Cloud Security
Sign in to save your progress, earn points, and unlock module exams.
Topic 2.6 of Cloud Threats and Attack Vectors
The anatomy of S3 bucket misconfiguration, multi-layer access control, real breach case studies, and technical controls for insider threat detection and prevention.
By the end of this topic, you will
Quadrant 1 · e-Tutorial
EZ Bytes · quick recaps
You Left the Vault Open | Insider Threats and Misconfigured S3 Explained in 60 Seconds
61s
Video lessons
Quadrant 2 · e-Content
Quadrant 3 · Web Resources
Downloadable reference material
Quadrant 4 · Self-Assessment
Cloud Threats, Attacks and Privacy
CSA Top 10, SSRF/IMDS, IMDSv2, EDoS, man-in-the-cloud, STRIDE, MITRE ATT&CK for Cloud, and data residency.
Cloud Security: Complete Assessment
Comprehensive 120-question assessment covering all six chapters of the Cloud Security eBook 2026.
Quadrant 5 · Play
Ungraded practice for Insider Threats & Misconfigured Cloud Storage: games and hands-on Skill Labs that use this topic, plus the crossword for Cloud Threats and Attack Vectors. It never affects your unit assessment, and clearing a game or lab for the first time earns EZ Board points when you are signed in.
Lab
Breach at flaws.cloud: CloudTrail Investigation
13 tasks from this unit. Free to play. Earn 30 EZ Board points on your first clear.
Crossword
Cloud Threats and Attack Vectors
10 key terms from this unit. Free to play.
Race
Threat Alley
6 checkpoints from this unit. Free to play. Earn 30 EZ Board points on your first clear.
Discussion · 0 comments
This is the discussion thread for the lesson "Insider Threats & Misconfigured Cloud Storage" (Cloud Security, Unit 2). Ask questions, share real-world examples, and help classmates who are stuck. Conversation starters. Try explaining one of these in your own words: - Describe the five S3 access control layers and their interaction - Enable account-level Block Public Access and explain what it prevents - Classify insider threats as malicious, negligent, or compromised
No comments yet. Start the conversation. Comments here also appear in the forum.
Open in forumCISA Insider Threat Mitigation Guide
CISA guidance on technical and behavioural controls for insider threat programmes.