Cloud constellation
No such thing
as empty cloud.
Orbit a cloud environment. Connect the identity, compute and storage decisions that matter.
Interactive path view
The scenario and controls work without 3D.Change the conditions. Change the outcome.
The experiment
Break it.
Then make it hold.
An exposed admin service allows an intruder to reach a workload, assume an overprivileged role and read a storage object.
How this simulation works
Each run follows one deterministic path. An enabled control stops this particular scenario at its boundary. Results are educational, not a security assessment or a guarantee against other attacks.
Set the defences
0 of 3 enabledRestrict management access to an approved private path.
Limit trust policies to the intended workload identities.
Remove the compromised role’s read permission for this object.
Run once without controls. Then activate a defence and compare what happens.
Keep exploring
Return to the service universe