W/TF is Cloud Security

Date: 2025-04-30

Difficulty: Beginner

Delivered By: Mohit Gupta

Overview

Cloud is quite a big buzzword at the moment, with a lot of businesses migrating away from on-premise environments to cloud providers like AWS or Azure. What does this mean for security though? Is security in the cloud automatically done by the cloud provider? How have attacks worked against these environments in the past?

This workshop will be run by Mohit, who will start by discussing what cloud security is and cover some of the basics of AWS security.

This will be followed by a simplified example of one of the major early cloud breaches with a practical demonstration of how the various techniques can be performed.

A separate lab will be available for everyone to try to escalate their way through an AWS account using some of the techniques shown.

Mohit is a Principal Security Consultant from WithSecure, a security consultancy, who specialises in cloud security - predominantly AWS and Kubernetes.