Lion Cipher Lab
Scan your AWS account with Prowler, part 1: first scan, first fix
- Cloud Security
- Intermediate
- ~45 min
- Free · no account required
Why it matters
Cloud security POSTURE is the overall state of how safely your cloud account is configured right now — which storage is public, which ports are open, whether the root login has multi-factor authentication, how permissive your identities are. Misconfiguration, not some exotic exploit, is the number one cause of cloud breaches: a storage bucket left public, an admin port open to 0.0.0.0/0, a root account with no MFA. The problem is that a real account has thousands of settings across dozens of services, and no human can eyeball all of them. CSPM — Cloud Security Posture Management — is the…
What you'll learn
- what CSPM and cloud security posture mean
- creating least-privilege read-only AWS credentials for auditing
- installing and running Prowler against an account you own
- reading pass/fail findings mapped to CIS and AWS benchmarks
- prioritising by severity and remediating one high-severity finding
- understanding that a scan is a point-in-time snapshot, not a guarantee
Steps in this lab
- Posture, CSPM, and why misconfiguration is the real risk
- What Prowler is
- Authorisation first — scan only what you own
- Create least-privilege, read-only credentials
- Install Prowler
- Run the scan
- Read the findings and focus on high severity
- Remediate one, then re-scan to confirm
- What a scan is, and what it is not