You're reading from Building and Automating Penetration Testing Labs in the Cloud Set up cost-effective hacking environments for learning cloud security on AWS, Azure, and GCP

Product type Paperback

Published in Oct 2023

Publisher Packt

ISBN-13 9781837632398

Length 562 pages

Edition 1st Edition

Tools

AWS

Concepts

Cloud Security

Author (1):

Joshua Arvin Lat

View More author details

Table of Contents (15) Chapters

Preface

1. Part 1: A Gentle Introduction to Vulnerable-by-Design Environments

2. Chapter 1: Getting Started with Penetration Testing Labs in the Cloud FREE CHAPTER

3. Chapter 2: Preparing Our First Vulnerable Cloud Lab Environment

4. Chapter 3: Succeeding with Infrastructure as Code Tools and Strategies

5. Part 2: Setting Up Isolated Penetration Testing Lab Environments in the Cloud

6. Chapter 4: Setting Up Isolated Penetration Testing Lab Environments on GCP

7. Chapter 5: Setting Up Isolated Penetration Testing Lab Environments on Azure

8. Chapter 6: Setting Up Isolated Penetration Testing Lab Environments on AWS

9. Part 3: Exploring Advanced Strategies and Best Practices in Lab Environment Design

10. Chapter 7: Setting Up an IAM Privilege Escalation Lab

11. Chapter 8: Designing and Building a Vulnerable Active Directory Lab

12. Chapter 9: Recommended Strategies and Best Practices

13. Index

Why subscribe?

14. Other Books You May Enjoy

Setting up cloud resources and flags manually

In this section, we will set up several lab resources using the AWS Management Console. While these can easily be created automatically with Terraform, we will prepare these manually and use the opportunity to discuss how these resources have been configured and dive deeper into the concepts, terminologies, and services as well.

Similar to what we have in Figure 7.11, we will set up a Quantum Ledger Database (QLDB) database resource along with a Simple Storage Service (S3) bucket:

Figure 7.11 – What we will set up and prepare in this section

We will then set up flags inside these resources—one flag inside the QLDB database resource and another flag stored inside the S3 bucket. If you are wondering what these flags look like, these are simply string values containing the word FLAG stored somewhere inside the resources and components of the lab environment. Of course, we are simplifying things...

The rest of the chapter is locked

You're reading from Building and Automating Penetration Testing Labs in the Cloud Set up cost-effective hacking environments for learning cloud security on AWS, Azure, and GCP

Table of Contents (15) Chapters

Setting up cloud resources and flags manually

Authors (1)

Personalised recommendations for you

You're reading from Building and Automating Penetration Testing Labs in the Cloud Set up cost-effective hacking environments for learning cloud security on AWS, Azure, and GCP

Table of Contents (15) Chapters

Setting up cloud resources and flags manually

Unlock this book and the full library FREE for 7 days

Authors (1)

Personalised recommendations for you