The practice account, and what it asks of you
Short, because it should be read. ShaLabs lends you a real AWS account for each lab; these are the terms that come with it.
01
The account is real
Every lab runs in a real AWS account that ShaLabs owns and lends to you for the session. What you create exists in AWS, exactly as it would at work.
Access is scoped to what the lab teaches and locked to the lab's region. Anything outside that is refused by AWS itself.
02
What you do is monitored and recorded
What happens in the account during your session is recorded — which services were called, what was created, what was refused — so we can clean it up, keep it safe and help when something goes wrong.
We never record your passwords, and ShaLabs never stores AWS keys: your access is temporary and ends with the session.
03
Misuse ends the session
The accounts are for learning. Mining, attacking other systems, hosting anything public that the lab does not ask for, or trying to escape the account's limits ends your session at once, and can suspend your access to labs.
04
What we keep
Your name, email and picture from Google, the labs you started and how each session ended, and the activity record described above.
Everything you create in the account is deleted when the session ends, and the account is checked empty before anyone else is given it.
How long each record is kept is being decided; it will be stated here before labs leave beta.