AWS S3 - Attack and Defense
Premium roomAn overview of security features and common attacks for the AWS S3 service.
medium
To access material, start machines and answer questions login.
- A Versatile Service
S3 helped set AWS apart as a powerhouse in cloud computing. Being able to arbitrarily scale data storage and use it in interactions across AWS services has meant that S3 is deeply entangled in how almost all organizations use AWS. However, that power doesn't come without its own weaknesses - S3 is one of the most commonly abused services in AWS. During this room, you will learn key capabilities and attack surfaces of S3.
Learning Objectives
Students will learn basic S3 concepts, such as:
- buckets
- objects
- ACLs
- bucket policies
Students will learn about common security issues related to public S3 buckets and how S3 buckets are used in automation. Finally, students will use this knowledge to attack an S3 bucket, exfiltrating data and using the data to further compromise an organization.
Ready to learn Cyber Security?
The AWS S3 - Attack and Defense room is only available for Premium or Max subscribers. Signup now to access more than 500 free rooms and learn cyber security through a fun, interactive learning environment.
Already have an account? Log in