PageSourceSearch

https://aviata.cloud/getting_started/lab/

html aviata.cloud collected 2026-10-06 16:28:12 UTC 35,256 bytes, 862 lines download raw bytes

1
2<!doctype html>
3<html lang="en" class="no-js">
4  <head>
5    
6      <meta charset="utf-8">
7      <meta name="viewport" content="width=device-width,initial-scale=1">
8      
9        <meta name="description" content="SANS Cloud Security Workshops Electronic Workbook">
10      
11      
12        <meta name="author" content="SANS Institute">
13      
14      
15      <link rel="icon" href="../../img/favicon.ico">
16      <meta name="generator" content="mkdocs-1.3.0, mkdocs-material-8.2.9">
17    
18    
19      
20        <title>Getting Started - SANS Cloud Security Workshops</title>
21      
22    
23    
24      <link rel="stylesheet" href="../../assets/stylesheets/main.120efc48.min.css">
25      
26        
27        <link rel="stylesheet" href="../../assets/stylesheets/palette.9647289d.min.css">
28        
29      
30    
31    
32    
33      
34        
35        
36        <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
37        <link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Roboto:300,300i,400,400i,700,700i%7CSource+Code+Pro:400,400i,700,700i&display=fallback">
38        <style>:root{--md-text-font:"Roboto";--md-code-font:"Source Code Pro"}</style>
39      
40    
41    
42      <link rel="stylesheet" href="../../css/jquery.fancybox.min.css">
43    
44      <link rel="stylesheet" href="../../css/pdf.css">
45    
46      <link rel="stylesheet" href="../../css/html.css">
47    
48      <link rel="stylesheet" href="../../css/custom.css">
49    
50    
50<script>__md_scope=new URL("../..",location),__md_get=(e,_=localStorage,t=__md_scope)=>JSON.parse(_.getItem(t.pathname+"."+e)),__md_set=(e,_,t=localStorage,a=__md_scope)=>{try{t.setItem(a.pathname+"."+e,JSON.stringify(_))}catch(e){}}</script>
50
51    
52      
53
54    
55    
56  </head>
57  
58  
59    
60    
61      
62    
63    
64    
65    
66    <body dir="ltr" data-md-color-scheme="aviata-light" data-md-color-primary="" data-md-color-accent="">
67  
68    
69    
70      
70<script>var palette=__md_get("__palette");if(palette&&"object"==typeof palette.color)for(var key of Object.keys(palette.color))document.body.setAttribute("data-md-color-"+key,palette.color[key])</script>
70
71    
72    <input class="md-toggle" data-md-toggle="drawer" type="checkbox" id="__drawer" autocomplete="off">
73    <input class="md-toggle" data-md-toggle="search" type="checkbox" id="__search" autocomplete="off">
74    <label class="md-overlay" for="__drawer"></label>
75    <div data-md-component="skip">
76      
77        
78        <a href="#getting-started-guide" class="md-skip">
79          Skip to content
80        </a>
81      
82    </div>
83    <div data-md-component="announce">
84      
85    </div>
86    
87      <div data-md-component="outdated" hidden>
88        <aside class="md-banner md-banner--warning">
89          
90        </aside>
91      </div>
92    
93    
94      
95
96<header class="md-header" data-md-component="header">
97  <nav class="md-header__inner md-grid" aria-label="Header">
98    <a href="../.." title="SANS Cloud Security Workshops" class="md-header__button md-logo" aria-label="SANS Cloud Security Workshops" data-md-component="logo">
99      
100  
101  <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M21 11c0 5.55-3.84 10.74-9 12-5.16-1.26-9-6.45-9-12V5l9-4 9 4v6m-9 10c3.75-1 7-5.46 7-9.78V6.3l-7-3.12L5 6.3v4.92C5 15.54 8.25 20 12 21m0-15.32c.5 0 .95.43.95.95v3.48L18 13.26v1.27l-5.05-1.58v3.47l1.26.95v.95L12 17.68l-2.21.64v-.95l1.26-.95v-3.47L6 14.53v-1.27l5.05-3.15V6.63c0-.52.45-.95.95-.95Z"/></svg>
102
103    </a>
104    <label class="md-header__button md-icon" for="__drawer">
105      <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M3 6h18v2H3V6m0 5h18v2H3v-2m0 5h18v2H3v-2Z"/></svg>
106    </label>
107    <div class="md-header__title" data-md-component="header-title">
108      <div class="md-header__ellipsis">
109        <div class="md-header__topic">
110          <span class="md-ellipsis">
111            SANS Cloud Security Workshops
112          </span>
113        </div>
114        <div class="md-header__topic" data-md-component="header-topic">
115          <span class="md-ellipsis">
116            
117              Getting Started
118            
119          </span>
120        </div>
121      </div>
122    </div>
123    
124      <form class="md-header__option" data-md-component="palette">
125        
126          
127          
128          <input class="md-option" data-md-color-media="(prefers-color-scheme: light)" data-md-color-scheme="aviata-light" data-md-color-primary="" data-md-color-accent=""  aria-label="Switch to dark mode"  type="radio" name="__palette" id="__palette_1">
129          
130            <label class="md-header__button md-icon" title="Switch to dark mode" for="__palette_2" hidden>
131              <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="m17.75 4.09-2.53 1.94.91 3.06-2.63-1.81-2.63 1.81.91-3.06-2.53-1.94L12.44 4l1.06-3 1.06 3 3.19.09m3.5 6.91-1.64 1.25.59 1.98-1.7-1.17-1.7 1.17.59-1.98L15.75 11l2.06-.05L18.5 9l.69 1.95 2.06.05m-2.28 4.95c.83-.08 1.72 1.1 1.19 1.85-.32.45-.66.87-1.08 1.27C15.17 23 8.84 23 4.94 19.07c-3.91-3.9-3.91-10.24 0-14.14.4-.4.82-.76 1.27-1.08.75-.53 1.93.36 1.85 1.19-.27 2.86.69 5.83 2.89 8.02a9.96 9.96 0 0 0 8.02 2.89m-1.64 2.02a12.08 12.08 0 0 1-7.8-3.47c-2.17-2.19-3.33-5-3.49-7.82-2.81 3.14-2.7 7.96.31 10.98 3.02 3.01 7.84 3.12 10.98.31Z"/></svg>
132            </label>
133          
134        
135          
136          
137          <input class="md-option" data-md-color-media="(prefers-color-scheme: dark)" data-md-color-scheme="aviata-dark" data-md-color-primary="" data-md-color-accent=""  aria-label="Switch to light mode"  type="radio" name="__palette" id="__palette_2">
138          
139            <label class="md-header__button md-icon" title="Switch to light mode" for="__palette_1" hidden>
140              <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M12 7a5 5 0 0 1 5 5 5 5 0 0 1-5 5 5 5 0 0 1-5-5 5 5 0 0 1 5-5m0 2a3 3 0 0 0-3 3 3 3 0 0 0 3 3 3 3 0 0 0 3-3 3 3 0 0 0-3-3m0-7 2.39 3.42C13.65 5.15 12.84 5 12 5c-.84 0-1.65.15-2.39.42L12 2M3.34 7l4.16-.35A7.2 7.2 0 0 0 5.94 8.5c-.44.74-.69 1.5-.83 2.29L3.34 7m.02 10 1.76-3.77a7.131 7.131 0 0 0 2.38 4.14L3.36 17M20.65 7l-1.77 3.79a7.023 7.023 0 0 0-2.38-4.15l4.15.36m-.01 10-4.14.36c.59-.51 1.12-1.14 1.54-1.86.42-.73.69-1.5.83-2.29L20.64 17M12 22l-2.41-3.44c.74.27 1.55.44 2.41.44.82 
1400 1.63-.17 2.37-.44L12 22Z"/></svg>
141            </label>
142          
143        
144      </form>
145    
146    
147    
148      <label class="md-header__button md-icon" for="__search">
149        <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M9.5 3A6.5 6.5 0 0 1 16 9.5c0 1.61-.59 3.09-1.56 4.23l.27.27h.79l5 5-1.5 1.5-5-5v-.79l-.27-.27A6.516 6.516 0 0 1 9.5 16 6.5 6.5 0 0 1 3 9.5 6.5 6.5 0 0 1 9.5 3m0 2C7 5 5 7 5 9.5S7 14 9.5 14 14 12 14 9.5 12 5 9.5 5Z"/></svg>
150      </label>
151      <div class="md-search" data-md-component="search" role="dialog">
152  <label class="md-search__overlay" for="__search"></label>
153  <div class="md-search__inner" role="search">
154    <form class="md-search__form" name="search">
155      <input type="text" class="md-search__input" name="query" aria-label="Search" placeholder="Search" autocapitalize="off" autocorrect="off" autocomplete="off" spellcheck="false" data-md-component="search-query" required>
156      <label class="md-search__icon md-icon" for="__search">
157        <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M9.5 3A6.5 6.5 0 0 1 16 9.5c0 1.61-.59 3.09-1.56 4.23l.27.27h.79l5 5-1.5 1.5-5-5v-.79l-.27-.27A6.516 6.516 0 0 1 9.5 16 6.5 6.5 0 0 1 3 9.5 6.5 6.5 0 0 1 9.5 3m0 2C7 5 5 7 5 9.5S7 14 9.5 14 14 12 14 9.5 12 5 9.5 5Z"/></svg>
158        <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M20 11v2H8l5.5 5.5-1.42 1.42L4.16 12l7.92-7.92L13.5 5.5 8 11h12Z"/></svg>
159      </label>
160      <nav class="md-search__options" aria-label="Search">
161        
162        <button type="reset" class="md-search__icon md-icon" aria-label="Clear" tabindex="-1">
163          <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M19 6.41 17.59 5 12 10.59 6.41 5 5 6.41 10.59 12 5 17.59 6.41 19 12 13.41 17.59 19 19 17.59 13.41 12 19 6.41Z"/></svg>
164        </button>
165      </nav>
166      
167    </form>
168    <div class="md-search__output">
169      <div class="md-search__scrollwrap" data-md-scrollfix>
170        <div class="md-search-result" data-md-component="search-result">
171          <div class="md-search-result__meta">
172            Initializing search
173          </div>
174          <ol class="md-search-result__list"></ol>
175        </div>
176      </div>
177    </div>
178  </div>
179</div>
180    
181    
182  </nav>
183  
184</header>
185    
186    <div class="md-container" data-md-component="container">
187      
188      
189        
190          
191        
192      
193      <main class="md-main" data-md-component="main">
194        <div class="md-main__inner md-grid">
195          
196            
197              
198              <div class="md-sidebar md-sidebar--primary" data-md-component="sidebar" data-md-type="navigation" >
199                <div class="md-sidebar__scrollwrap">
200                  <div class="md-sidebar__inner">
201                    
202
203
204<nav class="md-nav md-nav--primary" aria-label="Navigation" data-md-level="0">
205  <label class="md-nav__title" for="__drawer">
206    <a href="../.." title="SANS Cloud Security Workshops" class="md-nav__button md-logo" aria-label="SANS Cloud Security Workshops" data-md-component="logo">
207      
208  
209  <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M21 11c0 5.55-3.84 10.74-9 12-5.16-1.26-9-6.45-9-12V5l9-4 9 4v6m-9 10c3.75-1 7-5.46 7-9.78V6.3l-7-3.12L5 6.3v4.92C5 15.54 8.25 20 12 21m0-15.32c.5 0 .95.43.95.95v3.48L18 13.26v1.27l-5.05-1.58v3.47l1.26.95v.95L12 17.68l-2.21.64v-.95l1.26-.95v-3.47L6 14.53v-1.27l5.05-3.15V6.63c0-.52.45-.95.95-.95Z"/></svg>
210
211    </a>
212    SANS Cloud Security Workshops
213  </label>
214  
215  <ul class="md-nav__list" data-md-scrollfix>
216    
217      
218      
219      
220
221  
222  
223  
224    <li class="md-nav__item">
225      <a href="../.." class="md-nav__link">
226        Home
227      </a>
228    </li>
229  
230
231    
232      
233      
234      
235
236  
237  
238    
239  
240  
241    <li class="md-nav__item md-nav__item--active">
242      
243      <input class="md-nav__toggle md-toggle" data-md-toggle="toc" type="checkbox" id="__toc">
244      
245      
246        
247      
248      
249        <label class="md-nav__link md-nav__link--active" for="__toc">
250          Getting Started
251          <span class="md-nav__icon md-icon"></span>
252        </label>
253      
254      <a href="./" class="md-nav__link md-nav__link--active">
255        Getting Started
256      </a>
257      
258        
259
260<nav class="md-nav md-nav--secondary" aria-label="Table of contents">
261  
262  
263  
264    
265  
266  
267    <label class="md-nav__title" for="__toc">
268      <span class="md-nav__icon md-icon"></span>
269      Table of contents
270    </label>
271    <ul class="md-nav__list" data-md-component="toc" data-md-scrollfix>
272      
273        <li class="md-nav__item">
274  <a href="#system-setup" class="md-nav__link">
275    System Setup
276  </a>
277  
278    <nav class="md-nav" aria-label="System Setup">
279      <ul class="md-nav__list">
280        
281          <li class="md-nav__item">
282  <a href="#sans-cloud-root-ca" class="md-nav__link">
283    SANS Cloud Root CA
284  </a>
285  
286</li>
287        
288          <li class="md-nav__item">
289  <a href="#firefox-smartproxy-extension" class="md-nav__link">
290    Firefox SmartProxy Extension
291  </a>
292  
293</li>
294        
295      </ul>
296    </nav>
297  
298</li>
299      
300        <li class="md-nav__item">
301  <a href="#cloud-security-flight-simulator" class="md-nav__link">
302    Cloud Security Flight Simulator
303  </a>
304  
305    <nav class="md-nav" aria-label="Cloud Security Flight Simulator">
306      <ul class="md-nav__list">
307        
308          <li class="md-nav__item">
309  <a href="#launch-your-flight-simulator" class="md-nav__link">
310    Launch your Flight Simulator
311  </a>
312  
313</li>
314        
315          <li class="md-nav__item">
316  <a href="#import-smartproxy-configuration" class="md-nav__link">
317    Import SmartProxy Configuration
318  </a>
319  
320</li>
321        
322          <li class="md-nav__item">
323  <a href="#explore-cloud-security-flight-simulator-services" class="md-nav__link">
324    Explore Cloud Security Flight Simulator Services
325  </a>
326  
327</li>
328        
329      </ul>
330    </nav>
331  
332</li>
333      
334        <li class="md-nav__item">
335  <a href="#aviata-cloud-infrastructure" class="md-nav__link">
336    Aviata Cloud Infrastructure
337  </a>
338  
339</li>
340      
341        <li class="md-nav__item">
342  <a href="#conclusion" class="md-nav__link">
343    Conclusion
344  </a>
345  
346</li>
347      
348    </ul>
349  
350</nav>
351      
352    </li>
353  
354
355    
356  </ul>
357</nav>
358                  </div>
359                </div>
360              </div>
361            
362            
363              
364              <div class="md-sidebar md-sidebar--secondary" data-md-component="sidebar" data-md-type="toc" >
365                <div class="md-sidebar__scrollwrap">
366                  <div class="md-sidebar__inner">
367                    
368
369<nav class="md-nav md-nav--secondary" aria-label="Table of contents">
370  
371  
372  
373    
374  
375  
376    <label class="md-nav__title" for="__toc">
377      <span class="md-nav__icon md-icon"></span>
378      Table of contents
379    </label>
380    <ul class="md-nav__list" data-md-component="toc" data-md-scrollfix>
381      
382        <li class="md-nav__item">
383  <a href="#system-setup" class="md-nav__link">
384    System Setup
385  </a>
386  
387    <nav class="md-nav" aria-label="System Setup">
388      <ul class="md-nav__list">
389        
390          <li class="md-nav__item">
391  <a href="#sans-cloud-root-ca" class="md-nav__link">
392    SANS Cloud Root CA
393  </a>
394  
395</li>
396        
397          <li class="md-nav__item">
398  <a href="#firefox-smartproxy-extension" class="md-nav__link">
399    Firefox SmartProxy Extension
400  </a>
401  
402</li>
403        
404      </ul>
405    </nav>
406  
407</li>
408      
409        <li class="md-nav__item">
410  <a href="#cloud-security-flight-simulator" class="md-nav__link">
411    Cloud Security Flight Simulator
412  </a>
413  
414    <nav class="md-nav" aria-label="Cloud Security Flight Simulator">
415      <ul class="md-nav__list">
416        
417          <li class="md-nav__item">
418  <a href="#launch-your-flight-simulator" class="md-nav__link">
419    Launch your Flight Simulator
420  </a>
421  
422</li>
423        
424          <li class="md-nav__item">
425  <a href="#import-smartproxy-configuration" class="md-nav__link">
426    Import SmartProxy Configuration
427  </a>
428  
429</li>
430        
431          <li class="md-nav__item">
432  <a href="#explore-cloud-security-flight-simulator-services" class="md-nav__link">
433    Explore Cloud Security Flight Simulator Services
434  </a>
435  
436</li>
437        
438      </ul>
439    </nav>
440  
441</li>
442      
443        <li class="md-nav__item">
444  <a href="#aviata-cloud-infrastructure" class="md-nav__link">
445    Aviata Cloud Infrastructure
446  </a>
447  
448</li>
449      
450        <li class="md-nav__item">
451  <a href="#conclusion" class="md-nav__link">
452    Conclusion
453  </a>
454  
455</li>
456      
457    </ul>
458  
459</nav>
460                  </div>
461                </div>
462              </div>
463            
464          
465          <div class="md-content" data-md-component="content">
466            <article class="md-content__inner md-typeset">
467              
468                
469
470
471<h1 id="getting-started-guide">Getting Started Guide</h1>
472<h2 id="system-setup">System Setup</h2>
473<p>This workshop requires attendees to deploy the SANS Cloud Security Flight Simulator to their personal AW
473S account. Ensure you have completed each of the following requirements before starting the workshop:</p>
474<ol>
475<li>
476<p>If you do not have one, start by creating an <a href="https://docs.aws.amazon.com/accounts/latest/reference/manage-acct-creating.html" target="_blank">AWS account</a>. Then, sign in to the account with your email address and password.</p>
477</li>
478<li>
479<p>Download and install the <a href="https://www.mozilla.org/firefox" rel="noopener" target="_blank">Firefox browser</a> on your machine.</p>
480<div class="admonition warning">
481<p class="admonition-title">Important</p>
482<p>You <strong>MUST</strong> use Firefox to connect to the SANS Cloud Security Flight Simulator environment. Chrome's SmartProxy extension does not support proxy authentication.</p>
483</div>
484</li>
485</ol>
486<h3 id="sans-cloud-root-ca">SANS Cloud Root CA</h3>
487<p>For TLS secured connections to the services running in the SANS Cloud Security Flight Simulator, download the SANS Cloud Security CA Certificate. Then, add the CA certificate to your Firefox trusted list of certificate authorities.</p>
488<ol>
489<li>
490<p>Download the DER Encoded <a download="sans-cloud-ca.der" href="https://rio.cloudsecurityace.com/ca/sans-cloud-ca.der">SANS Cloud Security CA Certificate</a> and note the download location.</p>
491</li>
492<li>
493<p>Open the Firefox settings by going to Firefox &gt; Settings in the menu bar. Alternatively, you can browse to the <code>about:preferences</code> URL.</p>
494</li>
495<li>
496<p>Click "Privacy &amp; Security" in the left hand menu and scroll down to the "Certificates" section.</p>
497<p><img alt="" class="w800" src="../img/ff001.png" /></p>
498</li>
499<li>
500<p>Click the <strong>View Certificates</strong> button.</p>
501</li>
502<li>
503<p>In the Certificate Manager window, click the <strong>Import...</strong> button.</p>
504<p><img alt="" class="w800" src="../img/ff002.png" /></p>
505</li>
506<li>
507<p>Browse to the directory that you downloaded the <code>sans-cloud-ca.der</code> file and select the certificate.</p>
508</li>
509<li>
510<p>Select the <em>Trust this CA to identify websites</em> trust settings option and press <strong>OK</strong> to import the certificate.</p>
511<p><img alt="" class="w800" src="../img/ff007.png" /></p>
512</li>
513<li>
514<p>In the Certificate Manager window, press <strong>OK</strong> to close the certificate settings window.</p>
515<p><img alt="" class="w800" src="../img/ff003.png" /></p>
516</li>
517</ol>
518<h3 id="firefox-smartproxy-extension">Firefox SmartProxy Extension</h3>
519<p>The SANS Cloud Security Flight Simulator server is accessible through a SOCK5 proxy. Open Firefox and install the <a href="https://addons.mozilla.org/en-US/firefox/addon/smartproxy/">SmartProxy extension</a>. If you are not familiar with Firefox extensions, follow the steps below to install the SmartProxy extension.</p>
520<ol>
521<li>
522<p>From the Firefox preferences screen, select the <strong>Extensions &amp; Themes</strong> option in the left navigation menu. Alternatively, you can browse to the <code>about:addons</code> URL.</p>
523<p><img alt="" class="w800" src="../img/ff004.png" /></p>
524</li>
525<li>
526<p>Use the <em>Find more add-ons</em> field to search for the <strong>SmartProxy</strong> extension.</p>
527<p><img alt="" class="w800" src="../img/ff005.png" /></p>
528</li>
529<li>
530<p>Select the <strong>SmartProxy</strong> add-on to open to the SmartProxy installation page.</p>
531<p><img alt="" class="w600" src="../img/ff006.png" /></p>
532</li>
533<li>
534<p>Click the <strong>Add to Firefox</strong> button to start the installation.</p>
535<p><img alt="" class="w800" src="../img/ffsp001.png" /></p>
536</li>
537<li>
538<p>Click the <strong>Add</strong> button in the <em>Add SmartProxy?</em> popup window.</p>
539<p><img alt="" class="w800" src="../img/ffsp002.png" /></p>
540</li>
541<li>
542<p>Check the <strong>Allow this extension to run in Private Windows</strong> option.</p>
543<p><img alt="" class="w800" src="../img/ffsp003.png" /></p>
544</li>
545<li>
546<p>Click the <strong>Okay</strong> button to complete the installation.</p>
547</li>
548<li>
549<p>The SmartProxy extension is now installed and can be found in the top right-hand corner of the browser.</p>
550<p><img alt="" class="w800" src="../img/ffsp004.png" /></p>
551</li>
552<li>
553<p>By default, the extension is not pinned to menu bar. You can pin the extension by right clicking on the extension and selecting <strong>Pin to Toolbar</strong>
553 for convenience.</p>
554<p><img alt="" class="w300" src="../img/ffsp005.png" /></p>
555</li>
556<li>
557<p>The OpenVSCode server accessible through the SmartProxy extension requires the <code>dom.events.testing.asyncClipboard</code> option to be enabled to paste commands into the embedded terminal. To set this option, browse to the <code>about:config</code> URL. Then, search for the <code>dom.events.testing.asyncClipboard</code> option and double click set it to <code>true</code>.</p>
558<p><img alt="" class="w800" src="../img/ff008.png" /></p>
559</li>
560</ol>
561<h2 id="cloud-security-flight-simulator">Cloud Security Flight Simulator</h2>
562<p>Launch the SANS Cloud Security Flight Simulator in your AWS account using CloudShell.</p>
563<div class="admonition warning">
564<p class="admonition-title">Running Costs</p>
565<p>Running the Cloud Security Flight Simulator in your AWS Account will cost about $5.00 USD per day.</p>
566<p>Make sure to follow the Cleanup instructions to avoid ongoing expenses.</p>
567</div>
568<h3 id="launch-your-flight-simulator">Launch your Flight Simulator</h3>
569<ol>
570<li>
571<p>Log in to the <a href="https://console.aws.amazon.com/" rel="noopener" target="_blank">AWS Console</a></p>
572<p><img alt="" classe="w800" src="../img/cshell01.png" /></p>
573</li>
574<li>
575<p>Change to the <code>us-east-2</code> region.</p>
576<p><img alt="" classe="w800" src="../img/cshell02.png" /></p>
577</li>
578<li>
579<p>Open a <a href="https://us-east-2.console.aws.amazon.com/cloudshell/home?region=us-east-2#" rel="noopener" target="_blank">CloudShell</a> terminal in a new tab.</p>
580<p><img alt="" classe="w800" src="../img/cshell03.png" /></p>
581</li>
582<li>
583<p>Run the following commands to create a new directory called <code>ace135</code> and change into the directory:</p>
584<div class="highlight"><pre><span></span><code>mkdir<span class="w"> </span>~/ace135
585<span class="nb">cd</span><span class="w"> </span>ace135
586</code></pre></div>
587<p><img alt="" classe="w800" src="../img/cshell04.png" /></p>
588</li>
589<li>
590<p>In the Terminal, run the following commands from inside the <code>ace135</code> directory to launch the SANS Cloud Security Simulator.</p>
591<div class="highlight"><pre><span></span><code>wget<span class="w"> </span>https://aviata.cloud/simulator/ch03/install.sh
592/bin/bash<span class="w"> </span>./install.sh<span class="w"> </span>flyWithK8s
593</code></pre></div>
594</li>
595<li>
596<p>The <code>install.sh</code> command will take a few minutes to create a new VPC and launch the Cloud Security Flight Simulator instance. Once it is finished, you will see the following:</p>
597<ul>
598<li>
599<p>The <code>environment_summary</code> output contains the information you need to connect to the SANS Cloud Security Flight Simulator.</p>
600</li>
601<li>
602<p><em>SmartProxy Config</em> - The name of the SmartProxy configuration file created by Terraform in the <code>~/ace135</code> directory.</p>
603</li>
604<li>
605<p><em>SSH + SOCKS Connect Command</em> - The command to connect to the simulator using SSH and the SOCKS proxy using the private key created by Terraform in the <code>~/ace135</code> directory.</p>
606</li>
607</ul>
608<div class="highlight"><pre><span></span><code>Apply complete! Resources: 20 added, 0 changed, 0 destroyed.
609
610Outputs:
611
612environment_summary = &lt;&lt;EOT
613  Latest AMI:  ami-09c2984d7351c46f6
614  Running AMI: ami-09c2984d7351c46f6
615  Public IP:   3.142.200.194
616
617  Local IP:          18.218.3.44
618  Allow CIDR:        18.218.3.44/32
619
620  Proxy Pass:        remarkably_hopefully_sterling_horse
621  SmartProxy Config: /home/cloudshell-user/ace135/SmartProxy-random-name.json
622
623  SSH + SOCKS Connect Command
624
625    ssh -i random-name.pem -D 54809 [email protected]
626
627
628EOT
629</code></pre></div>
630</li>
631</ol>
632<h3 id="import-smartproxy-configuration">Import SmartProxy Configuration</h3>
633<p>The Terraform configuration creates a file called <code>SmartProxy-random-name.json</code> in the CloudShell <code>~/ace135</code> directory. Download this file, and then import it into the Firefox SmartProxy extension to connect to the SANS Cloud Security Flight Simulator.</p>
634<ol>
635<li>
636<p>Download the SmartProxy configuration file.</p>
637<ul>
638<li>
639<p>In CloudShell, click Actions, then Download</p>
640<p><img alt="" classe="w800" src="../img/cshell05.png" /></p>
641</li>
642<li>
643<p>Choose the file called <code>ace135/SmartProxy-random-name.json</code></p>
644<p><img alt="" classe="w800" src="../img/cshell06.png" /></p>
645</li>
646<li>
647<p>And save the file in an easy to find location.</p>
648</li>
649</ul>
650</li>
651<li>
652<p>In Firefox, select the SmartProxy extension and press the <strong>Settings</strong> button.</p>
653<p><img alt="" class="w300" src="../img/sp001.png" /></p>
654</li>
655<li>
656<p>In the SmartProxy Settings, select the <strong>Backup/Restore</strong> button.</p>
657<p><img alt="" class="w800" src="../img/sp002.png" /></p>
658</li>
659<li>
660<p>Select the <strong>Restore Backup</strong> button to import the <code>SmartProxy-random-name.json</code> file.</p>
661<p><img alt="" class="w800" src="../img/sp003.png" /></p>
662</li>
663<li>
664<p>Browse to the directory where the <code>SmartProxy-random-name.json</code> file was downloaded.</p>
665</li>
666<li>
667<p>After restoring the backup, the <strong>ACE135-Range</strong> SmartProxy configuration is now available to use.</p>
668<p><img alt="" class="w800" src="../img/sp004.png" /></p>
669</li>
670<li>
671<p>Use the SmartProxy extension to select the <strong>ACE135-Range</strong> proxy.</p>
672<p><img alt="" class="w300" src="../img/sp005.png" /></p>
673</li>
674<li>
675<p>Firefox is now connected to the SANS Cloud Security Flight Simulator environment! All workshop-relevant traffic will be sent through the SOCKS5 proxy to your simulator server.</p>
676</li>
677</ol>
678<h3 id="explore-cloud-security-flight-simulator-services">Explore Cloud Security Flight Simulator Services</h3>
679<p>The SANS Cloud Security Flight Simulator environment includes the following services to use during the workshop. You can sign in to each of these systems with the student's credentials:</p>
680<div class="admonition info">
681<p class="admonition-title">Credentials</p>
682<ul>
683<li>Username:  <code>student</code></li>
684<li>Password:  <code>StartTheLabs</code></li>
685</ul>
686</div>
687<ol>
688<li>
689<p>The <a href="https://code.sans.labs/?workspace=/home/student/ace135.code-workspace" rel="noopener" target="_blank">OpenVSCode Server</a> will be used for editing source code, viewing files, and running Terminal commands.</p>
690</li>
691<li>
692<p>The <a href="https://terminal.sans.labs" rel="noopener" target="_blank">Terminal</a> can also be used for running commands. The instructions will assume that you are running commands from the OpenVSCode Server's embedded Terminal; however, the Terminal is an alternate option for those who wish to have separate windows for the code and the shell.</p>
693</li>
694<li>
695<p>The <a href="https://gitlab.sans.labs/" rel="noopener" target="_blank">GitLab</a> service will be used for Version Control, Continuous Integration (CI), &amp; Continuous Delivery (CD).</p>
696</li>
697<li>
698<p>The <a href="https://scratch.sans.labs" rel="noopener" target="_blank">Scratch</a> service provides a simple way to download files from the DevOps server. Files copied into the <em>/labs/scratch</em> directory will be downloadable from the scratch service. The <em>scratch</em> directory has also been added to the default VSCode workspace for easily dragging and dropping files.</p>
699</li>
700<li>
701<p>Open the <a href="https://terminal.sans.labs" rel="noopener" target="_blank">Terminal</a> service and use the <code>student</code> / <code>StartTheLabs</code> credentials to log in.</p>
702</li>
703<li>
704<p>Run the following command to download the latest workshop content into the GitLab repository.</p>
705<div class="highlight"><pre><span></span><code>workshop-update
706</code></pre></div>
707</li>
708</ol>
709<h2 id="aviata-cloud-infrastructure">Aviata Cloud Infrastructure</h2>
710<p>Some Aviata Cloud Solo Flight Challenge workshops rely on cloud infrastructure hosted in your AWS account. From the OpenVSCode embedded terminal, clone the <code>aviata</code> repository from the GitLab and deploy your lab infrastructure.</p>
711<div class="admonition warning">
712<p class="admonition-title">Important</p>
713<p>The Aviata Cloud Infrastructure is required <strong>only</strong> for the following chapters:</p>
714<ul>
715<li>Chapter 4 - Attack and Detect Kubernetes: Aerial Combat Training</li>
716<li>Chapter 5 - Centralizing Cross Cloud Security Events</li>
717<li>Check back later for future chapters</li>
718</ul>
719</div>
720<ol>
721<li>
722<p>Inside the <a href="https://code.sans.labs/?workspace=/home/student/ace135.code-workspace" rel="noopener" target="_blank">OpenVSCode Server</a>, open an embedded Terminal. Use the hamburger button (≡) in the top left corner to find the <strong>New Terminal</strong> menu item.</p>
723<p><img alt="Open the embedded terminal" class="w800" src="../img/terminal.png" /></p>
724</li>
725<li>
726<p>Ensure all workshop updates are applied to your Flight Simulator</p>
727<div class="highlight"><pre><span></span><code>workshop-update
728</code></pre></div>
729</li>
730<li>
731<p>Clone the <code>aviata</code> repository from the GitLab service.</p>
732<div class="highlight"><pre><span></span><code><span class="nb">cd</span><span class="w"> </span>~/code
733git<span class="w"> </span>clone<span class="w"> </span>[email protected]:aviata/ace135.git
734</code></pre></div>
735</li>
736<li>
737<p>Change into the <code>~/code/ace135/src/infrastructure/</code> directory, set the default region, and apply the Terraform configuration.</p>
738<div class="highlight"><pre><span></span><code><span class="nb">cd</span><span class="w"> </span>~/code/ace135/src/infrastructure/
739<span class="nb">export</span><span class="w"> </span><span class="nv">TF_VAR_region</span><span class="o">=</span><span class="s2">&quot;us-east-2&quot;</span>
740terraform<span class="w"> </span>init
741terraform<span class="w"> </span>apply<span class="w"> </span>-auto-approve
742</code></pre></div>
743</li>
744<li>
745<p>The Terraform command will take roughly 30 minutes to deploy the Aviata Cloud Infrastructure. Once the job is complete, you will see the following output:</p>
746<div class="admonition abstract">
747<p class="admonition-title">Expected Results - <img alt="⏱" class="twemoji" src="https://cdn.jsdelivr.net/gh/jdecked/[email protected]/assets/svg/23f1.svg" title=":stopwatch:" /> 30 minutes</p>
748<div class="highlight"><pre><span></span><code>Apply complete! Resources: 87 added, 0 changed, 0 destroyed.
749</code></pre></div>
750</div>
751</li>
752</ol>
753<!--
754
755
756## Clean Up
757
758- Follow workshop instructions to remove any created infrastructure or other Resources
759
760- Connect to a CloudShell terminal in us-east-2 and run the following commands:
761
762    <div class="highlight"><pre><span></span><code><span class="nb">cd</span><span class="w"> </span>~/ace135/
763terraform<span class="w"> </span>destroy<span class="w"> </span>-auto-approve
764</code></pre></div>
765
766-->
767
768<h2 id="conclusion">Conclusion</h2>
769<p>Congratulations! You have successfully deployed the SANS Cloud Security Flight Simulator.</p>
770<p>You are ready to start the workshop!</p>
771
772              
773            </article>
774          </div>
775        </div>
776        
777      </main>
778      
779        <footer class="md-footer">
780  
781    <nav class="md-footer__inner md-grid" aria-label="Footer">
782      
783        
784        <a href="../.." class="md-footer__link md-footer__link--prev" aria-label="Previous: Home" rel="prev">
785          <div class="md-footer__button md-icon">
786            <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M20 11v2H8l5.5 5.5-1.42 1.42L4.16 12l7.92-7.92L13.5 5.5 8 11h12Z"/></svg>
787          </div>
788          <div class="md-footer__title">
789            <div class="md-ellipsis">
790              <span class="md-footer__direction">
791                Previous
792              </span>
793              Home
794            </div>
795          </div>
796        </a>
797      
798      
799    </nav>
800  
801  <div class="md-footer-meta md-typeset">
802    <div class="md-footer-meta__inner md-grid">
803      <div class="md-copyright">
804  
805    <div class="md-copyright__highlight">
806      ©2024 SANS Institute
807    </div>
808  
809  
810    Made with
811    <a href="https://squidfunk.github.io/mkdocs-material/" target="_blank" rel="noopener">
812      Material for MkDocs
813    </a>
814  
815</div>
816      
817        <div class="md-social">
818  
819    
820    
821      
822      
823    
824    <a href="https://www.sans.org/blog/aviata-solo-flight-challenge-cloud-security-workshops/" target="_blank" rel="noopener" title="www.sans.org" class="md-social__link">
825      <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24">
825<path d="M2.5 19h19v2h-19v-2m19.57-9.36c-.21-.8-1.04-1.28-1.84-1.06L14.92 10 8 3.57l-1.91.51 4.14 7.17-4.97 1.33-1.97-1.54-1.45.39 1.82 3.16.77 1.33 1.6-.42 5.31-1.43 4.35-1.16L21 11.5c.81-.24 1.28-1.06 1.07-1.86Z"/></svg>
826    </a>
827  
828    
829    
830      
831      
832    
833    <a href="https://sansurl.com/cloud-discord" target="_blank" rel="noopener" title="sansurl.com" class="md-social__link">
834      <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 640 512"><!--! Font Awesome Free 6.1.1 by @fontawesome - https://fontawesome.com License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) Copyright 2022 Fonticons, Inc.--><path d="M524.531 69.836a1.5 1.5 0 0 0-.764-.7A485.065 485.065 0 0 0 404.081 32.03a1.816 1.816 0 0 0-1.923.91 337.461 337.461 0 0 0-14.9 30.6 447.848 447.848 0 0 0-134.426 0 309.541 309.541 0 0 0-15.135-30.6 1.89 1.89 0 0 0-1.924-.91 483.689 483.689 0 0 0-119.688 37.107 1.712 1.712 0 0 0-.788.676C39.068 183.651 18.186 294.69 28.43 404.354a2.016 2.016 0 0 0 .765 1.375 487.666 487.666 0 0 0 146.825 74.189 1.9 1.9 0 0 0 2.063-.676A348.2 348.2 0 0 0 208.12 430.4a1.86 1.86 0 0 0-1.019-2.588 321.173 321.173 0 0 1-45.868-21.853 1.885 1.885 0 0 1-.185-3.126 251.047 251.047 0 0 0 9.109-7.137 1.819 1.819 0 0 1 1.9-.256c96.229 43.917 200.41 43.917 295.5 0a1.812 1.812 0 0 1 1.924.233 234.533 234.533 0 0 0 9.132 7.16 1.884 1.884 0 0 1-.162 3.126 301.407 301.407 0 0 1-45.89 21.83 1.875 1.875 0 0 0-1 2.611 391.055 391.055 0 0 0 30.014 48.815 1.864 1.864 0 0 0 2.063.7A486.048 486.048 0 0 0 610.7 405.729a1.882 1.882 0 0 0 .765-1.352c12.264-126.783-20.532-236.912-86.934-334.541ZM222.491 337.58c-28.972 0-52.844-26.587-52.844-59.239s23.409-59.241 52.844-59.241c29.665 0 53.306 26.82 52.843 59.239 0 32.654-23.41 59.241-52.843 59.241Zm195.38 0c-28.971 0-52.843-26.587-52.843-59.239s23.409-59.241 52.843-59.241c29.667 0 53.307 26.82 52.844 59.239 0 32.654-23.177 59.241-52.844 59.241Z"/></svg>
835    </a>
836  
837</div>
838      
839    </div>
840  </div>
841</footer>
842      
843    </div>
844    <div class="md-dialog" data-md-component="dialog">
845      <div class="md-dialog__inner md-typeset"></div>
846    </div>
847    
847<script id="__config" type="application/json">{"base": "../..", "features": [{"header.autohide": false}], "search": "../../assets/javascripts/workers/search.2a1c317c.min.js", "translations": {"clipboard.copied": "Copied to clipboard", "clipboard.copy": "Copy to clipboard", "search.config.lang": "en", "search.config.pipeline": "trimmer, stopWordFilter", "search.config.separator": "[\\s\\-]+", "search.placeholder": "Search", "search.result.more.one": "1 more on this page", "search.result.more.other": "# more on this page", "search.result.none": "No matching documents", "search.result.one": "1 matching document", "search.result.other": "# matching documents", "search.result.placeholder": "Type to start searching", "search.result.term.missing": "Missing", "select.version.title": "Select version"}, "version": "J00"}</script>
847
848    
849    
850      
850<script src="../../assets/javascripts/bundle.6e54b5cd.min.js"></script>
850
851      
852        
852<script src="../../js/jquery.min.js"></script>
852
853      
854        
854<script src="../../js/jquery.fancybox.min.js"></script>
854
855      
856        
856<script src="../../js/workbook.js"></script>
856
857      
858        
858<script src="../../js/custom.js"></script>
858
859      
860    
861  </body>
862</html>

Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.