Dive deep into the often-overlooked world of AWS public resource vulnerabilities across a wide array of services. This workshop goes far beyond exposed S3 buckets, revealing how seemingly harmless configurations in various AWS components can lead to significant security risks. 

Through a mix of real-world scenarios and theoretical misconfigurations, you’ll learn to identify and exploit these vulnerabilities from an attacker’s perspective. Armed with this offensive knowledge, you’ll gain the insights needed to fortify your AWS ecosystem, transforming potential breaches into robust, multi- layered defenses.

Why you should attend

Participants in this workshop will gain a comprehensive understanding of AWS security that goes far beyond common knowledge, positioning them at the forefront public resources security. By learning to identify, exploit, and remediate vulnerabilities across multiple AWS services, attendees will develop a unique “hack to defend” skillset that’s highly sought after in the industry. 

This practical, hands-on experience is exactly what defenders are usually missing when they secure AWS environments: the offensive perspective. The workshop’s innovative approach bridges the gap between offensive and defensive security, enabling participants to transform attack insights into robust defense strategies. 

In an era where cloud breaches are increasingly common, this knowledge isn’t just beneficial – it’s essential. Attendees will leave equipped to immediately enhance their organization’s AWS security posture, making them invaluable assets in the ongoing battle against cloud-based threats.

What you will learn

• Introduction to AWS Public Resources
• Identifying Public Resources
• Exploiting Public Resources (for each relevant AWS service)
• Real-world Attack Scenarios
• Remediation Strategies
• Defensive Techniques
• Hands-on exercises: Identifying and fixing vulnerabilities in a test environment
• Conclusion and Q&A