Insecure AWS infrastructure by NCC Group, deployed into your own AWS account for training and for testing cloud auditing tools: wildcard and NotAction IAM policies, inline policies, a role any AWS principal may assume, an S3 bucket without encryption, logging or versioning, and an unencrypted SQS queue.
Not startedDockercommit 98f3de7x86_64 · aarch64Secret
One-shot by default: solve each challenge from its prompt alone.
Audit the account and identify every misconfiguration sadcloud planted.
The brief for this lab lives in its repository.