ฝัง
- เผยแพร่เมื่อ 22 พ.ค. 2024
- Do you want to know how to build a home lab in AWS for FREE?
Join this channel to get access to perks:
/ @jongoodcyber
Make sure to subscribe so you don't miss new content!
/ @jongoodcyber
Looking to start a career in Information Security, Cyber Security, or Information Assurance? Check out all these resources to Get Started! www.jongood.com/getstarted/
Need CAREER COACHING or CONSULTING Services? www.jongood.com/services/
Traditionally, if you were to ask advice on how to build a home lab for practicing with technology, professionals would tell you to go buy a powerful computer or server. The downfalls of buying a powerful computer or server include excessive heat, licensing issues, limited resources, and more. Today, with the growth of cloud computing and the decrease in cost, you have the option of deploying your home lab in the cloud with more flexible options. Although there are several potential cloud options, for this video we are going to focus on Amazon Web Services (AWS).
Join me for this step-by-step video on how to build a home lab in AWS for FREE. We will walk through the necessary configuration steps so that you do not need another beefy computer taking up space. As a result of building your home lab in the cloud, you will also be gaining professional skills that you can take to any job.
Other resources:
Build Your Own Cybersecurity Testing Lab: amzn.to/3lJpYcD
Infosec Rock Star: amzn.to/3ApEQkA
Home Lab Recommendations: www.amazon.com/shop/jongood?l...
If you would rather build a physical lab checkout this video: • What is the BEST Compu...
Blog Post: www.jongood.com/how-to-build-...
0:00 ⏩ Introduction
1:39 ⏩ Why should you build your home lab in the cloud?
2:30 ⏩ Get FREE AWS Account
3:43 ⏩ Enable MFA (Multifactor Authentication)
5:16 ⏩ Configure Billing Alarm with CloudWatch
8:39 ⏩ Create NON-Root User with IAM
11:24 ⏩ Create VPC (Virtual Private Cloud)
12:58 ⏩ Create & Attach Internet Gateway (IGW)
13:36 ⏩ Create Route Table
14:55 ⏩ Edit Subnet Associations
15:12 ⏩ Create an AWS Security Group
16:58 ⏩ AWS EC2 Instances
17:29 ⏩ Launch AWS EC2 Linux Instance
20:05 ⏩ Connect to AWS EC2 Linux Instance Using SSH
21:48 ⏩ Terminate AWS EC2 Linux Instance
22:15 ⏩ Launch AWS EC2 Windows Instance
24:34 ⏩ Connect to AWS EC2 Windows Instance Using RDP
27:08 ⏩ Terminate AWS EC2 Windows Instance
27:34 ⏩ Question of the Day (QOTD)
27:42 ⏩ Final Thoughts
#AWS #CyberSecurity #Homelab
🔥Training Courses🔥
___________________________________________
Full List: www.jongood.com/courses/
👕Merch👕
___________________________________________
www.jongood.com/merch
📱Social Media📱
___________________________________________
Discord: jongood.com/discord
Facebook: jongood.com/facebook
Instagram: jongood.com/instagram
LinkedIn: jongood.com/linkedin
Twitter: jongood.com/twitter
Website: jongood.com/
⚡️Lab & TH-cam Gear⚡️
___________________________________________
www.jongood.com/equipment/
📇Affiliates📇
___________________________________________
www.jongood.com/affiliates/
DISCLAIMER: I am an ambassador or affiliate for many of the brands referenced on the channel. As an Amazon Associate, I earn a commission from qualifying purchases.
DISCLAIMER (MUSIC): I only use royalty free music and sound effects. - วิทยาศาสตร์และเทคโนโลยี
Thank you very much Jon. I've always been wary of cloud services because I could accidentally use expensive services, thank you for showing us how to set a billing alarm. Great and very informative video!
Glad I could help!
you are a legend. thank you so much for making this video. god bless!
Glad it helped!
THANK YOU!!!!! 😭😭😭😭😭 I was just googling this last night before I went to bed and you uploaded this!! Thank you so much👏👏👏👏👏
Glad I could help!
This was awesome! Especially if you're brand new to this!
Glad you liked it!
Very informative thanks a lot Jon.
Glad it was helpful!
Great video! Thank you so much.
Glad you enjoyed it!
Very informative. Thank you.
Glad it was helpful!
This video is very very helpful for me thanks for that content ☺️
Glad it was helpful!
Hey John! New to your channel, love the video. Would love to see the screen zoomed in as you go so that watching it on mobile is more legible. Subscribed!!
I'm glad that you enjoyed the content! On my newer videos I've been much better about it (I also change the resolution for readability now) but I wish when I first got my 4K monitors it showed up larger without changing the resolution. Anyways, thank you for subscribing and joining the community!
Oh man, hine sight is for sure 20/20.
I appreciate this video because you virtualize infrastructure.
Thanks a lot Jon
You're welcome and I'm glad that you enjoyed the video!
I really enjoyed your video Jon, thank you. Do you have any video that builds on this one, showing how to carry some other cybersecurity task, activities or testing after setting up this home lab
I'm glad that you enjoyed it! I have lots of different project videos and tools that you can learn about but I also encourage you to go beyond them and experiment.
you are a legend thanks!!
Glad it helped!
Thank you !
You're welcome!
New viewer, been binge watching your videos. So thank you for all your help Jon!
Would you say this method of setting up a lab is preferable to your other video where you utilized VMs via hyper V, VMware, etc?
Glad to help! Each way has it's pros and cons but a huge benefit with this method is that you get familiar with AWS and you can use some of their additional services. Also, you don't have to be as concerned about building a beefy system or a collection of systems to run everything at home.
@@JonGoodCyber
Thank you! I was leaning towards AWS to get the experience. 2 birds in one, so you definitely convinced me to do so .
Do you have a medium for submitting questions? I have some other ones but I'd feel bad pestering you on a comment sections on one of your old vids
Awesome and I think you'll enjoy learning on AWS.
Any social media (TH-cam, LinkedIn, Instagram, etc.) or you can always sign-up for a coaching session on my website and I can answer a bunch of them that way too.
Thank you
You're welcome!
awesome man
Glad you enjoyed it!
As I’m watching I ask myself “can I load a windows server on it?” And then you answer my question 😂 Very informative! Thank you for this!
Glad you enjoyed it!
I like your videos and I was following along until the part with the Putty Keygen. Can you explain how to connect instance on a Mac. Thanks.
No problem! Unfortunately PuTTY is only for Windows so you have a few options:
1. You can use the pem file without converting it and the built-in terminal application using the command: 'ssh -i /path/to/key.pem aws-ipv4-dns-name'
2. You can download a terminal application for MacOS. (SecureCRT is an example but there are lots of options.)
I would love to see how you would set up a Malware Lab with the following OSes: Remnux (Linux based), Win 11 Pro OS. Remnux is GUI based but can heavily rely on the CLI so I'm not sure what that would look like
Certainly if I get enough interest I can add this to the list!
Like Bradley I have the same issue. The VPC dashboard on your video has a different look than on the AWS page.
That's probably where I got lost !
Somehow still managed to setup routing tables & subnets. Should I delete routing tables & subnets and start again from create VPC ? Thanks Vincent
You certainly could start from scratch and then you'll learn multiple ways to do the same thing, which can always be useful.
Keep in mind that AWS is always updating services and sometimes changing the user interface but as long as you understand what you're trying to do, it's certainly possible to work through a lot of issues. Also remember that AWS maintains current documentation for everything, which will of course be updated more frequently than videos.
Thanks, Jon, for such excellent training. Only one query for education purposes can we use AWS, such as experimenting with DDoS attacks or Ethical hacking. Please advise
AWS does allow you to perform certain types of testing without their approval, however there are certain activities that are either prohibited or that have specific requirements. You can find the entire policy here: aws.amazon.com/security/penetration-testing/
Thank you. But i will actually like to launch an ec2 instance, create Active directory and join domains. Please you have a video for that?
You're welcome! Yes, I have several videos on active directory that you can watch after you stand up your server using this video because AD is built into the operating system.
I subscribed because I commented First and second to hit the like button.
Thank you and I appreciate the support!
Jon, if I follow exactly the guidance here for practices purposes am I vulnerable for attacks? Because the Security Groups configured, like you said were not good practices. Actually because the EC2 instances are exposed. Is that correct? And only for lab purposes is ok to stay as they are? I really want to go ahead to practice labs.
Security Groups are basically your firewall rules that permit or deny various types of traffic. That means the more open that your rules are, the more options that attackers have. If you shutdown the EC2 instances when you aren't using them then it might not be a big deal, but the more secure option is to restrict access to your IP address only and limit the types of access that are allowed.
Thank you for uploading this video it was very informative. Question; When creating the instances I notice there isn't a version of Ubuntu client or Kali linux, do you know why? Also, instead of making the instances available on the internet I would like to create a private VPC where I can create two hosts to practice some exploit techniques, can it be done?
I'm glad that you enjoyed it! If you search the Community AMIs when you are selecting your image you can find both. With that being said though, most cloud systems are going to run a server operating system. If you were going to run desktops in AWS you would use Amazon WorkSpaces ( aws.amazon.com/workspaces/ ) most likely. Yes of course you can do that, you just need to make sure that the security groups are configured to allow you to connect into one of the hosts. I suppose you could also setup a publicly accessible jump box that can connect into that private VPC too.
Can I create this homelab on AWS to simulate an on premise network running a domain joined DC, Active directory, DNS, DHCP server, a few computers running on the "on premise network" etc and then hybrid join it to Azure so I can use Azure active directory etc? So I would basically have a hybrid network between AWS "my on premise network" and Azure "my cloud environment"
You absolutely can connect the two cloud environments together.
I'm stuck! I've created the VPC and edited the routes correctly. However, when i go to adjust the subnet associations there aren't any in there. Should that already be created and tied to the VPC upon creation? Or do I need to manually adjust this? Thanks for posting these videos!
The VPC option should create the subnet you specify in the creation wizard. Do you have a subnet already created? Here is the documentation for creating a VPC that might also help: docs.aws.amazon.com/vpc/latest/userguide/working-with-vpcs.html
Worst case if you have to create a subnet here are the instructions: docs.aws.amazon.com/vpc/latest/userguide/working-with-subnets.html
The console GUI has changed a lot since this tutorial. Might be time for a new one :)
In your video you used Putty to SSH into your new instance. Why did you use Putty instead of just connecting directly from the terminal on your local machine? I'm in school for IT so I'm not familiar with Putty or why it is used, yet.
Putty has more features than the built-in terminal but if you are only worried about creating an SSH connection then you could use the terminal.
Newbie here. trying to learn infosec from zero experience. May i know what are the major differences in networking between instance on AWS and a actually physical machine? I was learning toward using a cloud instance to practice (since i cant afford another machine) From my shallow knowledge, AWS has its own set of defense mechanism applied to the cloud environment. will that making learning or practicing difficult?
A lot of the general ideas with network security are the same in both the physical world and the cloud, but how you go about implementing them will be different and in many cases, the cloud will be far superior if done correctly. The main reason for that is the cloud has more features and resources that you can utilize at a lower cost.
No billing option under Alarms (only "In alarm" and "All alarms" - you have four options, I see two). Changed? (free tier)
If not already enabled, you will need to enable billing alerts ( docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/monitor_estimated_charges_with_cloudwatch.html#turning_on_billing_metrics ).
Can you extend this project to create your own cloud file server? like onedrive or dropbox? if so what would i need?
I'll certainly take a look at that, although if you're using AWS, S3 buckets are basically the exact same thing.
Im stuck, I can't see any option that says "Launch VPC wizard", instead it says "Create VPC" and the VPC dashboard itself looks slightly different to the one shown in this video. Is it possible that the AWS console has had an update or something?
You are correct in that AWS has updated their interface since this video was published. When you select "Create VPC," select the option "VPC only" for the most similar experience to this video, however you now have the option to configure several items if you choose "VPC and more" instead.
Did Billing alarm creation get deprecated out? I do not see it when I follow along.
Nvm I see. According to the documentation I had to "change the Region to US East (N. Virginia). Billing metric data is stored in this Region and represents worldwide charges."
Ok great and thanks for sharing!
Do you think you could update it has been a year a lot Is different
My instance doesn't have a public ipv4 address. How can I fix this? Thank you!
Anywhere-IPv4 is what you want to choose.
If I just stopped the instance and not terminate it, will I still get billed or will my free hours still runs?
Stopped instances don't incur charges but there are some AWS services that could continue to be charged if configured. Here's an article that's worth a read: repost.aws/knowledge-center/ec2-billing-terminated
Thanks for answering@@JonGoodCyber
When i try to edit subnet associations it just spins, any ideas?
Assuming it's not still loading, try clearing your browser history/cache or try using a different browser, especially if you have plugins installed.
Can we do this from a mac as well? , I asked because in the video it looks like you’re using windows ?
Yes you can because AWS isn't tied to your host operating system. With that being said, there are two key differences when connecting to your EC2 instances:
1. For Linux EC2 instances, you either need to find a macOS compatible terminal emulator (there are several options out there but I like SecureCRT - www.vandyke.com/products/securecrt/ ), or you can use the command-line ( docs.aws.amazon.com/AWSEC2/latest/UserGuide/AccessingInstancesLinux.html ).
2. For Windows EC2 instances, you'll have to download Microsoft's Remote Desktop application from the App store because it's not natively installed.
@@JonGoodCyber TRY iTerm with z shell. and JumpDesktop for RDP..
Thank you for the recommendation!
Can you substitute AWS Linux and install Kali?
Yes, you would just need to select Kali as the operating system.
You think doing the Aws subscription to complete their course would be good enough to get a job?
What do you mean by AWS subscription? AWS charges based on your usage and the "free tier" referenced in this video has limitations for what you can do, but there isn't really a "subscription" where you get unlimited access to anything. No training will guarantee you a job however it will certainly put you in a better position and make it easier to market your skills, especially if you have a certification to match.
@Jon Good aws is offering a skill builder monthly subscription.
Oh you're talking about for training...as I said above, no training will guarantee a job but to learn the skills the official AWS training is definitely worth at least trying. I also like A Cloud Guru ( acloudguru.com/ ) because you get all the major cloud platforms.
@Jon Good personal basic or personal plus?
I recommend the plus plan so that you get the sandbox environments instead of just the training.
What happens after 750 hours of free usage ? AWS is going to surprise you with hug bill amount, so be careful in choosing the plan and after the plan expiry we don't have any other option than to pay for AWS.
The cloud model itself is aimed at allowing customers to use what they need and not get disabled for exceeding limits. With that being said, watching your usage and setting billing alarms is crucial so that you don't get a surprise bill. If you are just learning, a great paid alternative is using a platform like A Cloud Guru, which provides a sandbox where you don't have to worry about it.
how do I setup guacamole with this ?
I recommend checking out the Guacamole documentation for assistance.
Udemy or corsera?
It really depends on what you're looking for in training and a lot of times it comes down to the actual instructor since some are more enjoyable to learn from than others.
@Jon Good so far I ended signing up with coursera for the IBM cybersecurity analyst course. It has been good except some instructors their audio on the videos is bad.
I thought we would have a Linux desktop at the end to use ?? Not just spin up an instance and then immediately terminate it.
There's a million different things that you can install and configure so it would be impossible to cover them all. This way you have the lab setup and now you just need to decide how you want to use the lab.
Free account, but you have to provide credit card info.
Yes because the account is not simply locked down to free services. That also means you need to be careful about what you are using.
Hello world 🌎
Hello
CLOUD , AWS .
Awesome and thank you for sharing!
Your video is not indept enough for total beginers, how did you found your internet gateway and how did you found available public subnet? I stopped watching after the public subnet.
I did not omit any steps; therefore, if you followed them as provided, you would get the same results. This video is not meant to walk you through the extensive details of how AWS works or to prepare you for a certification exam, but instead to build a home lab and get it up and running for anybody with any level of AWS experience. AWS white papers and documentation are your best resource for extensive details of how AWS works.
I lost interest when you introduced billing alarms lol
That's too bad because you missed a lot of great content in the rest of the video.
It's not free if there asking for a credit card which i don't have. It would be nice if there really was a free cloud service out there. There's no way around it either, i've tried all sorts of suggested ways. Super aggrivating though. You should let your viewers know this right from the beginning. I heard Oracle actually has a free cloud tier, only asks for email name and address, i'll check it out and let you know for sure. Thanks for making videos, looks like you made a bunch of viewers happy.
They ask for a credit card because AWS doesn't restrict your account from launching services that are not free if you select them. Unfortunately for learners without access to a credit card, this is the norm when it comes to cloud providers. The details of the AWS Free Tier can be found here: aws.amazon.com/free/
@@JonGoodCyber I have an idea. Do you think if i put say about 150$ on a visa gift card and use that to be able to use and practice on the free tier? Please let me know if you have heard or done this yourself, for this is something i could manage.
~Ryan~
Just to be clear, everything that I did in this video is using the free tier options and AWS will not charge you. The free tier page that I linked above will tell you exactly what is permitted under the free tier program. If you plan to go beyond the free tier amount, I recommend using the AWS Pricing Calculator ( calculator.aws/ ) to determine what you can expect for your total cost.
@@JonGoodCyber Okay i understand. I'll have to look over everything a second and third time; at first glance, it can be intimidating with all the options that one can choose from. I'll take your advice for sure (using the .awsCalc) going in with confidence knowing what i want, so i can be in and out without all of the distractions of shiny new tech, lol. Have a wonderful week.