Skill UI

Conduct comprehensive, offensive security assessments across major cloud environments, including Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP). This skill simulates real-world attacks, covering reconnaissance, authentication bypass, resource enumeration, privilege escalation, and data extraction to identify critical misconfigurations and vulnerabilities in cloud infrastructure.

A senior specialist skilled in implementing Infrastructure as Code (IaC) using Terraform across major cloud platforms like AWS, Azure, and GCP. Expertise includes designing modular architectures, managing remote state (locking, encryption), enforcing security policies, and guiding the full deployment lifecycle from validation to secure application. Ideal for DevOps and Cloud Engineering roles.

A comprehensive guide to securing AWS Lambda execution roles. It details implementing least-privilege IAM policies, utilizing permission boundaries, and restricting resource-based policies. The workflow includes auditing existing permissions using AWS CLI, analyzing actual API usage with CloudTrail and IAM Access Analyzer, and programmatically creating highly scoped policies to minimize the security attack surface.