Cert-prep courses with hands-on practice for AWS, Azure, Kubernetes, security and AIModule 1 of every course free, no card →
CloudaQube

Security · generic · intermediate

Cloud Security Engineering: Red vs Blue Team

Master cloud security from both sides of the attack. Learn how red teams exploit IAM misconfigurations, escalate privileges, and move laterally — then build the detection, response, and forensics capabilities that stop them. Covers AWS, Azure, and GCP with real tools used in the field.

  • 7 hours
  • 15 lessons
  • 5 modules
  • updated May 2026
Module 1 freeNo credit cardFull course from $8.99/mo
try it

Try it before you sign up

Read a full lesson from Module 1. No account needed.

free lesson · read · 45 min

IAM Privilege Escalation: Red Team Techniques

In cloud environments, IAM (Identity and Access Management) is the most attacked surface — not the network perimeter. A misconfigured IAM policy is the equivalent of handing an attacker the master key. The most…
curriculum

5 modules, 15 lessons

Module 1 is free — lessons, hands-on walkthrough and quiz.

  • readIAM Privilege Escalation: Red Team Techniques45 min
  • videoVideo: AWS IAM Privilege Escalation Attacks & Defenses45 min
  • readIAM Hardening: Least Privilege, SCPs, and Permission Boundaries35 min
how it's built

Built by the CloudaQube team

No celebrity instructor — here is exactly what goes into the course instead.

  • 01 Last updated May 2026.
  • 02 Any module can become a hands-on lab in Labs Studio.
outcomes

What you'll be able to do

  • 01 Exploit and defend IAM privilege escalation paths using iam:PassRole and policy version attacks
  • 02 Perform cloud attack path enumeration using Pacu, ScoutSuite, and CloudFox
  • 03 Build MITRE ATT&CK-aligned threat models for cloud architectures
  • 04 Configure GuardDuty and Defender for Cloud to detect lateral movement and credential theft
  • 05 Execute an IR playbook for a cloud breach including evidence preservation and IAM containment
  • 06 Write a post-incident report and implement detective controls to prevent recurrence
before you start
  • — Strong understanding of cloud platforms
  • — Basic security knowledge (TLS, encryption)
questions

Before you start

How long does it take?

About 7 hours of lessons, videos and hands-on walkthroughs across 5 modules.

What’s free?

Module 1 in full — lessons, hands-on walkthrough and quiz — with no card required. Any paid plan (from $8.99/mo) unlocks all 5 modules, and starts with a 14-day free trial.

get started

Start the course with Module 1 free.

No card required. Unlock every module from $8.99/mo when you’re ready.

See pricing
      Cloud Security Engineering: Red vs Blue Team — Online Course | CloudaQube