Amazon S3 Hands-On Labs

Choose a featured S3 lab

Build, secure, and test Amazon S3 environments

Start with bucket discovery or core operations. Then build secure access, assess risky settings, and protect data from ransomware.

1. Free
   Free beginner lab

   Introduction to S3 Enumeration

   Find S3 buckets and inspect the data and access that they expose.

   Open lab
2. Free
   Free foundation lab

   Creating Buckets & Uploading Objects In S3 (CLI)

   Create a bucket and manage objects with the AWS command line.

   Open lab
3. Premium
   Secure access

   Create an IAM Role for Secure S3 Access

   Create and assume an IAM role with controlled access to Amazon S3.

   Open lab
4. Premium
   Security assessment

   Find S3 Security Misconfigurations with Prowler

   Use Prowler to find risky S3 settings across an AWS account.

   Open lab
5. Free
   Free defense lab

   Securing S3 Against Ransomware with YES3

   Assess an S3 bucket and apply controls that reduce ransomware risk.

   Open lab

Amazon S3 security topics

Build practical S3 security skills

The S3 collection covers bucket operations, access, encryption, records, security checks, automated fixes, data theft, and ransomware scenarios.

Free cheat sheets

Amazon S3 cheat sheets for access and data protection

Policy examples and security references for controlling S3 access, protecting objects, managing encryption, and defending against ransomware.

• Amazon S3 security controls cheat sheet

  Bucket access restrictions, object protection, encryption, and logging and monitoring controls.

• S3 bucket policies vs. ACLs vs. IAM policies

  Compare the scope, syntax, and permissions of S3 bucket policies, ACLs, and IAM policies.

• Least-privilege S3 bucket policy cheat sheet

  Restrictive bucket-policy examples and guidance for identifying excessive access and policy weaknesses.

• Amazon S3 ransomware defenses cheat sheet

  Prevention, detection, recovery, and security testing controls for defending S3 data against ransomware.

• KMS encryption and data keys cheat sheet

  Direct KMS encryption and envelope encryption with data keys, including encryption and decryption workflows.

• Prowler cloud security assessment cheat sheet

  Installation, check selection, and reporting commands for assessing cloud security configurations with Prowler.

How the labs work

Practice S3 security without using your AWS account

Cybr prepares the AWS environment for each lab. You can focus on S3 security instead of account setup, billing, and cleanup.

1. Step 01

   Choose an S3 lab

   Start free or choose a premium lab that matches your experience.

2. Step 02

   Launch the environment

   Get the S3 buckets, AWS resources, access, and instructions that the lab requires.

3. Step 03

   Complete the scenario

   Build, inspect, attack, or defend the S3 environment and review the result.

Continue with a structured path

Connect S3 security to AWS defense and attack skills

Use the Blue Team path for protection and response. Use the Red Team path to study discovery, access, and data theft.

• AWS Blue Team

  Build defensive skills in data protection, security assessment, monitoring, response, and automation.

• AWS Red Team

  Practice discovery, exposed-resource analysis, attack paths, and data access in AWS environments.