Skill UI

This skill provides a comprehensive decision framework and set of patterns for architects designing cloud-agnostic applications across major providers like AWS, Azure, and GCP. It details service comparisons (Compute, Storage, DB), multi-cloud patterns (e.g., Best-of-Breed, DR), cost optimization strategies, and structured migration plans, ensuring robust and resilient enterprise deployments.

This comprehensive skill profile models an expert network engineer specializing in modern cloud networking, security architectures, and performance optimization. It covers multi-cloud environments (AWS, Azure, GCP), advanced concepts like Zero Trust, Service Mesh (Istio), and high-availability design. Key capabilities include implementing IaC (Terraform), load balancing, DNS management, and deep network troubleshooting. Ideal for complex DevOps, SRE, or infrastructure design roles.

An expert architect specializing in designing and optimizing service mesh using industry leaders like Istio and Linkerd. This skill provides deep knowledge of cloud-native networking patterns, enabling secure, reliable microservices communication. It covers advanced topics including zero-trust networking, mTLS configuration, sophisticated traffic management (e.g., canary and blue-green deployments), observability integration, and multi-cluster federation.

A comprehensive, multi-phase workflow designed for Infrastructure as Code (IaC) using Terraform. It guides users through provisioning cloud resources, creating reusable modules, managing complex state, handling multi-environment deployments, and integrating robust CI/CD pipelines and security practices. Ideal for establishing scalable, repeatable, and auditable cloud infrastructure.

A comprehensive collection of production-ready, reusable Terraform modules designed for standardized infrastructure provisioning across major cloud platforms: AWS, Azure, and GCP. This library enforces Infrastructure as Code (IaC) best practices, allowing users to build, test, and deploy multi-cloud compatible components efficiently and reliably.

This skill provides advanced expertise in Infrastructure as Code (IaC) using Terraform and OpenTofu. It covers designing robust, reusable modules, managing complex multi-cloud state backends, and implementing enterprise-grade CI/CD pipelines. It specializes in governance, Policy-as-Code, and achieving GitOps compliance for full infrastructure automation.

Provides automated guidance for designing, validating, and deploying Vertex AI pipelines within Google Cloud, covering compute, storage, BigQuery, and GCP-specific services for production readiness.

Expert resource for designing, deploying, and optimizing serverless applications on the Cloudflare Edge Network. Covers advanced topics including Workers, KV, D1, Durable Objects, and R2 storage. Ideal for building high-performance, low-latency full-stack applications and implementing edge security features.

Guides security architects through designing and deploying a continuous CSPM program across AWS, Azure, and GCP, covering tool selection, policy baselines, automation, and SOC integration to monitor misconfigurations and prioritize remediation.

This skill analyzes AWS IAM policies using boto3 and Cloudsplaining principles to detect potential privilege escalation paths in AWS accounts. It identifies overly permissive policies, dangerous permission combinations (such as combining role passing and resource creation), and violations of least-privilege principles. It is designed for security incident investigation, threat hunting, and validating overall cloud security posture.

A specialized technique for proactive threat hunting, designed to detect adversary activity that abuses legitimate cloud services (like Azure, AWS, GCP, and SaaS platforms). It focuses on identifying 'living off the cloud' tradecraft, such as using cloud APIs for command-and-control (C2), staging data, or exfiltrating information while blending into normal network traffic.

ScoutSuite is an open-source, agentless tool designed for comprehensive AWS security posture assessment. It queries AWS APIs to automatically enumerate resources across various services, identify critical misconfigurations (like public S3 buckets or overly permissive IAM roles), and generate an interactive HTML report. It is ideal for conducting cloud security audits, compliance checks, or incident response procedures using read-only credentials.