Premium Hands-on labbeginnerblue teamAWS
Find S3 Security Misconfigurations with Prowler
Learn how to find S3 security misconfigurations with the powerful open-source tool Prowler. It’s your first week on the job, and you’ve been assigned the task of discovering misconfigurations in S3 buckets. There are four specific misconfigurations to find in this lab. Good luck!
- 10 guided tasks
- Video walkthrough
Scenario
You've just joined an organization and it's your first month on the job. Your first task is to find security misconfigurations and potential vulnerabilities in the organization's AWS environments, starting with Amazon S3 buckets. This lab has an S3 bucket that isn't following the security best practices we've learned about in this course. Using the open-source tool Prowler, find all 4 misconfigurations.
What you will learn
- Configure the AWS CLI with the credentials the lab gives you
- Install Prowler and list the S3 checks it can run
- Run Prowler's S3 checks against the lab bucket
- Read the findings in the Prowler dashboard and in the JSON report
- Name the 4 S3 misconfigurations that the scan found
Hands-on lab
Find S3 Security Misconfigurations with Prowler
Included in Cybr Premium.