Complimentary | TryHackMe Write-up

Complete walkthrough for the TryHackMe Complimentary room. Uncover AWS Cognito IAM misconfigurations and extract guest records from DynamoDB.

This is my write-up for the TryHackMe room on Complimentary. Written in 2026, I hope this write-up helps others learn and practice cybersecurity.

Task 1: Complimentary

The Byte Lotus Wellness web application (http://complimentary-wellness-app-332173347248.s3-website-us-east-1.amazonaws.com/) delivers a login-free experience that automatically recognizes u…