--- title: "AWS IAM Privilege Escalation Learning Path - Cybr" description: "Master AWS IAM privilege escalation through hands-on learning designed for security professionals and cloud practitioners. Identify, exploit and defend against common IAM weaknesses in real AWS environments." url: https://cybr.com/learning-path/aws-iam-privilege-escalation-learning-path/ --- # AWS IAM Privilege Escalation Learning Path - AWS - Red Team 2 courses 19 hands-on labs ## Path Overview Master AWS IAM privilege escalation through hands-on learning designed for security professionals and cloud practitioners. This specialized path equips you with the practical skills to identify, exploit, and defend against common IAM vulnerabilities through real-world scenarios. Starting with essential IAM fundamentals and enumeration techniques, you’ll progress to executing actual privilege escalation attacks using multiple different IAM actions that are frequently misconfigured. The path culminates in challenging labs where you’ll apply your skills in realistic environments, extracting secret API keys and accessing protected military schematics. This 100% hands-on learning experience transforms abstract security concepts into practical expertise you can immediately apply to secure cloud environments and advance your cloud security career. ## What You’ll Learn - Identify and exploit AWS IAM privilege escalation attack paths - Learn IAM enumeration techniques - Execute hands-on attacks in realistic lab environments - Learn how to access sensitive resources like Secrets Manager, KMS, and S3 - Complete real-world security challenges that simulate actual cloud penetration testing scenarios - Think like an attacker to better secure AWS deployments against common security mistakes ## Prerequisites - Basic familiarity with AWS. If you have no prior AWS experience, this path will be challenging. - Basic understanding of security concepts such as authentication and authorization The labs shown separately in this path are integrated components of the listed courses. We display them individually to provide visibility into course content. For the best learning experience and to properly track your progress and completion, we recommend enrolling in the full courses rather than individual labs. ## Content 21 items 1. ### Introduction to AWS Enumeration Course Hands-On Labs Learn the basics of AWS enumeration in this Hands-On Labs course. Enumeration is the process of identifying and cataloguing AWS resources and services in an environment. The purpose is to gain a comprehensive understanding of the AWS environment, which is a critical step in assessing its security posture. Enumeration is... 1.5 hours Popular View Content [Introduction to AWS Enumeration](https://cybr.com/courses/introduction-to-aws-enumeration/) 2. ### Getting Started with the AWS CLI Hands-On Lab 20 minutes Popular View Content [Getting Started with the AWS CLI](https://cybr.com/hands-on-labs/lab/getting-started-with-the-aws-cli/) 3. ### Introduction to AWS IAM Enumeration Hands-On Lab 20 minutes Popular View Content [Introduction to AWS IAM Enumeration](https://cybr.com/hands-on-labs/lab/introduction-to-aws-iam-enumeration/) 4. ### Introduction to Secrets Manager Enumeration Hands-On Lab 20 minutes Popular View Content [Introduction to Secrets Manager Enumeration](https://cybr.com/hands-on-labs/lab/introduction-to-secrets-manager-enumeration/) 5. ### Introduction to S3 Enumeration Hands-On Lab 20 minutes Popular View Content [Introduction to S3 Enumeration](https://cybr.com/hands-on-labs/lab/introduction-to-s3-enumeration/) 6. ### Discover AWS Account ID via S3 Bucket Hands-On Lab Learn how to enumerate AWS account IDs with very limited access to S3 buckets. This lab simulates compromised credentials and makes use of a clever automated tool to reduce guesses from 1 trillion possible combinations down to only 120. 20 minutes Popular View Content [Discover AWS Account ID via S3 Bucket](https://cybr.com/hands-on-labs/lab/discover-aws-account-id-via-s3-bucket/) 7. ### Discover AWS Organization ID via S3 Bucket Hands-On Lab Discover AWS Organization IDs by exploiting limited S3 bucket access. Using an automated approach, this lab demonstrates how to efficiently identify org IDs in just 360 attempts instead of brute-forcing 3.66 quadrillion combinations. 20 minutes Popular View Content [Discover AWS Organization ID via S3 Bucket](https://cybr.com/hands-on-labs/lab/discover-aws-organization-id-via-s3-bucket/) 8. ### AWS IAM Privilege Escalation Labs Course Hands-On Labs Learn first-hand how attackers exploit IAM misconfigurations in AWS with tactics pulled from real case studies. This course is entirely made up of 🧪 Hands-On Labs with different scenarios that will teach you how to exploit some of the most dangerous IAM privilege escalation weaknesses. The final section is made... 5 hours Popular View Content [AWS IAM Privilege Escalation Labs](https://cybr.com/courses/iam-privilege-escalation-labs/) 9. ### IAM CreateAccessKey PrivEsc Hands-On Lab 20 minutes Popular View Content [IAM CreateAccessKey PrivEsc](https://cybr.com/hands-on-labs/lab/iam-createaccesskey-privesc/) 10. ### IAM CreateLoginProfile PrivEsc Hands-On Lab 10 minutes Popular View Content [IAM CreateLoginProfile PrivEsc](https://cybr.com/hands-on-labs/lab/iam-createloginprofile-privesc/) 11. ### IAM UpdateLoginProfile PrivEsc Hands-On Lab 6 minutes View Content [IAM UpdateLoginProfile PrivEsc](https://cybr.com/hands-on-labs/lab/iam-updateloginprofile-privesc/) 12. ### Privilege Escalation via IAM Versions Hands-On Lab 9 minutes Popular View Content [Privilege Escalation via IAM Versions](https://cybr.com/hands-on-labs/lab/privilege-escalation-via-iam-versions/) 13. ### IAM AddUserToGroup PrivEsc Hands-On Lab 10 minutes View Content [IAM AddUserToGroup PrivEsc](https://cybr.com/hands-on-labs/lab/iam-addusertogroup-privesc/) 14. ### IAM AttachUserPolicy PrivEsc Hands-On Lab 9 minutes View Content [IAM AttachUserPolicy PrivEsc](https://cybr.com/hands-on-labs/lab/iam-attachuserpolicy-privesc/) 15. ### IAM AttachGroupPolicy PrivEsc Hands-On Lab 5 minutes View Content [IAM AttachGroupPolicy PrivEsc](https://cybr.com/hands-on-labs/lab/iam-attachgrouppolicy-privesc/) 16. ### IAM PutUserPolicy PrivEsc Hands-On Lab 10 minutes View Content [IAM PutUserPolicy PrivEsc](https://cybr.com/hands-on-labs/lab/iam-putuserpolicy-privesc/) 17. ### IAM PutGroupPolicy PrivEsc Hands-On Lab 20 minutes View Content [IAM PutGroupPolicy PrivEsc](https://cybr.com/hands-on-labs/lab/iam-putgrouppolicy-privesc/) 18. ### IAM AttachRolePolicy PrivEsc Hands-On Lab 10 minutes Popular View Content [IAM AttachRolePolicy PrivEsc](https://cybr.com/hands-on-labs/lab/iam-attachrolepolicy-privesc/) 19. ### IAM PutRolePolicy PrivEsc Hands-On Lab 15 minutes View Content [IAM PutRolePolicy PrivEsc](https://cybr.com/hands-on-labs/lab/iam-putrolepolicy-privesc/) 20. ### IAM Challenge - Secrets Unleashed Hands-On Lab 1 hour Popular View Content [IAM Challenge - Secrets Unleashed](https://cybr.com/hands-on-labs/lab/iam-challenge-secrets-unleashed/) 21. ### IAM Challenge - Escape Room Hands-On Lab 1 hour Popular View Content [IAM Challenge - Escape Room](https://cybr.com/hands-on-labs/lab/iam-challenge-escape-room/) ## Ready to advance your cloud security skills? Join thousands of security professionals who are building their skills with our practical cloud security training [Start Learning](https://cybr.com/auth/register)