Capabilities

The holder of an active CARTS Certificate possesses the capability to:

• Plan and execute Red Team operations against enterprise AWS cloud environments using industry-standard offensive methodologies.
• Enumerate, assess, and exploit AWS cloud services including IAM, VPC, EC2, Lambda, S3, RDS, Secret Manager, Containers, and AWS Security Services.
• Identify and abuse AWS misconfigurations to achieve privilege escalation, persistence, credential access, and lateral movement.
• Execute the complete Red Team lifecycle from initial access through post-exploitation and data exfiltration within AWS environments.
• Perform horizontal and vertical privilege escalation by abusing AWS identities, permissions, and cloud resources.
• Apply MITRE ATT&CK for Cloud techniques to evaluate offensive operations against AWS infrastructure.
• Assess enterprise AWS security posture by validating cloud security controls through realistic attack simulations and offensive testing.

Next Steps

This certification is suited for roles such as:

• Cloud Red Team Operator
• Cloud Security Engineer
• Penetration Tester
• Cloud Security Consultant

Learners can advance with the following certifications:

• Certified Google Cloud Red Team Specialist (CGRTS) Course → Advanced-level course focusing on offensive operations in Google Cloud Platform (GCP).

• Certified Azure Red Team Specialist (AZRTS) Course → ): Advanced-level course focusing on offensive security operations in Microsoft Azure environments.

• Certified Hybrid Multi-Cloud Red Team Specialist (CHMRTS) Course → ): Advanced-level course focusing on offensive operations across hybrid cloud and multi-cloud environments.

Earning Criteria

To earn the CARTS certificate, students are required to:

• Complete Study Materials via CRP Portal.
• Deploy Local Lab (following detailed instructions).
• Schedule CARTS practical exam via CRP Portal.
• Pass & earn CWL Verified Certificate.