Skill UI

Cloud Architect Blueprint provides guidance for designing resilient AWS, Azure, and GCP topologies, planning secure migrations, tightening zero-trust controls, optimizing costs, and orchestrating disaster recovery across multi-region deployments.

A comprehensive guide to implementing Mutual TLS (mTLS) for achieving zero-trust, secure service-to-service communication within a service mesh. This skill provides templates and concepts for configuring mTLS using industry standards like Istio, Cert-Manager, and SPIFFE/SPIRE, ensuring robust certificate management and encrypted internal communication.

This skill simulates an expert cybersecurity auditor specializing in DevSecOps methodologies and comprehensive security assurance. It guides users through running detailed security audits, performing threat modeling, and assessing vulnerabilities (e.g., IDOR). Capabilities cover SAST, DAST, cloud security posture, zero-trust architectures, and compliance adherence to major frameworks like GDPR, HIPAA, and PCI-DSS, ensuring security is integrated throughout the entire SDLC.

An expert architect specializing in designing and optimizing service mesh using industry leaders like Istio and Linkerd. This skill provides deep knowledge of cloud-native networking patterns, enabling secure, reliable microservices communication. It covers advanced topics including zero-trust networking, mTLS configuration, sophisticated traffic management (e.g., canary and blue-green deployments), observability integration, and multi-cluster federation.

Automates zero trust configuration support for advanced security operations, offering guidance, code/config generation, and validation whenever zero trust config helper topics arise during penetration testing, compliance, or threat modeling workflows.

AWS Verified Access is a Zero Trust Network Access (ZTNA) service that provides secure, VPN-less access to internal applications. It uses granular Cedar policies to evaluate user identity (integrating with Okta, IAM Identity Center) and device security posture (CrowdStrike, Jamf) in real-time. Use this guide when replacing traditional VPNs, enforcing strict conditional access controls, or deploying multi-account Verified Access infrastructure across AWS.

This guide outlines how to implement Google Cloud Identity-Aware Proxy (IAP) to enforce zero-trust, identity-based access control across various Google Cloud services (App Engine, Cloud Run, GKE, Compute Engine). It details configuring per-request authentication, context-aware policies (like device posture and location), and programmatic access management for highly secure internal applications.

This guide details the implementation of Microsoft Entra Privileged Identity Management (PIM), enforcing Just-in-Time (JIT) role activation, mandatory approval workflows, and periodic access reviews for critical Azure AD and resource roles. It aligns with Zero Trust principles by eliminating standing privileges.

This skill guides the implementation of Just-In-Time (JIT) access provisioning, eliminating standing privileges by granting temporary, time-bound access. It covers designing robust approval workflows, integrating with PAM/IGA systems, automating revocation, and adhering to Zero Trust principles, significantly reducing the attack surface.

This guide details implementing microsegmentation using Akamai Guardicore Segmentation. It helps map application dependencies, visualize east-west traffic flows, and establish granular, least-privilege network policies across diverse environments (VMs, containers, bare metal, cloud). Essential for achieving zero-trust architecture and meeting compliance standards like PCI DSS or HIPAA by preventing lateral movement.

This guide details the configuration and implementation of mutual TLS (mTLS) authentication between microservices. It utilizes Python's cryptography library for robust certificate generation, validation, and secure service-to-service authentication, essential for adopting zero-trust security models.

A comprehensive guide to implementing Kubernetes NetworkPolicies, which enforce granular ingress and egress rules at the pod level. This skill enables zero-trust microsegmentation by defining default-deny rules, allowing specific traffic flows (like DNS or inter-service communication), and blocking sensitive access (e.g., cloud metadata). Essential for securing containerized workloads and preventing lateral movement within a cluster.