My Multi-Cloud Red Team Analyst (MCRTA) Journey ☁️

Hands-on AWS, Azure and GCP Security Labs — Cyber Warfare Labs

Cloud environments are now widely used by organizations, which also means cloud security testing has become an important skill for security professionals. To gain more practical exposure to cloud attacks and misconfigurations, I completed the Multi-Cloud Red Team Analyst (MCRTA) labs from **Cyber Warfare Labs (CWL).**

In this blog, I’ll briefly share my experience with the labs and what the learning process looked like.

Getting Access to the Labs

After purchasing the MCRTA course, I received access to the lab platform and learning materials. The course includes:

• Access to cloud lab environments
• Learning videos explaining the concepts
• Practical hands-on attack scenarios

The learning approach is very practical. Instead of only theory, the platform focuses on learning by doing.

Practical Lab Environment

One thing I liked about the program is that the labs are fully practical. Each lab provides a cloud environment where you perform different security tasks and attack scenarios.

To complete a lab, you must solve challenges and submit flags, similar to a CTF-style learning approach. Each flag confirms that you successfully completed a specific step in the exercise.

This method helps reinforce the concepts while working through the scenarios.

AWS, Azure and GCP Coverage

The labs include exercises across multiple cloud platforms:

AWS Labs

• IAM enumeration
• Access key discovery
• S3 bucket misconfiguration analysis
• Permission and role misconfiguration testing

Azure Labs

• Azure tenant and subscription enumeration
• Azure AD permission analysis
• Token and authentication exploration
• Role and access misconfiguration scenarios

Google Cloud Platform (GCP)

• Resource enumeration using gcloud
• Cloud storage interaction
• Service account permission analysis
• Identifying exposed cloud credentials

These labs provide a good introduction to multi-cloud attack surfaces and how cloud identities and permissions work.

Learning Resources

Along with the labs, the course also provides learning videos that explain the concepts before attempting the exercises. This helps understand the cloud services and the attack techniques used in the labs.

Combining video explanations with hands-on labs makes the learning process much easier.

My Experience

Overall, the lab environment was well designed and easy to access. The hands-on format made the learning process engaging and helped me better understand how cloud misconfigurations can lead to security risks.

Solving the labs by discovering and submitting flags made it feel like a practical challenge rather than just reading theory.

Useful Resources

If you are interested in exploring cloud security and similar labs, here are some useful resources:

1. Cyber Warfare Labs — https://cyberwarfare.live
2. Multi-Cloud Red Team Analyst [MCRTA] — https://github.com/h4md153v63n/Cloud-CloudSec/blob/main/01_MCRTA/README.md#multi-cloud-red-team-analyst-mcrta
3. AWS Cloud Red Teaming: https://github.com/h4md153v63n/CloudSec/blob/main/01_MCRTA/01_AWS%20Cloud%20Red%20Teaming.md
4. Azure Cloud Red Teaming: https://github.com/h4md153v63n/CloudSec/blob/main/01_MCRTA/02_Azure%20Cloud%20Red%20Teaming.md
5. GCP Cloud Red Teaming: https://github.com/h4md153v63n/CloudSec/blob/main/01_MCRTA/03_GCP%20Cloud%20Red%20Teaming.md

These resources are helpful for understanding cloud security fundamentals and attack surfaces.

Final Thoughts

The MCRTA labs from Cyber Warfare Labs provide a practical introduction to multi-cloud security testing. Working through AWS, Azure and GCP scenarios helped build a better understanding of how attackers may approach cloud environments.

For anyone interested in cloud security, red teaming or penetration testing, hands-on labs like these are a great way to learn how cloud platforms actually work from a security perspective.

Learning cloud security through practical exercises is always more valuable than theory alone.

Happy learning ☁️