Learn cloud security by handling incidents at a fictional fintech company, on real AWS environments, with every incident mapped to NCA CCC and PDPL controls.
Welcome aboard. Before the auditor arrives, we need to check three things that worry us: an old storage bucket, an intern's permissions, and a Terraform file nobody has reviewed.
Take them in order, and document everything you find.
CONFIDENTIAL · TRAINING ONLYStart with the easiest. The first three incidents are free, and a browser is all you need.
A finance company left an S3 bucket open to the internet. Find it, see what leaked, and learn how to close it.
An intern with "basic" permissions became Admin in three minutes. Analyze her permissions and activity log to find out how.
A Terraform file is about to deploy with 4 security flaws. Review it and catch them before they reach production.
New incidents are on the way. Follow the academy on X (Twitter) to hear about each one the moment it's out.
Read what happened at the company and exactly what you need to do.
On a real AWS environment or through files on the site, with the tools a real analyst uses.
Submit your answers to save them to your record, and learn the control that should have prevented the incident.
Not a simulation, not a video. You open the vulnerability yourself in a real environment and see what an attacker sees.
Every vulnerability is mapped to the control it breaks in NCA CCC and PDPL — and SAMA when the organization is financial.
Explanations, questions and hints in the language you think in, without getting lost in jargon.