Skill UI

Configure AWS CloudTrail to enable organization-wide audit logging for compliance and security investigation. This skill covers setting up S3 buckets for log storage, applying security policies, enabling encryption, and creating trails for multi-region activity. It includes configuring event selectors for management and data events, and setting up CloudWatch alarms for unauthorized API calls to meet standards like SOC 2 or HIPAA.

This skill provides expert guidance on AWS cost optimization, monitoring, and operational excellence. It integrates MCP servers for cost estimation, analysis, CloudWatch metrics, alarms, and security auditing. Use it to analyze bills, estimate deployment costs, set up observability, and assess security posture effectively.

This skill provides comprehensive techniques for penetrating AWS cloud environments, covering IAM enumeration, privilege escalation, SSRF attacks, S3 exploitation, and Lambda code extraction. It supports red team operations and security assessments with tools like Pacu and Prowler. Requires AWS CLI and Python knowledge.

Design and manage AWS Virtual Private Cloud (VPC) networking infrastructure for production environments. This skill covers subnet isolation, routing tables, security groups, and network segmentation. It includes configuring Internet Gateways, NAT Gateways, and VPC peering for multi-AZ architectures. Use AWS CLI to create VPCs, subnets, and gateways securely. Essential for DevOps engineers setting up secure cloud network foundations.

Manage secrets, keys, and certificates securely in Azure Key Vault using CLI. Configure access policies, implement RBAC, and handle encryption operations. Essential for DevOps security and cloud infrastructure administration.

Learn to design and implement Azure network infrastructure including Virtual Networks, Subnets, Network Security Groups, and Azure Firewall. Covers hub-spoke topology, VNet peering, and private endpoints using Azure CLI and Terraform. Essential for building secure and scalable cloud network environments in production.

This Java SDK enables secure cryptographic key management within Azure Key Vault and Managed HSM. It supports creating, managing, and using RSA, EC, and symmetric keys for encryption, decryption, signing, and verification operations. Ideal for developers implementing cloud security solutions.

This skill covers provisioning and managing Azure SQL Database and Cosmos DB instances. It includes configuring security settings, setting up backups, and implementing geo-replication strategies. Users will learn to create servers, databases, and elastic pools using Azure CLI commands. It also addresses firewall rules, network security, failover groups, and performance tuning for production environments. Ideal for DevOps engineers and cloud administrators deploying managed databases on Azure.

Configure Content Delivery Networks (CDNs) like CloudFront and Cloudflare to optimize global asset delivery. Includes setting up caching, invalidation, security, and edge logic using CLI and Terraform. Ideal for reducing latency and offloading origin servers.

A comprehensive skill for offensive security testing of cloud IAM across AWS, Azure, and GCP. It guides users through credential identification, read-only validation, and privilege escalation techniques, emphasizing authorized use only.

Authorized cloud, container, and Kubernetes security assessment workflow covering metadata SSRF, IAM misconfiguration, container escape paths, and cluster RBAC review, with tooling like kubectl, Trivy, and kube-bench.

Conduct comprehensive security assessments on cloud infrastructure across Azure, AWS, and GCP. Includes identity management testing, S3 enumeration, and service account compromise analysis. Requires explicit authorization and defensive guidance protocols.