Learn Cloud IAM Concepts and Identify Misconfigurations

Business Scenario

Welcome!

You are a Junior Cloud Security Tester at CyberSecure Solutions. The company uses a cloud platform with multiple users, groups, roles, and permissions.

Your task is to review the organization's Identity and Access Management (IAM) configuration and identify excessive permissions, weak access controls, and other IAM misconfigurations.

The assessment must be performed only in authorized training cloud environment provided by the instructor.

Pre-Lab Preparation

Topic : Cryptography and Cloud Security

1) Cryptography.

2) Cloud Computing Fundamentals.

3) Cloud Security Core Concepts.

4) Major Cloud Platforms Overview.

5) Cloud Vulnerabilities & Risks.

Task 1: Create an AWS Account For Cartforge

1

Open AWS Website

2

2

Click on “Create an AWS Account”

Click Sign Up / Create Account

Enter Email and Account Name

3

2

3

2

4

2

3

2

Verify Your email . You will receive a verification code on your registered email address as shown below.

Copy that Code and enter into the verification code as shown below.

5

2

3

2

Enter Rootuser Password by following  the instructions.

6

2

3

2

Choose The Plan

Choose Free plan from the plan shown in Choose your account plan section.

7

2

3

2

Add information to sign up

8

2

3

2

Add Billing Information

9

2

3

2

 Enter a Verification Code on your registered mobile phone

10

2

3

2

Choose the identity for aws account will use 

11

2

3

2

Verify your Identity

After All verification and steps once done  you see this screen

This type of the Aws Dashboard :

Task 2: Launch Your First Server (AWS EC2)

1

Go to the aws Management console  And Search EC2

2

After Search You will see the Ec2 Dashboard

3

Click on the Launch Instance Button for Creating the Instance

4

You will see the instance dashboard and info Name and Select Ubuntu OS

5

Select the Instance type t2 micro (FREE TIER)

6

Create Key PairClick Create Key Pair

  • Name → cartforge-key

  • Download .pem file

7

Scroll down In the Network Setting Allow SSH HTTP and HTTPS

8

After all done you can launch the instance by click on the launch instance button

9

After click on the Launch instance  button you will see the instance is running after 2 by 2 checks your instance is ready

10

After click on the instance checkbox you can see the public IP so copy that public IP

11

After Click On the copy Open Command Prompt Write Below Command to connect Ec2 Sever

ssh -i cartforge-key.pem ubuntu@your-public-ip

12

Once Connected , You will see something like

ubuntu@ip-123:~$

After successfully launching the Ubuntu EC2 server on AWS, the team is excited to start working on it.

13

Check Current User

whoami

14

Check User ID Info

Id

15

Check Current Location

pwd

16

Check System Info

uname -a

17

List File

ls

Task 3: Build secure custom VPC network.

1

Create VPC

a

Search for VPC

Task 1: Understanding BRD

Before you start building anything, you need to clearly understand what the client actually wants.So, let’s begin by understanding the BRD (Business Requirement Document) shared by the client.

BRD Full Form is Business Requirement Details.BRD like a plan for building a house. This plan helps the builder understand what to build.In the same way,BRD tells developers what the client wants to build

Click to download BRD : BiteBox_BRD.pdf

Activity

After going through BRD list down the Core Features and  Web Pages in the tabulated Format as shown Below.

Col 1Col 2Col 3
Row 1
Row 2
Row 3

Formula

Profit = Revenue - Cost

Task 2: Create WireFrame

Now that you understand the requirements, don’t jump into coding yet. Before development, we always visualize the layout.

Now lets  create a simple wireframe for the homepage.

A wireframe is like a layout plan of a house. Before building, you decide where rooms, doors, and windows will be placed.Similarly, a wireframe helps you plan where elements like headers, images, and buttons will appear on a webpage—before adding design or colours.

Task 3: Code Editor Installation

Good work on completing the planning phase.

Now we will start development. Before that, make sure your system is ready with the required tools.

In this step we will install the VS code editor that will help to Write code efficiently,Organize files , Run and test your application

Go to the visual studio code official website  

1

Click to download Homepage Wireframe : Homepage Wireframe

Choose your operating system(windows / Mac) and download the installation file.

Double click on the download app and Accept the agreement and click next

2

It is a long established fact that a reader will be distracted

b

Sub Steps

a

 Double click on the download app and Accept the agreement and click next 

public class MathSample {
    public static void main(String[] args) {
        int x = 10;
        int y = 20;
        int sum = x + y;
        
        System.out.println("The sum is: " + sum);
    }
}
public class MathSample {
    public static void main(String[] args) {
        int x = 10;
        int y = 20;
        int sum = x + y;
        
        System.out.println("The sum is: " + sum);
    }
}

public class MathSample {
    public static void main(String[] args) {
        int x = 10;
        int y = 20;
        int sum = x + y;
        
        System.out.println("The sum is: " + sum);
    }
}

 

Great job!
You have successfully completed your first lab on BiteBox Project Onboarding.

In this lab, you have: Understood the BRD, Created a wireframe, Set up your development environment, Organised your project structure, Run your first program

You are now ready to move to the next stage of development

Checkpoint

Next-Lab Preparation

   Git Push

git push origin branchName

Topic : Working with a Text and Listin HTML

1) Power of HTML text tags
2) Customizing your style with CSS
3) Listing it right using HTML
4) HTML Link up , attributes of tag, block vs inline elements

Text box Width : 887
Business Scenario, Pre-lab Preparation, Next-lab Preparation, Task, Activity, Checkpoint : 90%.
Steps : 1,2,3 [Sub Steps - a,b,c]
Normal Text, Topic Name : 80%
Subtopic : 70%
Code Box font Size : 16px

Copy of Copy of Copy of Copy of Vertical infinite scroll OG - Template

By Content ITV

Copy of Copy of Copy of Copy of Vertical infinite scroll OG - Template

  • 8