Skill UI

This skill automates the validation of AWS environments against critical industry compliance benchmarks. It performs detailed checks for CIS AWS Foundations, PCI-DSS, HIPAA, and SOC 2 standards, covering key areas like Identity and Access Management (IAM), logging, data protection, and network security. Essential for preparing for regulatory audits and maintaining continuous secure operations.

Automate the rotation of sensitive credentials, including RDS database passwords, API keys, and OAuth tokens, using AWS Secrets Manager and Lambda. This skill ensures secure credential lifecycle management, helping maintain system security and compliance by automatically updating credentials for various AWS and third-party services.

This router bundles 15 specialized compliance skills crucial for HealthTech and MedTech organizations. It provides structured guidance across major global regulations, including ISO 13485 QMS, EU MDR, FDA submissions, GDPR, and the EU AI Act. Use this when a compliance request is complex and needs to be accurately directed to a specific technical skill area (e.g., risk management, CAPA, data security).

This skill guide details the implementation of envelope encryption using AWS Key Management Service (KMS). It outlines the secure process of using a Data Encryption Key (DEK) to encrypt data locally, and subsequently protecting that DEK with a KMS-managed Key Encryption Key (KEK). This method is crucial for encrypting large data volumes on AWS, significantly reducing direct KMS API calls, improving performance, and maintaining compliance with strict security standards.

This guide details how to implement HashiCorp Vault's dynamic secrets engine. It automates the generation, lease management, and rotation of short-lived credentials for databases (e.g., PostgreSQL, MySQL), AWS IAM, and PKI certificates. This method eliminates the use of static, hardcoded secrets, enforcing zero-trust principles and meeting stringent compliance mandates like PCI-DSS.

This skill guides the implementation of Mobile Application Management (MAM) policies, enabling robust data protection for corporate assets on both managed and unmanaged mobile devices (BYOD). It covers configuring app-level controls such as Data Loss Prevention (DLP), selective wiping, and containerization using platforms like Microsoft Intune and Azure AD. Use this when enforcing data separation between personal and work environments without requiring full device enrollment.

This skill details the deployment of Privileged Access Management (PAM) for critical database systems, including Oracle, SQL Server, PostgreSQL, and MySQL. It covers essential security controls such as session proxy configuration, credential vaulting, query auditing, and enforcing least-privilege access, helping organizations meet stringent compliance and security standards.

This guide details the implementation of comprehensive security monitoring using Datadog Cloud SIEM, Cloud Security Management (CSM), and Workload Protection. It covers deploying the Datadog Agent across hybrid cloud infrastructure (AWS, Azure, GCP), ingesting critical log sources (CloudTrail, VPC Flow Logs, etc.), configuring Workload Protection, and creating custom detection rules to detect threats, enforce compliance, and provide centralized SOC visibility.

Provides comprehensive guidance on determining the optimal scaling strategy for Qdrant vector databases. Covers when to transition from vertical to horizontal scaling, how to select the right number of nodes and shards, and best practices for setting replication factors to ensure zero-downtime operation and fault tolerance. Also details proper shard management and common scaling pitfalls to avoid.

This guide provides a comprehensive blueprint for deploying the Abridge clinical AI integration to highly secure, HIPAA-compliant cloud infrastructure. It covers best practices for healthcare deployments, including utilizing BAA-covered services (GCP Cloud Run), robust secret management via GCP Secret Manager, and implementing VPC-restricted networking for maximum data security.

This guide outlines security best practices for managing Bright Data zone credentials, API tokens, and webhooks. It covers crucial steps like credential inventory, environment variable security, zone isolation across environments, scheduled credential rotation, and implementing pre-commit hooks to prevent sensitive data leakage, maximizing data security and compliance.

Manages the complete data lifecycle within ClickHouse. Includes setting Time-To-Live (TTL) policies for automatic data expiration, implementing GDPR/CCPA compliant deletion, PII masking, partition management, and building comprehensive audit trails. Essential for robust data governance and compliance.