.png)![Virginia Tech](https://cybr.comhttps//media.cybr.com/2026/08/virginiatech-light-360.png)

Choose your first lab

## Start with a popular AWS security lab

Get started with one of our popular AWS labs. Learn step-by-step or test yourself with our challenge and CTF labs.

1.

   Lab 01

   IAM enumeration

   ### Introduction to AWS IAM Enumeration

   Learn how attackers inspect IAM users, roles, groups, and policies.

   Open lab

   [Introduction to AWS IAM Enumeration](https://cybr.com/hands-on-labs/lab/introduction-to-aws-iam-enumeration/)

2.

   Lab 02

   AWS CLI

   ### Getting Started with the AWS CLI

   Set up the AWS CLI and run commands that you will use in many Cybr labs.

   Open lab

   [Getting Started with the AWS CLI](https://cybr.com/hands-on-labs/lab/getting-started-with-the-aws-cli/)

3.

   Lab 03

   Secrets Manager

   ### Introduction to Secrets Manager Enumeration

   Find and inspect stored secrets in a controlled AWS environment.

   Open lab

   [Introduction to Secrets Manager Enumeration](https://cybr.com/hands-on-labs/lab/introduction-to-secrets-manager-enumeration/)

4.

   Lab 04

   AWS Organizations and S3

   ### Discover AWS Organization ID via S3 Bucket

   Use an S3 bucket policy to discover an AWS Organizations ID.

   Open lab

   [Discover AWS Organization ID via S3 Bucket](https://cybr.com/hands-on-labs/lab/discover-aws-organization-id-via-s3-bucket/)

5.

   Lab 05

   Amazon S3

   ### Introduction to S3 Enumeration

   Practice finding S3 buckets and reviewing the data that they expose.

   Open lab

   [Introduction to S3 Enumeration](https://cybr.com/hands-on-labs/lab/introduction-to-s3-enumeration/)

[Browse the complete lab catalog](https://cybr.com/hands-on-labs/)

Attack and defend AWS

## Learn both sides of cloud security

Understand how attacks work, then build controls that prevent, detect, and contain them.

Red team Offensive practice

### Attack AWS environments

Think like an attacker in an environment built for safe practice.

- Enumerate identities, policies, data, and services
- Find exposed resources and excessive permissions
- Follow attack paths without risking an employer account

[Explore the AWS Red Team path](https://cybr.com/learning-path/aws-red-team-learning-path/)

Blue team Defensive practice

### Defend AWS environments

Build controls that prevent attacks and help teams respond when activity changes.

- Apply least privilege and secure cloud settings
- Use AWS records to detect and investigate activity
- Practice response, recovery, and security automation

[Explore the AWS Blue Team path](https://cybr.com/learning-path/aws-blue-team-learning-path/)

Free cheat sheets

## AWS security cheat sheets

Keep these free references nearby when you configure permissions, protect data, or test cloud defenses.

- [AWS native security services cheat sheet](https://cybr.com/cheat-sheets/aws-security-services/)

  Compare AWS services for identity, detection, network protection, and data security.

- [AWS IAM policy anatomy cheat sheet](https://cybr.com/cheat-sheets/iam-policy-anatomy/)

  IAM policy elements, role trust relationships, and cross-account access explained with JSON examples.

- [Amazon S3 security controls cheat sheet](https://cybr.com/cheat-sheets/amazon-s3-security-controls/)

  Access restrictions, object protection, encryption, and logging controls for S3 buckets.

- [Security groups vs. NACLs cheat sheet](https://cybr.com/cheat-sheets/nacl-vs-sgs/)

  Compare stateful and stateless traffic filtering, rule behavior, and scope in a VPC.

- [Getting started with AWS KMS cheat sheet](https://cybr.com/cheat-sheets/about-kms/)

  An introduction to KMS keys, key policies, grants, and data keys for AWS encryption and key management.

- [Cloud attack simulations cheat sheet](https://cybr.com/cheat-sheets/cloud-attack-simulations/)

  Atomic Red Team and Stratus Red Team workflows for simulating cloud attacks and validating defenses.

[Browse all cloud security cheat sheets](https://cybr.com/cheat-sheets/)

How the labs work

## Practice in AWS without the setup work

We prepare an isolated AWS environment just for you, so you can focus on learning instead of account setup and cleanup.

1. Step 01

   ### Choose a lab

   Pick a guided lesson or a challenge that matches your goal.

2. Step 02

   ### Launch real resources

   We create the AWS resources and give you the access for the lab.

3. Step 03

   ### Complete the task

   Solve the scenario and pick up new skills.

**Completely isolated environments**

Learn without exposing personal or company resources. We cover all cloud costs for the lab.

AWS learning paths

## Prefer guided structure? Check out our learning paths

Follow a structured path when you want related lessons, labs, and practice in one place.

- [AWS Blue Team](https://cybr.com/learning-path/aws-blue-team-learning-path/)

  Build defensive skills in identity, monitoring, incident response, and security automation.

- [AWS Red Team](https://cybr.com/learning-path/aws-red-team-learning-path/)

  Learn how to enumerate AWS resources, find weaknesses, and escalate access safely.

- [AWS IAM Privilege Escalation](https://cybr.com/learning-path/aws-iam-privilege-escalation-learning-path/)

  Study how excessive IAM permissions create attack paths and how teams can stop them.

- [AWS Certified Security Specialty](https://cybr.com/learning-path/aws-certified-security-specialty/)

  Combine AWS security lessons, labs, practice exams, and study sessions in one path.

Before you start

## FAQ

Can I try an AWS lab for free?

Yes. A free account gives you access to selected labs and other free content. You do not need a credit card. [Create a free account](https://cybr.com/auth/register)

Do I need my own AWS account?

No. Cybr supplies the AWS environment and the access that each lab needs. Your personal and employer accounts stay separate.

Will AWS charge me for lab resources?

No. Cybr provides the cloud environment, covers its AWS costs, and removes resources after the lab.

How much AWS experience do I need?

You can start with an introductory guided lab. Experienced learners can choose challenges and advanced learning paths.

From Cybr learners

## What learners get out of the AWS labs

See how community members were able to apply what they learned on the job.

> These hands-on labs on the Cybr platform provided practical, real-world scenarios that have significantly improved my ability to implement and manage secure IAM policies in AWS.

**Ihor Sasovets** Security Engineer | Penetration Tester

> I must say that after doing these courses and labs, my knowledge has not only increased in the offensive side, but on also how can we secure our accounts by adding multiple layers of access controls like Permission Boundaries, Resource Based Policies, SCPs etc.

**1llus1on** Cybr Learner

> Absolutely loving the content/labs, by far one of the best/easiest cloud resources I've worked with. I completed the IAM PrivEsc course which was a blast, going through it again for the 3rd to cement everything I've learned.

**Ryan Feder** Cybersecurity Consultant

## Start an AWS security lab for free

Practice with real AWS resources. We handle the account, costs, and cleanup.

[Start a free AWS lab →](https://cybr.com/hands-on-labs/lab/introduction-to-aws-iam-enumeration/) [Browse all labs](https://cybr.com/hands-on-labs/)

No credit card required