● HANDS-ON WORKSHOP
Cloud, k8s & CI/CD Trust Hardening
Discover defensive and offensive strategies for Cloud Least Privilege, Key Management, and Secure CI/CD in an intensive 2-day hands-on cloud security workshop.
Cyber Helmets and HackTricks Training are collaborating to develop and deliver an exclusive online hands-on cloud security workshop, focused on applying least-privilege at scale, securing key-management operations, and preventing common cloud-pivoting techniques across Cloud (AWS, Azure, and GCP.), Kubernetes and CI/CD pipelines.
● WHAT YOU’LL DO
What you’ll work on
Harden cloud identities
Review how IAM works across AWS, Azure, and GCP, and understand why the lack of least-privilege configurations remains the most common cloud security issue.
Implement least-privilege at scale
Learn how to use modern and novel tools to design, validate, and enforce least-privilege configurations in AWS IAM, Azure RBAC, and GCP IAM.
Reduce misconfiguration risk with KMS
Explore how Key Management Services operate across cloud providers and learn how to secure encryption keys against misuse, abuse, and privilege escalation.
Real-world cloud attack case studies
Analyze real-world cloud attacks involving credential abuse and secret exposure, and replicate defensive techniques in a controlled environment.
Defend CI/CD pipelines
Harden CI/CD pipelines to prevent unauthorized deployments, supply-chain attacks, and credential leakage across build and deployment workflows.
Detect cloud pivoting and protect Kubernetes
Understand pivoting techniques used in compromised cloud environments and apply security controls to Amazon EKS and Kubernetes clusters to prevent lateral movement and privilege escalation.
● AGENDA
Your 2-day training journey
Day 1
Multi-Cloud IAM Hardening
→ Least-privilege principles
→ Permission boundaries, service accounts, and role-based access
→ Common IAM anti-patterns and how to fix them
Secure Key Management
→ How AWS KMS, Azure Key Vault, and GCP Cloud KMS work
→ Preventing key misuse and enforcing separation of duties
→ Monitoring and auditing key-management activities
Day 2
Secure CI/CD and Supply-Chain Defense
→ Locking down secrets, roles, and pipeline permissions
→ Preventing unauthorized pipeline execution and image tampering
Kubernetes & EKS Security
→ Understanding cloud pivoting risks in compromised clusters
→ Hardening nodes, IAM roles, and network boundaries
→ Implementing detection for lateral movement patterns
Final Assessment – Recap & Hands-On Lab
● INSTRUCTORS
Meet the instructors
Carlos Polop
Security researcher, telecommunications engineer and creator of HackTricks with extensive experience in penetration testing, red teaming and cloud security tools.
Ignacio Dominguez
Cloud security engineer and co-founder of HackTricks Training, currently working as a cloud security expert with DevSecOps experience.
● WHAT YOU’LL GAIN
What you’ll gain
- → A deep understanding of misconfiguration risks across major cloud platforms
- → Practical skills for detecting and preventing cloud abuse scenarios
- → Knowledge of secure key-management architecture and how to protect encryption keys
- → Tools and frameworks for monitoring CI/CD workflows for integrity and policy enforcement
- → Hands-on experience applying defensive configurations to AWS EKS clusters
- → Confidence in identifying and mitigating cloud-pivoting behaviors
● REQUIREMENTS & PREREQUISITES
Requirements
- → Create an account at HackTricks Training (access provided as part of the workshop)
- → Basic familiarity with at least one cloud provider (AWS, Azure, or GCP)
- → Understanding of IAM principles
- → Use of CLI
- → Optional: Kubernetes basics
● BOOK YOUR SEAT
Step into the arena
Join Cyber Helmets & HackTricks Training for an intensive two-day, hands-on workshop on cloud security.
Book your seat
What's included:
- 2 days of live interactive training (6h/day)
- Hands-on HackTricks Training Labs (AWS, Azure, GCP)
- Certificate of Completion to showcase your expertise
- Post-training reference materials
