Home > Learning Paths > Path

AWS IAM Privilege Escalation Learning Path icon

AWS IAM Privilege Escalation Learning Path

AWS
Red Team

Path Overview

Master AWS IAM privilege escalation through hands-on learning designed for security professionals and cloud practitioners. This specialized path equips you with the practical skills to identify, exploit, and defend against common IAM vulnerabilities through real-world scenarios. Starting with essential IAM fundamentals and enumeration techniques, you’ll progress to executing actual privilege escalation attacks using multiple different IAM actions that are frequently misconfigured. The path culminates in challenging labs where you’ll apply your skills in realistic environments—extracting secret API keys and accessing protected military schematics. This 100% hands-on learning experience transforms abstract security concepts into practical expertise you can immediately apply to secure cloud environments and advance your cloud security career.

What You’ll Learn

  • Identify and exploit AWS IAM privilege escalation attack paths
  • Learn IAM enumeration techniques
  • Execute hands-on attacks in realistic lab environments
  • Learn how to access sensitive resources like Secrets Manager, KMS, and S3
  • Complete real-world security challenges that simulate actual cloud penetration testing scenarios
  • Think like an attacker to better secure AWS deployments against common security mistakes

Prerequisites

  • Basic familiarity with AWS. If you have no prior AWS experience, this path will be challenging.
  • Basic understanding of security concepts such as authentication and authorization

The labs shown separately in this path are integrated components of the listed courses. We display them individually to provide visibility into course content. For the best learning experience and to properly track your progress and completion, we recommend enrolling in the full courses rather than individual labs.

Content

1

Introduction to AWS Enumeration

Course
🧪 Hands-On Labs
Learn the basics of AWS enumeration in this Hands-On Labs course. Enumeration is the process of identifying and cataloguing AWS resources and services in an environment. The purpose is to gain a comprehensive understanding of the AWS environment, which is a critical step in assessing its security posture. Enumeration is...
2

Getting Started with the AWS CLI

🧪 Hands-On Lab
3

Introduction to AWS IAM Enumeration

🧪 Hands-On Lab
4

Introduction to Secrets Manager Enumeration

🧪 Hands-On Lab
5

Introduction to S3 Enumeration

🧪 Hands-On Lab
6

Discover AWS Account ID via S3 Bucket

🧪 Hands-On Lab
Learn how to enumerate AWS account IDs with very limited access to S3 buckets. This lab simulates compromised credentials and makes use of a clever automated tool to reduce guesses from 1 trillion possible combinations down to only 120.
7

Discover AWS Organization ID via S3 Bucket

🧪 Hands-On Lab
Discover AWS Organization IDs by exploiting limited S3 bucket access. Using an automated approach, this lab demonstrates how to efficiently identify org IDs in just 360 attempts instead of brute-forcing 3.66 quadrillion combinations.
8

AWS IAM Privilege Escalation Labs

Course
🧪 Hands-On Labs
Learn first-hand how attackers exploit IAM misconfigurations in AWS with tactics pulled from real case studies. This course is entirely made up of 🧪 Hands-On Labs with different scenarios that will teach you how to exploit some of the most dangerous IAM privilege escalation weaknesses. The final section is made...
9

IAM CreateAccessKey PrivEsc

🧪 Hands-On Lab
10

IAM CreateLoginProfile PrivEsc

🧪 Hands-On Lab
11

IAM UpdateLoginProfile PrivEsc

🧪 Hands-On Lab
12

Privilege Escalation via IAM Versions

🧪 Hands-On Lab
13

IAM AddUserToGroup PrivEsc

🧪 Hands-On Lab
14

IAM AttachUserPolicy PrivEsc

🧪 Hands-On Lab
15

IAM AttachGroupPolicy PrivEsc

🧪 Hands-On Lab
16

IAM PutUserPolicy PrivEsc

🧪 Hands-On Lab
17

IAM PutGroupPolicy PrivEsc

🧪 Hands-On Lab
18

IAM AttachRolePolicy PrivEsc

🧪 Hands-On Lab
19

IAM PutRolePolicy PrivEsc

🧪 Hands-On Lab
20

IAM Challenge - Secrets Unleashed

🧪 Hands-On Lab
21

IAM Challenge - Escape Room

🧪 Hands-On Lab