< All Hands-On Labs

Free Hands-On Lab v2 Capture the Flag

API Gateway Lambda Authorizer Bypass

CareBridge is a healthcare provider with a patient portal powered by an API. The records API is protected with an API Gateway Lambda authorizer, a small function that runs in front of the records endpoint and decides who can access records. You'll start the lab as an ordinary patient, find a weakness in the authorizer, and end the lab as an administrator able to read all records.

Free hands-on lab

Launch this lab with a free account

Build practical, real-world skills in a cloud environment.

Create Free Account Already a member? Log in

  • Real cloud environments, not simulations
  • One click to deploy, nothing to install
  • We cover the cloud costs so you can focus on learning