Skip to content
← All labs

Tiering EC2 Security Groups

In eight steps, students rewrite three-tier EC2 Security Group rules so each tier admits only the tier in front of it, then show with nc that the web tier can no longer reach the database.

EC2Security GroupsReachability Analyzer

How this lab runs

Small steps

Ordered so a student can tell whether each one worked before moving on — and so you can see which one they stalled on.

Yours to change

Add steps, cut steps, or rewrite the one your class keeps getting stuck on.

Launched from your LMS

Students open the lab from your course. No separate account or signup.

A real AWS account

Each student gets credentials and console access to a live account.

Graded automatically

Work is checked against what was actually built, and the score returns to your gradebook.

Cleaned up after

The account is torn down when the lab ends, so nothing keeps running.