Skill UI

Automates iam policy creation for AWS Skills, activating when you mention the trigger, guiding best practices, generating production-ready configs, and validating outputs for compute, storage, networking, and serverless scenarios.

Guides implementing Kubernetes NetworkPolicy, RBAC, PodSecurityPolicy, Pod Security Standards, and OPA Gatekeeper constraints to enforce defense-in-depth across clusters, covering multi-tenant protection, admission control, and Istio service mesh policies.

This specialized, end-to-end workflow guides the deployment of applications onto Kubernetes clusters. It systematically covers all critical production phases, including Docker container preparation, generating K8s manifests, structuring applications with Helm charts, configuring advanced service meshes (like Istio), enforcing robust security policies (RBAC, NetworkPolicy), and implementing full observability and GitOps pipelines for reliable, scalable deployments.

Helps Claude manage Kubernetes network policies and firewall rules by generating or updating YAML configurations based on infrastructure needs, ensuring secure pod-to-pod communication and compliance with least-privilege principles.

Automates S3 bucket policy generation within AWS, offering step-by-step guidance, safeguards best practices, and produces production-ready configurations for compute, storage, networking, and serverless scenarios.

Use Calico CNI and calicoctl to audit, create, and validate Kubernetes NetworkPolicy and GlobalNetworkPolicy resources, enforcing egress restrictions, namespace isolation, and zero-trust pod-to-pod segmentation for container workloads.

Guides teams through installing Calico, defining Kubernetes NetworkPolicy and Calico GlobalNetworkPolicy rules, and using tiers, deny lists, and service-account selectors to enforce zero-trust pod networking in clusters.

Documents how to enforce Kubernetes NetworkPolicies using CNI plugins to establish default-deny, service-specific, namespace-aware, egress, and metadata protections, helping teams segment pods for hardened clusters and compliance-driven deployments.

Deploy and configure Palo Alto Networks next-generation firewall with App-ID, User-ID, SSL decryption, and threat prevention profiles to secure enterprise networks, covering system setup, zone architecture, and policy workflows for compliance and assessments.

Implement eBPF-powered runtime security observability and enforcement in Kubernetes with Cilium Tetragon, letting teams define TracingPolicy CRDs, monitor process/file/network activities, and block threats before they escape containers.

Guide to configure and run Nessus scans across servers, workstations, and network devices, covering policy creation, credentialed and unauthenticated checks, REST automation, and result analysis for continual vulnerability management.

Deploys Cilium Tetragon-based eBPF tracing to watch processes, network, file access, and enforce runtime policies while streaming JSON events to SIEM pipelines for Linux hosts or Kubernetes clusters.