Lab — Findings

Findings lab on `$CLOUD_LAB` — writeup, priority backlog, responsible cloud checklist bundled.

Lab — Findings• Audio Walkthrough

00:00/02:43

Visual · t31_findings_lab

Lab: findings pack from YOUR $CLOUD_LAB scan artifacts. Original Cyberlium.

Ship professional findings artifacts from YOUR lab scans — writeup, priority, ethics — zero stranger tenant evidence or escape PoCs.

From `$CLOUD_LAB` labs Modules 6–8: (1) report cover — scope, RoE, analyst, UTC; (2) one complete finding writeup Module 9-1; (3) prioritized backlog five findings Module 9-2; (4) responsible cloud checklist Module 9-3; (5) remediation summary stub linking Docker/K8s/tool rows; (6) limitations paragraph (lab vs prod, brief gaps); (7) integrity — `$CLOUD_LAB` only, no stranger tenant scan, no escape PoC repro, no prod paste; (8) chmod 600 index.md. Professional tone — mentor-readable. Cross-link container, K8s, and tools packs.

1. Lab deliverables

Writeup + priority backlog + responsible cloud — single findings thread.

Limitations paragraph mandatory — honest lab scope.

Command guide

Try these commands — Lab deliverables

═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)

Security Hub findings — https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-findings-format.html Defender recommendations — https://learn.microsoft.com/en-us/azure/defender-for-cloud/recommendations-reference Checkov — https://www.checkov.io/

═══ INSTALL ═══

Linux (Debian/Ubuntu):

Command — copy this

pipx install awscli  # or official AWS CLI v2

macOS:

Command — copy this

brew install awscli

Windows: Install AWS CLI v2 from Amazon

═══ LINUX / macOS ═══

Command — copy this

export CLOUD_LAB=${CLOUD_LAB:-$HOME/cyberlium-lab/t31-cloud}

YOUR ACCOUNT — compile findings lab

Command — copy this

aws sts get-caller-identity 2>/dev/null || echo 'AWS findings lab requires YOUR account'
cat > "$CLOUD_LAB/findings/findings-lab-index.md" <<'EOF'
# Findings Lab Index — YOUR accounts
- aws/iam-lab-findings.md
- aws/s3-hygiene-checklist.md (gaps → finding writeups)
- azure/azure-lab-findings.md
- containers/docker-lab-findings.md
- tools/tools-lab-summary.md (checkov/trivy)
- finding-writeup-template.md (copy per finding)
## Integrity
- All findings from YOUR authorized assets only
EOF

Command — copy this

grep -E 'findings|Integrity|YOUR' "$CLOUD_LAB/findings/findings-lab-index.md"
ls "$CLOUD_LAB/findings/"

═══ WINDOWS ═══

Command — copy this

Get-Content $HOME/cyberlium-lab/t31-cloud/findings/responsible-cloud-practices.txt | Select-String NEVER

Primary tools to practice this lesson: grep, aws. Reference sites: Security Hub findings (https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-findings-format.html); Defender recommendations (https://learn.microsoft.com/en-us/azure/defender-for-cloud/recommendations-reference); Checkov (https://www.checkov.io/). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.