Skill UI

This skill provides a comprehensive guide for deploying Microsoft Defender for Cloud across Azure, multi-cloud, and hybrid environments. It covers activating specific Defender plans for various workloads (servers, containers, storage), optimizing the Secure Score, establishing environment connectors for AWS/GCP, and implementing advanced controls like Just-In-Time (JIT) access for robust, centralized cloud workload protection.

This guide details securing the CAST AI integration across multiple layers. It covers best practices for API key management (including rotation and secrets storage), implementing least-privilege RBAC using 'kubectl', deploying the Kvisor security agent for runtime scanning, and setting up Kubernetes Network Policies to restrict egress traffic. Use this when hardening production clusters or performing security audits.

This comprehensive skill guides users through the entire Fluid storage extension lifecycle within KubeSphere. It allows for installing, upgrading, and uninstalling the Fluid extension, and managing various data resources. Users can generate YAML manifests for Datasets and specialized runtimes (Alluxio, JuiceFS, Thin), perform data loading/cache warming, scale operations, and troubleshoot issues using both kubectl and KubeSphere APIs.

A comprehensive guide for migrating cloud workloads from AWS or Azure to Oracle Cloud Infrastructure (OCI). It provides detailed concept mapping for core services like IAM, networking (VPC/VCN), compute (AMI/Custom Image), and data storage. The skill covers end-to-end migration procedures, including using OCI CLI and Python SDK for controlled deployment and resource translation.

This component is an essential extension for KubeSphere Observability Platform, designed for comprehensive collection, processing, and storage of Kubernetes and KubeSphere audit events. It supports various sinks, including OpenSearch and Doris, and provides an API for querying historical audit data, ensuring robust auditing capabilities for platform operations.

A comprehensive guide to deploying cloud-native deception across AWS, Azure, and GCP. This skill utilizes decoy resources—such as canary IAM keys, honey object storage buckets, and decoy secrets—whose sole purpose is to generate high-fidelity alerts the instant they are interacted with by an attacker. It detects cloud reconnaissance, credential theft, and lateral movement by wiring detection through native logging services (CloudTrail, Sentinel, Cloud Audit Logs), ensuring near-zero false positives for the SOC.

rclone is a powerful, feature-rich command-line utility designed to manage files across diverse cloud storage backends, including S3-compatible services. It provides robust, reliable equivalents to core Unix commands (sync, copy, move, mount). Use this skill for all terminal-based cloud operations, such as syncing, backing up, downloading, or managing remote data securely.