Skill UI

A comprehensive guide covering security best practices for integrating with the Apollo.io API. This includes secure key storage (using secret managers/env vars), implementing PII redaction for logging, adhering to the principle of least privilege (using standard vs. master keys), and performing key rotation procedures. Essential for building secure and compliant integrations.

This comprehensive guide provides scripts and best practices for auditing, hardening, and enforcing AWS Identity and Access Management (IAM) policies. It covers implementing least privilege, defense in depth, and auditing for overly permissive actions, unused roles, and outdated access keys, significantly enhancing cloud security posture.

An expert resource for developing highly reusable, production-grade cloud infrastructure using AWS Cloud Development Kit (CDK) in languages like TypeScript, Python, or Java. This guide provides established patterns for common services (e.g., Serverless APIs, ECS, Data Pipelines), focusing on best practices such as implementing least privilege, separating stateful resources, and ensuring monitoring via CloudWatch.

A comprehensive guide to implementing best practices for security within Databricks. Learn how to manage secrets using scoped storage, enforce the principle of least privilege via Unity Catalog grants, audit API tokens, and apply advanced data protection techniques like column-level masking and row-level security for enhanced data governance and compliance.

A comprehensive guide detailing essential security best practices for integrating with Documenso document signing. Covers critical topics such as secure API key management (using environment variables), robust webhook secret verification (preventing timing attacks), implementing least privilege document access control, and setting up secure self-hosted signing certificates and secrets.

Provides comprehensive guidelines for securing API integrations with Gamma. Covers essential best practices such as using environment variables for API key storage, implementing key rotation strategies, request signing, and enforcing least privilege access control. Essential for developers building robust, production-grade applications.

Validates Vertex AI Agent Engine GitHub Actions workflows, enforcing Workload Identity Federation, least-privilege IAM, OIDC permissions, and security scanning so GCP deployments stay automated and secure.

Configure robust role-based access control (RBAC) for Granola workspaces, essential for enterprise-level data security and governance. This guide details setting up role hierarchies (Owner, Admin, Member, Viewer), defining granular permissions, integrating SSO/SCIM for automated provisioning, and implementing least-privilege access principles. It also covers advanced features like per-workspace sharing policies and detailed audit logging to ensure regulatory compliance.

A comprehensive guide detailing security best practices for integrating with Instantly.ai. Learn how to implement least-privilege API scopes (e.g., campaigns:read), manage secrets using environment variables or dedicated secret managers, execute secure API key rotations, and validate incoming webhooks using custom headers. This skill is essential for developers building robust, secure, and scalable SaaS integrations.

Guides Kubernetes operators through workload design, manifest generation, security hardening, networking, storage, GitOps, and multi-cluster operations while ensuring probes, resource limits, and least-privilege policies.

This guide provides essential security best practices for implementing Langfuse, an LLM observability platform. It covers critical areas such as secure credential management (public vs. secret keys), implementing PII scrubbing techniques before tracing, hardening self-hosted environments, and enforcing the principle of least privilege. Use this guide to ensure your LLM integrations meet strict data privacy standards (e.g., GDPR, HIPAA).

A comprehensive guide detailing security best practices for integrating with Lokalise. Covers strategies for managing API token scopes (read-only vs. read-write), enforcing the principle of least privilege, validating translated content for XSS or credential leakage, verifying webhook secrets, and securing CI/CD pipelines against hardcoded secrets. Essential for developers and DevOps engineers.