Skill UI

This skill automates the validation of AWS environments against critical industry compliance benchmarks. It performs detailed checks for CIS AWS Foundations, PCI-DSS, HIPAA, and SOC 2 standards, covering key areas like Identity and Access Management (IAM), logging, data protection, and network security. Essential for preparing for regulatory audits and maintaining continuous secure operations.

This comprehensive guide provides scripts and best practices for auditing, hardening, and enforcing AWS Identity and Access Management (IAM) policies. It covers implementing least privilege, defense in depth, and auditing for overly permissive actions, unused roles, and outdated access keys, significantly enhancing cloud security posture.

A comprehensive SDK providing robust authentication credentials for Python applications interacting with Azure services. It simplifies secure access by supporting multiple credential types, including Managed Identity, Service Principal, and Azure CLI. Features like DefaultAzureCredential allow seamless authentication across local environments, CI/CD pipelines, and various Azure cloud deployments.

A comprehensive SDK providing robust authentication credentials for Python applications interacting with Azure services. It simplifies secure access by supporting multiple credential types, including Managed Identity, Service Principal, and Azure CLI. Features like DefaultAzureCredential allow seamless authentication across local environments, CI/CD pipelines, and various Azure cloud deployments.

This skill provides access to official Anthropic brand identity resources, ensuring visual consistency across all documents. It automatically applies defined brand colors (primary, accent, neutral) and typography (Poppins for headings, Lora for body text) while maintaining structural integrity and readability. Ideal for professional reports, presentations, and marketing materials needing strict corporate adherence.

This skill provides access to Anthropic's official brand identity and style resources. It ensures consistent and professional visual branding by managing defined primary and accent color palettes, and applying specific typography rules (e.g., Poppins for headings, Lora for body text). It guarantees that the output maintains a cohesive, on-brand appearance across various systems.

A comprehensive guide for integrating Plaid API into fintech applications. Covers secure link token creation, public token exchange for persistent access tokens, and real-time transaction synchronization using the /transactions/sync endpoint. Includes best practices for identity verification, ACH authentication, and webhook handling, ensuring robust financial data connectivity.

This guide provides comprehensive instructions for setting up and managing Sentry's enterprise-grade Role-Based Access Control (RBAC). It covers establishing the Organization-Team-Project hierarchy, integrating Single Sign-On (SSO) via SAML2, and automating user provisioning with SCIM. Use this when setting up large-scale organizations, enforcing granular team permissions, centralizing identity management, or ensuring regulatory compliance and audit logging.

This script provides a comprehensive security assessment of Microsoft Entra ID (Azure AD) identity configurations. It audits for risky authentication policies, overly permissive role assignments, stale accounts, conditional access gaps, and guest user risks using PowerShell and Graph API. Ideal for compliance audits, security posture review, and post-merger security assessments.

This skill guides the implementation of comprehensive Identity Governance and Lifecycle Management (IGM) processes. It automates the entire employee identity lifecycle—from pre-hire onboarding (Joiner) to role changes (Mover) and termination (Leaver). Key components include Role-Based Access Control (RBAC) provisioning, periodic access recertification, and remediation of orphaned accounts, ensuring compliance with standards like SOX and GDPR.

This tool applies advanced role mining techniques (including clustering and formal concept analysis) to analyze existing user-permission assignments. It discovers optimal, minimal role sets for Role-Based Access Control (RBAC) systems, helping organizations mitigate 'role explosion' and enforce the principle of least privilege. Ideal for identity governance and access control architecture redesign.

AWS Verified Access is a Zero Trust Network Access (ZTNA) service that provides secure, VPN-less access to internal applications. It uses granular Cedar policies to evaluate user identity (integrating with Okta, IAM Identity Center) and device security posture (CrowdStrike, Jamf) in real-time. Use this guide when replacing traditional VPNs, enforcing strict conditional access controls, or deploying multi-account Verified Access infrastructure across AWS.