Skill UI

This guide provides a deep dive into hardening AWS Identity and Access Management (IAM) configurations. It teaches advanced security practices, including enforcing the principle of least privilege, defining granular policy scopes, implementing permission boundaries, and leveraging Access Analyzer to ensure continuous compliance and minimize the blast radius of security breaches.

This guide outlines a comprehensive methodology for hardening AWS Lambda execution roles. It focuses on implementing the principle of least privilege by auditing existing roles, analyzing actual API usage via CloudTrail and IAM Access Analyzer, and programmatically creating scoped IAM policies. Use this when deploying new serverless functions, remediating over-privileged roles found during security audits, or building secure, reusable role templates.

This skill guides the hardening of managed Kubernetes clusters (EKS, AKS, GKE) by implementing critical cloud security best practices. It covers enforcing Pod Security Standards, deploying Network Policies for least privilege communication, and configuring Workload Identity to eliminate static cloud credentials. Ideal for production deployments or remediation after a security audit.

A comprehensive guide to securing serverless compute platforms (AWS Lambda, Azure Functions, Google Cloud Functions). It covers critical security aspects including enforcing least-privilege IAM roles, integrating secrets management, vulnerability scanning of dependencies, input validation, and implementing runtime monitoring for robust DevSecOps practices.

This agent guides users in selecting the optimal Azure role assignment that strictly adheres to the principle of least privilege. Given a set of desired permissions, it utilizes specialized tools to either identify a suitable built-in role or generate a custom role definition. Finally, it provides actionable code snippets, including CLI commands and Bicep templates, ensuring proper and secure role assignment.

This comprehensive guide outlines essential security best practices for integrating with Adobe APIs. It covers securing OAuth credentials, implementing least-privilege scoping, managing zero-downtime credential rotation, and verifying I/O Events webhook signatures using cryptographic methods like RSA-SHA256. Essential for building secure, production-ready applications connected to Adobe services.

This guide demonstrates how to implement robust Role-Based Access Control (RBAC) for Algolia Enterprise environments. It covers defining granular permissions using ACLs, generating Secured API Keys for strict multi-tenant data isolation, and building middleware to validate service permissions, ensuring the principle of least privilege in large-scale applications.

This guide details Algolia's security best practices, focusing on scoped API keys. It covers essential concepts like separating API keys for frontend vs. backend use, applying the principle of least privilege, and generating secured, time-limited, per-user keys. It also provides a complete procedure for key rotation to maintain a robust production security posture.

This guide provides essential security controls for integrating with the Attio REST API. It details best practices for managing API tokens, including applying least-privilege scopes, implementing secure secret management across various platforms (AWS, Vercel, etc.), executing proper token rotation, and validating webhook signatures to prevent common security vulnerabilities.

Provides a comprehensive checklist for deploying Canva Connect API integrations to a production environment. It covers critical aspects like OAuth configuration, robust security measures (e.g., JWK signature verification, least privilege), rate limit handling, error response management, and final production readiness verification, ensuring a smooth and secure launch.

This guide details essential security best practices for integrating with the Canva Connect API. It covers securing OAuth 2.0 tokens, implementing least-privilege scopes, ensuring secure token storage (encryption and server-side handling), and verifying webhook signatures using JWK. Essential for building robust and secure Canva integrations.

This guide details securing the CAST AI integration across multiple layers. It covers best practices for API key management (including rotation and secrets storage), implementing least-privilege RBAC using 'kubectl', deploying the Kvisor security agent for runtime scanning, and setting up Kubernetes Network Policies to restrict egress traffic. Use this when hardening production clusters or performing security audits.