Lab Path

Cloud Security literacy path on `$CLOUD_LAB` — account setup to mentor handoff with ethics gates at every station.

Lab Path• Audio Walkthrough

00:00/02:57

Visual · t31_lab_path

Lab path = visual cloud security chain on YOUR $CLOUD_LAB. Original Cyberlium.

Draw the path from lab scope to mentor handoff — with stop signs at every stranger tenant scan and escape PoC shortcut.

Document literacy path: `$CLOUD_LAB` setup → shared responsibility → IAM → data/logging → Azure → Docker hygiene → K8s hygiene → CSPM/CWPP/IaC → findings/responsible cloud → capstone. Ethics gates: stranger tenant scan, escape PoC cookbooks, prod cloud/kube apply, prod credential paste, unauthorized disclosure — refused paths labeled red. UTC milestones and artifact IDs per station. Mermaid or sketch chmod 600. Honest N/A if brief skipped live Azure — labeled. Defender breakpoint: where RoE or YOUR accounts discipline prevented out-of-scope test.

1. Path stations

Setup, shared resp, IAM, logging, Azure, Docker, K8s, tools, findings, handoff — ten minimum stations.

Each station links evidence index row and module lesson ID.

Command guide

Try these commands — Path stations

═══ DOCKER & CONTAINER AUDIT ═══

Check container running state and port bindings

Command — copy this

docker ps --format "table {{.ID}}	{{.Image}}	{{.Status}}	{{.Ports}}" 2>/dev/null || echo "docker ps"

Inspect container for elevated capabilities and root user

Command — copy this

docker inspect --format '{{json .HostConfig.Privileged}}' <container_id> 2>/dev/null || true

Run security vulnerability scan on container image using Trivy

Command — copy this

trivy image --severity HIGH,CRITICAL alpine:3.19 2>/dev/null || echo "trivy image alpine:3.19"

═══ KUBERNETES RBAC AUDIT ═══ Check current permissions in namespace

Command — copy this

kubectl auth can-i --list 2>/dev/null || echo "kubectl auth can-i"

Primary tools to practice this lesson: aws, curl. Reference sites: AWS security (https://docs.aws.amazon.com/security/); Azure security (https://learn.microsoft.com/en-us/azure/security/); Kubernetes security (https://kubernetes.io/docs/concepts/security/). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.