--- title: "Hands-On Cybersecurity & Cloud Security Labs | Cybr" description: "Practice cloud security, DevSecOps, AppSec, red team, and blue team skills with hands-on AWS, Azure, Terraform, Kubernetes, SQL injection, and XSS labs." url: https://cybr.com/hands-on-labs/ --- # Learn cloud security by doing Build practical, production-ready skills with **one-click hands-on labs** in real cloud environments. Real cloud resources Real-world scenarios Automatic cleanup ![Launching a Cybr lab with one click](https://cybr.com/wp-content/uploads/2023/08/1-click-deploy-opt-updated.png) Lab catalog ## Choose your next lab Search labs More filters 11 **121** labs Ordered by release date - AzureRed Team ### Azure Key Vault Privilege Escalation View Lab > [Azure Key Vault Privilege Escalation](https://cybr.com/hands-on-labs/lab/azure-key-vault-privilege-escalation/) - AzureBlue Team ### Investigate API Access Logs with Azure Application Insights View Lab > [Investigate API Access Logs with Azure Application Insights](https://cybr.com/hands-on-labs/lab/investigate-api-access-logs-with-azure-application-insights/) - AzureRed Team ### Breaching Azure Through an Exposed Blob Storage Container View Lab > [Breaching Azure Through an Exposed Blob Storage Container](https://cybr.com/hands-on-labs/lab/breaching-azure-through-an-exposed-blob-storage-container/) - AzureRed Team ### Intro to Azure Enumeration View Lab > [Intro to Azure Enumeration](https://cybr.com/hands-on-labs/lab/intro-to-azure-enumeration/) - AzureBlue Team ### Scan and secure Azure Terraform with Checkov View Lab > [Scan and secure Azure Terraform with Checkov](https://cybr.com/hands-on-labs/lab/scan-and-secure-azure-terraform-with-checkov/) - AzureBeginner ### Secure Azure Resources with Private Endpoints View Lab > [Secure Azure Resources with Private Endpoints](https://cybr.com/hands-on-labs/lab/secure-azure-resources-with-private-endpoints/) - AzureBeginner ### Deploying Azure resources with Terraform View Lab > [Deploying Azure resources with Terraform](https://cybr.com/hands-on-labs/lab/deploying-azure-resources-with-terraform/) - AzureBeginner ### Deploying Azure resources with Bicep View Lab > [Deploying Azure resources with Bicep](https://cybr.com/hands-on-labs/lab/deploying-azure-resources-with-bicep/) - AzureBeginner ### Harden Azure Functions with Managed Identity View Lab > [Harden Azure Functions with Managed Identity](https://cybr.com/hands-on-labs/lab/harden-azure-functions-with-managed-identity/) - AzureBlue Team ### Hunt and Remediate Azure Blob Exposure with Prowler View Lab > [Hunt and Remediate Azure Blob Exposure with Prowler](https://cybr.com/hands-on-labs/lab/hunt-and-remediate-azure-blob-exposure-with-prowler/) Showing 10 of 121 labs Topic guides ## Go deeper into a platform or security skill Explore focused lab collections for the tools, platforms, and security skills you want to build. - 01 Cloud platform ### AWS hands-on labs Practice identity, data, network, serverless, and detection skills across AWS. Explore topic > [AWS hands-on labs](https://cybr.com/hands-on-labs/aws/) - 02 Cloud platform ### Azure hands-on labs Build practical Azure security skills across identity, networks, resources, and cloud operations. Explore topic > [Azure hands-on labs](https://cybr.com/hands-on-labs/azure/) - 03 Infrastructure as code ### Terraform hands-on labs Build, import, secure, and manage cloud infrastructure with Terraform. Explore topic > [Terraform hands-on labs](https://cybr.com/hands-on-labs/terraform/) - 04 Container security ### Kubernetes hands-on labs Practice cluster architecture, security, installation on AWS, and container orchestration. Explore topic > [Kubernetes hands-on labs](https://cybr.com/hands-on-labs/kubernetes/) - 05 Serverless ### AWS Lambda hands-on labs Find, exploit, and fix security weaknesses in serverless applications. Explore topic > [AWS Lambda hands-on labs](https://cybr.com/hands-on-labs/lambda/) - 06 Identity ### AWS IAM hands-on labs Practice policies, enumeration, access controls, and privilege escalation. Explore topic > [AWS IAM hands-on labs](https://cybr.com/hands-on-labs/iam/) - 07 Storage ### Amazon S3 hands-on labs Secure storage with access controls, encryption, logging, and attack scenarios. Explore topic > [Amazon S3 hands-on labs](https://cybr.com/hands-on-labs/s3/) - 08 Application security ### AppSec hands-on labs Test vulnerable applications, APIs, identity flows, and connected cloud resources. Explore topic > [AppSec hands-on labs](https://cybr.com/hands-on-labs/appsec/) - 09 Detection ### AWS monitoring and detection labs Collect security signals, investigate activity, and automate response tasks. Explore topic > [AWS monitoring and detection labs](https://cybr.com/hands-on-labs/aws-monitoring-detection/) - 10 Certification ### AWS Security Specialty labs Practice the security tasks and skill areas covered by the AWS certification. Explore topic > [AWS Security Specialty labs](https://cybr.com/hands-on-labs/aws-security-specialty/) Built for practice ## Learn without the usual cloud risk Benefit 01 ### Risk-free learning Keep vulnerable training environments far away from corporate resources. Benefit 02 ### Practical learning Learn at your own pace with real resources and real-world scenarios. Benefit 03 ### No surprise costs Lab cleanup prevents forgotten resources from creating surprise bills. Benefit 04 ### Available anywhere Practice from any location with an internet connection. Learner stories ## Skills that carry into real work > "These hands-on labs on the Cybr platform provided practical, real-world scenarios that have significantly improved my ability to implement and manage secure IAM policies in AWS." **Ihor Sasovets** Security Engineer | Penetration Tester > "I must say that after doing these courses and labs, my knowledge has not only increased in the offensive side, but on also how can we secure our accounts by adding multiple layers of access controls like Permission Boundaries, Resource Based Policies, SCPs etc." **1llus1on** Cybr Learner Skills, platforms, and tools ## What you can practice in Cybr hands-on labs Cybr offers browser-based cybersecurity labs across cloud security, DevSecOps, application security, web exploitation, red team, blue team, and certification preparation. Work with AWS, Microsoft Azure, Terraform, Kubernetes, AWS IAM, Amazon S3, Lambda, SQL injection, cross-site scripting (XSS), and cloud detection tools in isolated training environments. Need a reference while you practice? Our [free cloud security cheat sheets](https://cybr.com/cheat-sheets/) cover AWS policies, Terraform commands, network controls, encryption, and incident response. Explore each topic page for relevant references. 01 / Platforms and services ### Cloud security labs on AWS and Azure Practice cloud security across AWS and Microsoft Azure. Work with identity, networks, resources, and cloud operations in Azure. In AWS, practice IAM, Amazon S3, Lambda, CloudTrail, CloudWatch, GuardDuty, Amazon Inspector, and the services security teams use every day. - [AWS labs](https://cybr.com/hands-on-labs/aws/) - [IAM labs](https://cybr.com/hands-on-labs/iam/) - [S3 labs](https://cybr.com/hands-on-labs/s3/) - [Lambda labs](https://cybr.com/hands-on-labs/lambda/) 02 / Terraform, Kubernetes, and more ### Infrastructure and DevSecOps Build infrastructure as code with Terraform, including resources, modules, state, drift, imports, VPCs, and secure access. Kubernetes labs cover cluster security, control plane and worker nodes, installation on AWS, and container orchestration. These labs connect cloud engineering work with practical DevSecOps skills. - [Terraform labs](https://cybr.com/hands-on-labs/terraform/) - [Kubernetes labs](https://cybr.com/hands-on-labs/kubernetes/) - [DevSecOps labs](https://cybr.com/hands-on-lab-category/devsecops/) - [Infrastructure as code labs](https://cybr.com/hands-on-lab-category/iac/) 03 / Security practice ### Red team, blue team, and AppSec labs Practice offensive and defensive security in the same catalog. Red team and AppSec labs cover web exploitation, SQL injection, cross-site scripting (XSS), authentication flaws, vulnerable APIs, privilege escalation, and CTF scenarios. Blue team labs cover secure configuration, monitoring, detection, investigation, and security assessments. - [Red team labs](https://cybr.com/hands-on-lab-category/red-team/) - [Blue team labs](https://cybr.com/hands-on-lab-category/blue-team/) - [AppSec labs](https://cybr.com/hands-on-labs/appsec/) - [Detection labs](https://cybr.com/hands-on-labs/aws-monitoring-detection/) 04 / Level and format ### Guided labs, challenges (including CTFs), and certification practice Choose foundational, beginner, intermediate, or advanced practice. The catalog includes guided labs, open-ended challenges, CTF exercises, sandboxes, and free labs. Certification-focused labs reinforce the AWS Certified Security Specialty skill areas while practical scenarios help you prepare for real cloud security work. - [Free labs](https://cybr.com/hands-on-lab-category/free/) - [Beginner labs](https://cybr.com/hands-on-lab-category/beginner/) - [Challenge labs](https://cybr.com/hands-on-lab-category/challenge/) - [AWS Security Specialty labs](https://cybr.com/hands-on-labs/aws-security-specialty/) [Choose a lab to launch ↑](#catalog-heading)