NEW350+ rooms now have a live terminal, so you can learn by typing the commands, right in your browser.Learn in a live terminal. 350+ rooms.Try a lab♥ Codelivly is 100% free, no paywall. If it helped you, chip in to keep it running.100% free. Help keep it so.Support us
[>_] ROOM · Cloud Security
Peering and Transit Gateway Misconfigurations
Master cloud network pivoting. Learn to exploit and defend against VPC peering and Transit Gateway misconfigurations that enable lateral movement.
Room tasks
1What Is Peering Misconfiguration and Why Does It Matter
2Transitive Trust Risks in Multi-VPC Architectures
3Guided Lab: Identifying a Lateral Movement Path via VPC Peering
Frequently Asked Questions
How can VPC peering be abused?
Overly broad routes and permissive security groups can let an attacker in one VPC reach resources in a peered VPC. Peering is not transitive, but flat routing still enlarges the blast radius.
What is a Transit Gateway?
A Transit Gateway is a hub that connects many VPCs and on-premises networks. Poorly segmented route tables can let traffic flow between environments that should stay isolated.
How do you defend these connections?
Use least-privilege routes, separate route tables per environment, tight security groups and flow log monitoring. This advanced Codelivly room is free and covers both attack and defense.