Premium Hands-On Lab v2 Capture the Flag
IAM PutRolePolicy PrivEsc
You can assume a role that grants you access to an Amazon S3 bucket. However, you've discovered an IAM misconfiguration that will enable you to escalate your privileges. Use iam:PutRolePolicy to grant this role increased privileges through custom IAM policies. Then, assume the role to obtain access to sensitive data in Secrets Manager that your IAM user would otherwise be restricted from accessing. You have successfully finished the lab once you've submitted the stored secret in plaintext after decoding it.
Premium hands-on lab
This lab is accessible to Cybr Premium members
Join Premium to unlock this lab and the rest of the hands-on lab library.
- Real cloud environments, not simulations
- One click to deploy, nothing to install
- We cover the cloud costs so you can focus on learning