Learn cloud security — a hands-on roadmap, not a reading list.
A clear path from zero to job-ready, where every step is a real lab in a real AWS console. Pick your stage below and start — your first lab is free.
Complete beginners
Never touched AWS or security? Stage 1 assumes nothing.
Developers & IT pros
Add cloud-security skills employers test for — with labs to prove them.
Career switchers
The hands-on path into cloud or security, from any background.
No AWS account needed. Every lab runs in an isolated managed environment — just a browser.
- 01~1–2 weeksBeginner labs
Cloud Security Foundations
Lock down the basics attackers go for first — and stop being scared of the AWS console.
- IAM least-privilege & policy analysis
- Find & fix public S3 exposure
- Security groups & network basics
- Turn on and actually read CloudTrail
- Root / MFA hardening & KMS basics
- 02~2–3 weeksIntermediate labs
Detect & Defend
Spot and stop an attack inside a live AWS account.
- Trigger & triage threat-detection findings
- Hunt threats in VPC flow logs
- Auto-remediate misconfig with Config
- Exploit & contain an IMDS / SSRF flaw
- Vulnerability scanning & secrets exposure
- 03~3–4 weeksAdvanced labs
Attack, Detect, Respond
Run a full breach-and-incident-response the way a real engineer does.
- Multi-tier breach + incident response
- Privilege-escalation chains (and detection)
- Write & validate detection rules
- Container / Kubernetes security
- CloudTrail forensics & timeline reconstruction
- 04~2 weeksSOC track
Round out the SOC — SIEM & SOAR
Complete the blue-team picture: detection at scale and automated response.
- Detection engineering & rule tuning
- Log analysis & threat hunting
- Automated response playbooks
- Alert enrichment & case workflows
Where this roadmap gets you
New here? Start with the blog.
Labs — frequently asked questions
What do I need to start a lab?
Just a browser. Labs run in managed cloud environments — no AWS account, no install, no credit card for the free lab.
What exactly happens when I launch a lab?
We provision a real, throwaway AWS account in your browser. You get actual AWS console access — not a simulator — to complete the scenario. When you finish (or the timer expires) the account is automatically wiped.
Is my real AWS account at risk?
None at all. Every lab runs in its own isolated, throwaway account that we own and wipe after use. You never connect your personal or company AWS account.
Can I launch the same lab more than once?
Yes — per-lab purchase includes multiple launches so you can retry if you get stuck or want to practise again from a clean state.
How does 'Check my work' grading work?
When you click Check my work, our automated grader inspects your live AWS session through the AWS APIs and verifies whether the specific misconfigurations are actually fixed — not just ticked off a checklist. You get immediate, honest feedback on what's done and what's still open.
How is this different from video courses or platforms like ACloudGuru?
Video courses teach you to watch someone else secure things. Our labs put you in a real AWS account with a real security scenario and grade your actual changes. The difference shows up in job interviews.
How long do I have access after buying a lab?
Per-lab purchases include a set access window and a fixed number of launches from your first launch — enough to complete the lab, take a break, and revisit from a clean state. The exact window and launch count for each lab are shown on its page and at checkout. Monthly pass subscribers can launch any lab throughout their subscription, within fair-use limits (up to 5 launches a day, 100 a month).
Do I get a certificate?
Yes — you receive a digitally signed completion certificate from ShieldSync Security Private Limited for each lab you complete.
What payment methods are accepted?
We accept UPI, all major debit/credit cards, net banking, and popular wallets (Paytm, PhonePe, Google Pay) — secured through the Paytm payment gateway.
Can I cancel the monthly pass?
Yes — cancel anytime and you won't be charged again. Your access continues to the end of the current paid cycle.
Are AWS labs the main focus?
Yes — AWS cloud security is our flagship track and the deepest offering. A SOC track (SIEM & SOAR) is in development to round out the blue-team picture.
Can teams or companies use the labs for training?
Yes — contact us for team access, volume pricing, and a custom labs-as-a-service arrangement tailored to your team's skill gaps.
Related reads
Start Stage 1 — free
Your first cloud security lab is on us. No account, no setup — just a browser.