Nine AWS challenges, updated

We have updated the nine challenges in the AWS game on SecDim Play.

AWS is responsible for the security of the cloud. The security of what you run in it is yours. Each service has its own hardening configurations.

Each challenge focuses on one service:

• S3: public access, encryption, versioning and a wildcard IAM policy
• IAM Lambda S3: an IAM policy that grants everything through a wildcard
• VPC: unrestricted inbound and outbound traffic
• EC2: insecure access to instance metadata, and an unencrypted disk
• ECR: a public image registry, mutable image tags, and image scanning switched off
• Cloudfront: plain HTTP, no WAF, and insufficient logging
• Loadbalancer: plain HTTP allowed
• RDS and DynamoDB: encryption at rest, and backup and recovery

Play the AWS game: Play - SecDim