ORIGINAL REDDIT POST
Labs for aspiring cloud security engineer
Anyone know of any guided labs out there where I could get hands on exposure? I'm not a complete newbie when it comes to cloud, just want to get a little more experience that I can speak to in interviews.
Anyone know of any guided labs out there where I could get hands on exposure? I'm not a complete newbie when it comes to cloud, just want to get a little more experience that I can speak to in interviews.
Collected discussion
Check out PwnedLabs if you want structured, guided cloud labs (AWS & Azure). If you want free open-source options to deploy into your own dev account: - IAM Vulnerable (Bishop Fox) for AWS privilege escalation. - AWSGoat / AzureGoat for Terraform-deployed vulnerable environments. - flaws.cloud for basic AWS misconfiguration challenges. In interviews, focus heavily on explaining IAM policy evaluation, S3/Storage permissions, and how to write the fix in Terraform/Bicep.
Cybr is also good. Many labs
Check out all of the resources on Cloud Security Office Hours at https://csoh.org
https://pwnedlabs.io/ http://flaws.cloud/ https://hackingthe.cloud/ https://www.reddit.com/r/pwnedlabs/comments/1qbqiyv/cloud_security_engineer_roadmap_updated_free/ ----- also when you say you need little more experience for interviews, that will not happen by "labs" do not try and fake experience by doing labs. Be honest that you've played with xyz tech in lab, and not prod experience. Coz an experienced interviewer can tell, so if the issue is "speaking in interview" then be honest about your lab. infact, document your learning and experiments onGithub and share it. Most jobs ask for a github link anyway, so a better course would be doing that, rather than "little more experience" by doing home labs. LABS ≠ EXPERIENCE
TryHackMe has some great labs.
I think there was a thread about onlythepwnly and the original guy who invented yolo detection/localization... reddy?