Skill UI

A comprehensive guide detailing systematic strategies and patterns for optimizing cloud spending across major platforms including AWS, Azure, and GCP. It covers best practices for rightsizing resources, leveraging reserved instances, implementing lifecycle policies, and setting up robust cost governance, ensuring cost efficiency without sacrificing performance or reliability.

Expert in designing, building, and optimizing scalable data pipelines, modern data warehouses, and real-time streaming architectures. Mastery covers the complete modern data stack, including Spark, dbt, Airflow, and cloud services (AWS, Azure, GCP). Focuses on ELT/ETL, data lakehouse implementation (Delta Lake, Iceberg), data governance, and ensuring high data quality and operational reliability.

A comprehensive guide for establishing robust, enterprise-grade access control within Databricks. Covers implementing Single Sign-On (SSO) via SCIM, leveraging Unity Catalog for fine-grained Role-Based Access Control (RBAC), defining cluster policies, and enforcing data governance measures like Row-Level Security (RLS) and column masking. Essential for large-scale, secure data platforms.

This guide defines the role and responsibilities of a Senior Quality Manager Responsible Person (QMR) for highly regulated MedTech and HealthTech environments. It covers essential functions under ISO 13485, including leading management reviews, establishing quality objectives, monitoring performance KPIs, and maintaining strict regulatory compliance oversight. Use this resource when developing a Quality Management System (QMS) or managing regulatory accountability.

This skill guides the implementation of comprehensive Identity Governance and Lifecycle Management (IGM) processes. It automates the entire employee identity lifecycle—from pre-hire onboarding (Joiner) to role changes (Mover) and termination (Leaver). Key components include Role-Based Access Control (RBAC) provisioning, periodic access recertification, and remediation of orphaned accounts, ensuring compliance with standards like SOX and GDPR.

This tool discovers and inventories 'shadow APIs'—endpoints that operate outside documented specifications (OpenAPI/Swagger). It utilizes advanced traffic analysis against API gateways (e.g., Kong, AWS API Gateway), cloud configuration scanning, and source code mining. Essential for assessing the complete API attack surface, auditing forgotten services, or establishing robust API governance policies.

Deploy SailPoint IdentityNow or IdentityIQ to establish robust identity governance and access administration. This comprehensive solution manages the entire identity lifecycle, facilitates access request workflows, conducts certification campaigns, performs role mining, and enforces Separation of Duties (SOD) policies, ensuring continuous compliance reporting for enterprise IAM environments.

This skill guides the implementation of continuous, risk-adaptive identity verification crucial for Zero Trust Architecture (ZTA). It covers deploying phishing-resistant MFA (FIDO2/WebAuthn), advanced risk-based conditional access policies, and identity governance strategies. Users learn how to move beyond traditional credentials by leveraging multiple signals—such as device posture, behavioral biometrics, and location context—to dynamically assess and enforce trust levels before granting access.

This guide details implementing Policy-as-Code using Open Policy Agent (OPA) and Gatekeeper. It covers writing complex Rego policies, deploying OPA Gatekeeper as a Kubernetes admission controller, and integrating policy testing into CI/CD pipelines to enforce security standards across clusters. Ideal for DevSecOps practitioners requiring robust governance.

Manages the complete data lifecycle within ClickHouse. Includes setting Time-To-Live (TTL) policies for automatic data expiration, implementing GDPR/CCPA compliant deletion, PII masking, partition management, and building comprehensive audit trails. Essential for robust data governance and compliance.

Master the setup of enterprise-grade Role-Based Access Control (RBAC) within Snowflake. This guide covers defining custom role hierarchies, managing system roles, granting granular object privileges, and integrating advanced security features like SAML/OIDC-based Single Sign-On (SSO) and SCIM for automated user provisioning. Essential for implementing least-privilege access patterns and robust data governance.

Comprehensive skill for managing the KubeSphere ServiceMesh extension, integrating Istio, Kiali, and Jaeger. It provides full lifecycle management, including installation, uninstallation, and detailed status checking. Users can define advanced traffic governance policies (like canary or blue-green deployments) and troubleshoot microservice connectivity, utilizing features such as traffic mirroring and circuit breaking for composed applications.