Skill UI

This utility provides comprehensive security auditing for Kubernetes Role-Based Access Control (RBAC) configurations. It identifies overly permissive roles, dangerous wildcard permissions (*), critical ClusterRoleBindings, and potential privilege escalation paths. By integrating tools like rbac-tool, KubiScan, and Kubeaudit, it helps users enforce the principle of least privilege, crucial for compliance and security assessments on EKS, GKE, and AKS clusters.

A comprehensive guide for deploying and operationalizing Amazon GuardDuty. It provides continuous, intelligent threat detection across core AWS services including S3, EKS, and EC2 runtime monitoring. Use this skill to investigate suspicious activity, detect compromised credentials, or build automated incident response playbooks using EventBridge and Lambda for proactive security.

A specialized tool for performing comprehensive CIS Kubernetes Benchmark audits. It verifies the security configurations of control planes, worker nodes, and etcd against industry best practices. The output is designed to generate actionable compliance evidence for audits like SOC 2 or PCI DSS, helping users identify vulnerabilities, determine non-applicability on managed clusters (EKS, GKE, AKS), and plan remediation strategies.

This skill guides the hardening of managed Kubernetes clusters (EKS, AKS, GKE) by implementing critical cloud security best practices. It covers enforcing Pod Security Standards, deploying Network Policies for least privilege communication, and configuring Workload Identity to eliminate static cloud credentials. Ideal for production deployments or remediation after a security audit.

A comprehensive guide to connecting any Kubernetes cluster (EKS, GKE, AKS) to CAST AI for cost optimization, autoscaling, and security monitoring. This skill covers the entire setup process, including generating API keys, installing the CAST AI agent via Helm charts, and integrating the provider using Terraform.

This tool audits Kubernetes Role-Based Access Control (RBAC) configurations to systematically identify overly permissive roles, dangerous wildcards, and insecure ClusterRoleBindings. It helps pinpoint potential privilege escalation paths, service account abuses, and compliance gaps in EKS, GKE, and AKS clusters, ensuring adherence to the principle of least privilege.