Cloud Lab Specifications

Cloud labs provide a preconfigured browser-based environment that will provision a real, temporary cloud platform user account, lasting 60 minutes.

They are intended to be used for educational purposes only. We monitor for suspicious or abusive behavior, including any misuse of the lab beyond its stated educational purpose or activities.

Azure Cloud Labs & Sandbox

Resource Providers

Below are the resource providers currently allowed. We are actively expanding our capabilities and will add additional support in 2023.

Supported

If the resource provider is not explicitly stated in this list, it is not currently supported. See Azure’s documentation matching resource providers to services.

  • Microsoft.Authorization/policyDefinitions/read
  • Microsoft.Authorization/policyDefinitions/write
  • Microsoft.Cdn
  • Microsoft.CognitiveServices
  • Microsoft.Compute
  • Microsoft.ContainerInstance
  • Microsoft.ContainerRegistry
  • Microsoft.ContainerService
  • Microsoft.Databricks
  • Microsoft.DevTestLab
  • Microsoft.DocumentDB
  • Microsoft.EventHub
  • Microsoft.HDInsight
  • Microsoft.KeyVault
  • Microsoft.ManagedIdentity
  • Microsoft.Network
  • Microsoft.OperationalInsights
  • Microsoft.OperationsManagement
  • Microsoft.PolicyInsights
  • Microsoft.ServiceBus
  • Microsoft.Sql
  • Microsoft.Storage
  • Microsoft.Synapse
  • Microsoft.Web

Locations

  • Allowed locations: westus and eastus

App Service Plan

  • Allowed: Free and Shared, Basic, and Standard service plans (Docs)
    • SKU names F1, D1, B1, B2, B3, S1, S2, S3

Virtual Machines

  • Allowed: General purpose VMs with vCpu <= 8 and memoryGB <=32 (Docs)
    • Sizes: B, Dsv3, Dv3, Dasv4, Dav4, DSv2, Dv2, Av2, DC, DCv2, Dv4, Dsv4, Ddv4, Ddsv4, Dv5, Dsv5, Ddv5, Ddsv5, Dasv5, Dadsv5

Cognitive Services

  • Allowed SKUs: F0, S0, S1, S2

Databricks

  • Allowed: Standard workspaces

Elasticpools

  • Allowed: Basic and Standard tiers

Microsoft.SQL

  • Allowed SKUs (requestedServiceObjectiveName): Free, Basic, S0, S1, S2, S3, S4, S6, S7, S9, S12, DW100c, DW200c

Synapse Big Data Pools

  • Allowed nodesizes: Small and medium

Virtual Machine Scale Sets

  • Allowed: General purpose VMs with vCpu <= 8 and memoryGB <=32 (Docs)
    • Sizes: B, Dsv3, Dv3, Dasv4, Dav4, DSv2, Dv2, Av2, DC, DCv2, Dv4, Dsv4, Ddv4, Ddsv4, Dv5, Dsv5, Ddv5, Ddsv5, Dasv5, Dadsv5

AWS Cloud Labs & Sandbox

Services

Below are the services currently allowed. We are actively expanding our capabilities and will add additional support in 2023.

Supported

If a service or action is not explicitly stated in this list, it is not currently supported.

  • EC2
    • Limited EBS and VPC functionality
  • EFS
  • S3
  • IAM

Regions

  • Allowed regions: us-east-1, us-west-2

EC2

  • Allowed instance types: t2.nano, t2.micro, t2.small, t3.nano, t3.micro, t3.small, t4g.nano, t4g.micro, t4g.small

IAM

  • IAM user provisioned in the lab can’t be edited / removed
  • IAM default inline policy with timestamp can’t be edited/deleted (SCP DenyInlinePolicyEdits)

Unavailable

  • Root user access
  • Organizations
  • Billing and Account Settings
  • Support