Skill UI

This skill provides a comprehensive guide and code examples for designing robust and scalable Identity and Access Management (IAM) structures within Oracle Cloud Infrastructure (OCI). It covers establishing secure compartment hierarchies, understanding complex policy inheritance rules, implementing least-privilege access controls, and utilizing dynamic groups for service authentication, ensuring best practices for enterprise cloud governance.

This comprehensive guide details advanced techniques for circumventing Content Security Policies (CSP). It covers exploiting weaknesses in critical directives (e.g., base-uri, object-src), abusing nonces, leveraging trusted CDN endpoints, and executing code despite strict controls like script-src 'self' or 'strict-dynamic'. Essential knowledge for deep security auditing and penetration testing.

Implement policy as code using OPA, Kyverno, and Sentinel to automate compliance enforcement in CI/CD pipelines. Define security rules for infrastructure and Kubernetes resources, preventing violations before production deployment. Ideal for DevSecOps teams ensuring consistent governance across cloud environments.

This skill performs Static Application Security Testing (SAST) to detect code vulnerabilities across multiple programming languages and frameworks. It helps identify injection flaws, hardcoded secrets, and security policy violations before deployment. Suitable for code reviews, compliance checks like OWASP, and legacy code assessment. Requires source code access and is not for runtime testing.

Expert in Terraform and OpenTofu for Infrastructure as Code (IaC). Covers advanced module design, state management, multi-cloud deployments, and CI/CD automation. Ensures secure, scalable, and compliant enterprise infrastructure patterns through policy-as-code and GitOps workflows.