Premium Hands-on labintermediateblue teamAWS
Query AWS accounts for S3 security issues using Steampipe
In this lab, you'll learn how to use an open-source tool called Steampipe to instantly query an AWS account for security issues related to Amazon S3. Steampipe can be used with many other AWS services as well, and not just S3, but that will be the focus of this lab.
- 10 guided tasks
- Video walkthrough
Scenario
In this lab, we're going to use an open-source tool called Steampipe to be able to instantly query the AWS account for security issues related to Amazon S3.
What you will learn
- Install Steampipe and add its AWS plugin.
- Set the Steampipe AWS config file to use the lab profile and the lab region.
- Run SQL queries against the AWS S3 APIs with Steampipe.
- Find the bucket that does not block public access and the bucket that does not enforce encryption in transit.
- Read the account level S3 public access settings.
Hands-on lab
Query AWS accounts for S3 security issues using Steampipe
Included in Cybr Premium.