AWS Security
Amazon Web Services attack and defense - IAM, S3, EC2, VPC, Lambda, EKS, CloudTrail and the shared responsibility model. Two-track format (Offensive / Defensive).
Scope
This subcategory covers AWS-specific security: identity and access, storage, compute, networking, serverless, and logging. Multi-cloud and provider-neutral topics live in the sibling subcategories.
Files
| # | File | Format |
|---|---|---|
| 01 | AWS Fundamentals | done |
| 02 | IAM and Credential Attacks | done |
| 03 | S3 and Storage Attacks | done |
| 04 | EC2 and Compute Attacks | done |
| 05 | AWS Defense and Detection | done |
Format
Every file follows the two-track skeleton:
- Overview
- Reconnaissance / Enumeration
- Common Attack Vectors
- Exploitation Recipes
- Post-Exploitation
- Preventive Controls
- Detection Controls
- Verification
- Certification Alignment
- Production Notes
- References
Certification Alignment
- AWS Certified Advanced Networking - Specialty
- AWS Certified Solutions Architect - Associate
- CompTIA Security+
See ../CERTIFICATIONS.md for the full mapping.
Related
- 02 Azure - Microsoft Azure attack and defense
- 03 GCP - Google Cloud attack and defense
- 04 Kubernetes-Cloud - Kubernetes in managed cloud
- 06 IaC - Infrastructure as Code security
- INFRASTRUCTURE - on-premises infrastructure attack and defense
Authorized Use Only
CAUTION
All content in this subcategory is for authorized penetration testing and cloud security assessment of AWS accounts you own or have explicit written permission to test, and educational use. Do not use these techniques against AWS accounts, resources, or services without authorization.