Summary

In this chapter, we were able to successfully set up an IAM privilege escalation lab environment on AWS. We started by setting up a Cloud9 environment, which we utilized to prepare and run our Terraform configuration code. After that, we proceeded with setting up the flags along with various cloud resources using the AWS Management Console. We then used Terraform to automatically generate the rest of the IAM privilege escalation lab. After completing the lab setup, we performed a penetration testing simulation to verify that our IAM privilege escalation lab had been configured correctly.

In the next chapter, we will design and build a vulnerable Active Directory lab inside an isolated network environment in Microsoft Azure. We will deliberately introduce various security misconfigurations to mimic common security issues present in real-world Active Directory implementations. If you are interested in learning how to build (and exploit) an Active Directory lab, then the next...