< All Hands-On Labs

Free Hands-On Lab Capture the Flag

IAM CreateAccessKey PrivEsc

Exploit iam:CreateAccessKey to get access to an Amazon S3 bucket containing sensitive data that your IAM user should not have been able to access. The flag is the credit card number for "Kayla Sanchez" from the exfiltrated customers file.

Free hands-on lab

Launch this lab with a free account

Build practical, real-world skills in a cloud environment.

Create Free Account Already a member? Log in

  • Real cloud environments, not simulations
  • One click to deploy, nothing to install
  • We cover the cloud costs and risks so you can focus on learning

1 comment

Comments are currently read-only while we migrate to our new platform. In the meantime, ask questions in Discord.

  1. souravvvv

    nice