# Cloud Attack Techniques and Offensive Security

> Master offensive cloud security. Learn to simulate real-world attacks, exploit misconfigurations, and understand adversary tactics to build better defenses.

Canonical: https://codelivly.com/learning-paths/cloud-attack-techniques-and-offensive-security
Last updated: 2026-09-25

| | |
|---|---|
| Level | Advanced |
| Category | Cloud Security |
| Rooms | 4 |
| Lessons | 15 |
| Estimated time | 2 h |

This advanced learning path dives deep into the offensive side of cloud security, teaching you to think like an adversary to build stronger defenses. You will master real-world attack techniques, including IAM privilege escalation, container escapes, Instance Metadata Service (IMDS) exploitation, and CI/CD pipeline compromise. Aligned with the MITRE ATT&CK for Cloud framework, this curriculum teaches you how to safely simulate attacks, identify critical vulnerabilities, and understand the exact mechanisms adversaries use to breach cloud environments. By learning how the attack is executed, you will become vastly more effective at preventing it.

## Rooms in this path

1. [Cloud Reconnaissance](https://codelivly.com/rooms/cloud-reconnaissance) - Master cloud reconnaissance techniques. Learn to enumerate assets, map attack surfaces, and gather intelligence without…
2. [Instance Metadata Service (IMDS) Exploitation](https://codelivly.com/rooms/instance-metadata-service-imds-exploitation) - Master IMDS exploitation techniques. Learn to extract cloud credentials via SSRF, understand IMDSv1 vs IMDSv2, and…
3. [Cross-Account and Role Assumption Attacks](https://codelivly.com/rooms/cross-account-and-role-assumption-attacks) - Master cross-account IAM attacks. Learn to exploit overly permissive trust policies, abuse STS AssumeRole, and pivot…
4. [Post-Exploitation in Cloud Environments](https://codelivly.com/rooms/post-exploitation-in-cloud-environments) - Master post-exploitation techniques in the cloud. Learn to maintain persistence, evade detection, and escalate…

## Related

- [Career path: Cloud Security Engineer](https://codelivly.com/career-paths/cloud-security-engineer)
- [Cloud Incident Response and Forensics](https://codelivly.com/learning-paths/cloud-incident-response-and-forensics)
- [Cloud Data Governance and DLP](https://codelivly.com/learning-paths/cloud-data-governance-and-dlp)
- [Cloud-Native Application Security](https://codelivly.com/learning-paths/cloud-native-application-security)