diff --git a/README.md b/README.md
index e0cd8f9..a14392c 100644
--- a/README.md
+++ b/README.md
@@ -42,6 +42,8 @@ A list of free cloud native security learning labs. Includes CTF, self-hosted wo
 
 [The Big IAM Challenge](https://bigiamchallenge.com/): CTF challenge to identify and exploit IAM misconfigurations.
 
+[CloudSec Tidbits](https://github.com/doyensec/cloudsec-tidbits/):  Three web app security flaws specific to AWS cloud, self-hosted with terraform.
+
 [Pentesting.Cloud](https://pentesting.cloud):  17 free labs.  Requires site registration.
 
 [AWS CIRT Workshop](https://aws.amazon.com/blogs/security/aws-cirt-announces-the-release-of-five-publicly-available-workshops/):  Build in your own AWS account and explore 5 common incident response scenarios as seen by the AWS CIRT team.