flAWS 2
Learn AWS security through an attacker path and a defender path
flAWS 2 is a free browser-based challenge that teaches Amazon Web Services security concepts. It was made by Scott Piper of Summit Route as a follow-up to the original flAWS. The levels focus on AWS-specific issues such as serverless functions and containers, not general web bugs.
Free · No login · Browser · Intermediate
About flAWS 2
You choose one of two paths. On the Attacker path you work through levels in a deliberately misconfigured AWS setup. On the Defender path you act as an incident responder and study logs from an earlier attack to understand what happened.
You need no account. Hints are built in, so you can also click through to learn the ideas. It suits developers and cloud engineers who already know some AWS basics.
On Breakpoint since 23 Oct 2026.