AWS Pentesting Basics Online Course

AWS Pentesting Basics Online Course

The Introduction to AWS Pentesting course blends policy, technical insights, and hands-on practice to teach penetration testing in AWS. You’ll start by understanding AWS Pentesting Policy and legal guidelines, then move on to exploiting vulnerabilities in services like IAM, S3, EC2, and Lambda. Along the way, you’ll learn about AWS resource naming with ARNs and gain the skills to identify risks, strengthen security, and protect AWS infrastructure effectively.

Who should take this course?

This course is ideal for cybersecurity professionals, cloud engineers, and ethical hackers who want to learn the fundamentals of penetration testing in AWS environments.

What you will learn

• Understand AWS Pentesting policies and legal considerations
• Identify & exploit vulnerabilities in IAM, S3, & Lambda services
• Conduct advanced penetration tests using various tools
• Understand the legal framework of AWS penetration testing
• Identify security vulnerabilities in AWS services
• Secure AWS storage and compute resources against attacks

Course Outline

Basic Concepts

• Course Overview
• AWS Pentesting Policy
• AWS Keys
• IAM Security Issues
• S3
• EC2
• Lambda
• ARNs

Tools

• AWS CLI
• Pacu
• AWS Bucket Dump
• GrayhatWarfare

Flaws

• Flaws: Level 1
• Flaws: Level 2
• Flaws: Level 3
• Flaws: Level 4
• Flaws: Level 5
• Flaws: Level 6

CloudGoat

• Configure CloudGoat
• IAM PrivEsc by Rollback
• Lambda PrivEsc
• Lambda PrivEsc Pt 2
• Cloud Breach S3
• IAM PrivEsc by Attachment
• EC2 SSRF