Skill UI

This skill automates the validation of AWS environments against critical industry compliance benchmarks. It performs detailed checks for CIS AWS Foundations, PCI-DSS, HIPAA, and SOC 2 standards, covering key areas like Identity and Access Management (IAM), logging, data protection, and network security. Essential for preparing for regulatory audits and maintaining continuous secure operations.

A comprehensive guide and set of scripts detailing how to secure AWS Identity and Access Management (IAM). It covers implementing the principle of least privilege, enforcing MFA, managing access keys, and auditing policies for over-permissive settings, ensuring robust cloud security and compliance.

Automate the rotation of sensitive credentials, including RDS database passwords, API keys, and OAuth tokens, using AWS Secrets Manager and Lambda. This skill ensures secure credential lifecycle management, helping maintain system security and compliance by automatically updating credentials for various AWS and third-party services.

Conduct comprehensive, offensive security assessments across major cloud environments, including Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP). This skill simulates real-world attacks, covering reconnaissance, authentication bypass, resource enumeration, privilege escalation, and data extraction to identify critical misconfigurations and vulnerabilities in cloud infrastructure.

Provides expert guidance on designing, securing, and optimizing cloud-native network infrastructures across AWS, Azure, and GCP, covering load balancing, service mesh, monitoring, and automation best practices for high-performance, resilient deployments.

A senior specialist skilled in implementing Infrastructure as Code (IaC) using Terraform across major cloud platforms like AWS, Azure, and GCP. Expertise includes designing modular architectures, managing remote state (locking, encryption), enforcing security policies, and guiding the full deployment lifecycle from validation to secure application. Ideal for DevOps and Cloud Engineering roles.

A comprehensive guide to securing AWS Lambda execution roles. It details implementing least-privilege IAM policies, utilizing permission boundaries, and restricting resource-based policies. The workflow includes auditing existing permissions using AWS CLI, analyzing actual API usage with CloudTrail and IAM Access Analyzer, and programmatically creating highly scoped policies to minimize the security attack surface.