Cloud › Module 2 › Lesson 4
Lab — Shared
Pack shared model, CSP vs customer, and misconfig cards — shared responsibility file from $CLOUD_LAB only.
Visual · t31_shared_lab
Lab: shared responsibility pack. $CLOUD_LAB only. Original Cyberlium.
Opening
Shared pack ties model to ownership to misconfig — paperwork before IAM module.
Lessons 2-1–2-3 named shared model, CSP vs customer ownership, and misconfig classes. This lab merges three cards into one $CLOUD_LAB shared-responsibility artifact with M1 ethics cross-reference. No stranger tenant access — shared model literacy paperwork only. Next: Quiz — Shared Responsibility.
1. Lab contract: shared responsibility pack
Create $HOME/cyberlium-lab/t31-m02-l04-shared-lab.txt merging shared model, ownership table, and misconfig sections with $CLOUD_LAB resource ID and M1 ethics cross-reference.
Optional: one-line note which sandbox resource you used — fictional names OK.
Command guide
Try these commands — Lab contract: shared responsibility pack
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
NIST cloud — https://csrc.nist.gov/publications/detail/sp/800-144/final AWS Well-Architected Security — https://docs.aws.amazon.com/wellarchitected/latest/security-pillar/welcome.html Azure Well-Architected — https://learn.microsoft.com/en-us/azure/well-architected/security/
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
sudo apt install python3
macOS:
Command — copy this
brew install python3
Windows: Download https://python.org/downloads/
═══ LINUX / macOS ═══
Command — copy this
export CLOUD_LAB=${CLOUD_LAB:-$HOME/cyberlium-lab/t31-cloud}
python3 - <<'PY'
import os
lab = os.environ.get('CLOUD_LAB', os.path.expanduser('~/cyberlium-lab/t31-cloud'))
path = os.path.join(lab, 'notes', 'shared-responsibility-lab-summary.md')
open(path, 'w').write('
'.join([
'# Shared Responsibility Lab Summary',
'## Completed (YOUR lab)',
' - shared-responsibility-checklist.md reviewed',
' - misconfig-named-literacy.txt mapped to YOUR account fixes',
'## Next actions (YOUR account)',
' - Enable Block Public Access on all S3 buckets you own',
' - Verify CloudTrail multi-region in YOUR account',
'## Refusals',
' - No stranger bucket enumeration; no unauthorized CSPM scans',
]))
print(f'Wrote {path}')
PYCommand — copy this
grep -E 'Refusals|YOUR account' "$CLOUD_LAB/notes/shared-responsibility-lab-summary.md"
═══ WINDOWS ═══
Command — copy this
Get-Content $HOME/cyberlium-lab/t31-cloud/notes/shared-responsibility-checklist.md | Select-String YOU
Primary tools to practice this lesson: grep, python3. Reference sites: NIST cloud (https://csrc.nist.gov/publications/detail/sp/800-144/final); AWS Well-Architected Security (https://docs.aws.amazon.com/wellarchitected/latest/security-pillar/welcome.html); Azure Well-Architected (https://learn.microsoft.com/en-us/azure/well-architected/security/). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Cross-check refusal boundaries
Grep pack for stranger account IDs, leaked keys, bucket scanner commands, offensive playbooks — redact or delete. Pack stays documentary hardening literacy.
Update pack if you rotate sandbox account — note new account ID.
3. Lock the proof
chmod 600 on the pack. Quiz next — then IAM Basics.
Shared responsibility literacy feeds IAM lessons in M3.
4. What you ship: shared responsibility pack for $CLOUD_LAB
Merged model, ownership, misconfig sections. $CLOUD_LAB named. NO stranger tenants. chmod 600.
5. What you record before the next lesson
Date. Shared pack path. $CLOUD_LAB named. File t31-m02-l04-shared-lab.txt chmod 600.
6. Wrong vs right: stranger tenants vs YOUR cloud accounts
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
Wrong
Include stranger subscription ID in pack. Skip misconfig section.
Right
Write YOUR shared responsibility pack for $CLOUD_LAB. chmod 600. Next: Quiz — Shared Responsibility.
Mission: freeze YOUR shared responsibility pack
1) Merge M2 literacy sections. 2) Confirm zero stranger tenant refs. 3) Link M1 ethics cross-ref. 4) chmod 600.
Stuck? Ask Cyberlium AI Mentor
One governed shared pack beats ten unauthorized CSPM screenshots.
Knowledge Check
APPLY: This lab requires:
Multiple choice
Knowledge Check
APPLY: True or False: Shared pack should reference $CLOUD_LAB sandbox resource.
True or False
Knowledge Check
APPLY: Shared pack should include:
Multiple choice