Security · Difficulty 4 of 5 · 45 min
Defences look active but let everything through
A volumetric attack overwhelmed the public entry point although every layer of protection shows as active. Request rates spiked unchecked, clients from countries the service does not sell in were served, and a request announcing a known bot came back 200. Restore full protection for live traffic.
Where the symptom shows: Elastic Load Balancing
Take this challenge on a live account
A live AWS account, already broken, and a clock. You fix it with the provider's own console and command line, then read a report of how you worked. We host the cloud account. Nothing lands on your bill.
More challenges
- SecurityInvestigators cannot reconstruct an intrusionCloudTrail · 45 min · level 4
- SecurityA regulated data set fails its auditS3 · 90 min · level 5
- SecurityStorefront slows down under a traffic surgeElastic Load Balancing · 15 min · level 2
- SecurityInjection attempts reach the applicationElastic Load Balancing · 15 min · level 2
- SecurityOpen to the whole internetS3 · 5 min · level 1
- SecurityA protected route answers anyoneAPI Gateway · 5 min · level 1