Skill UI

This comprehensive skill provides a security posture assessment for AWS environments. It uses AWS CLI commands to audit critical security areas, including IAM policy review, network security groups, data encryption status (EBS, S3, RDS), and logging mechanisms (CloudTrail, VPC Flow Logs). Use this to proactively identify misconfigurations and ensure adherence to security best practices and compliance standards.

Automates iam policy creation for AWS Skills, activating when you mention the trigger, guiding best practices, generating production-ready configs, and validating outputs for compute, storage, networking, and serverless scenarios.

Guides implementing Kubernetes NetworkPolicy, RBAC, PodSecurityPolicy, Pod Security Standards, and OPA Gatekeeper constraints to enforce defense-in-depth across clusters, covering multi-tenant protection, admission control, and Istio service mesh policies.

This specialized, end-to-end workflow guides the deployment of applications onto Kubernetes clusters. It systematically covers all critical production phases, including Docker container preparation, generating K8s manifests, structuring applications with Helm charts, configuring advanced service meshes (like Istio), enforcing robust security policies (RBAC, NetworkPolicy), and implementing full observability and GitOps pipelines for reliable, scalable deployments.

Helps Claude manage Kubernetes network policies and firewall rules by generating or updating YAML configurations based on infrastructure needs, ensuring secure pod-to-pod communication and compliance with least-privilege principles.

Automates S3 bucket policy generation within AWS, offering step-by-step guidance, safeguards best practices, and produces production-ready configurations for compute, storage, networking, and serverless scenarios.

AWS Verified Access is a Zero Trust Network Access (ZTNA) service that provides secure, VPN-less connectivity to corporate applications hosted in AWS. It enforces granular, conditional access control using the Cedar policy language, verifying both user identity and device security posture in real-time before granting access to specific resources. Ideal for modernizing security architecture and meeting strict compliance requirements.

This skill provides comprehensive guidance and PowerShell scripts for hardening Windows endpoints using Microsoft Defender for Endpoint (MDE). It covers advanced features like Attack Surface Reduction (ASR) rules to block common attack techniques, Controlled Folder Access for ransomware protection, and Network Protection. Use this for deploying enterprise-grade, compliance-required security policies via Intune or Group Policy.

This comprehensive guide details how to implement a Zero Trust Network Access (ZTNA) solution using Cloudflare Access and Cloudflare Tunnel. It provides a secure alternative to traditional VPNs by offering identity-aware, policy-driven access to self-hosted and private applications. The process covers setting up tunnels, integrating major Identity Providers (Okta, Azure AD), and enforcing granular access policies.

This skill provides comprehensive guidance on implementing robust network security controls in Kubernetes using Calico's CNI capabilities. Learn to define and audit NetworkPolicy and GlobalNetworkPolicy resources to achieve zero-trust microsegmentation, restrict egress traffic, and control all pod-to-pod communications, ensuring compliance and enhanced security posture.

This guide provides a comprehensive deep dive into implementing advanced network segmentation and zero-trust security controls within Kubernetes clusters using Calico. It covers standard Kubernetes NetworkPolicy, utilizing Calico's GlobalNetworkPolicy, and defining security Tiers, ensuring fine-grained, least-privilege communication between pods, and establishing robust security architectures for compliance.

This skill details the deployment of Cisco Identity Services Engine (ISE) for comprehensive network access control. It utilizes 802.1X, MAC Authentication Bypass (MAB), and posture assessment to centralize policy enforcement. ISE acts as a RADIUS policy server, providing dynamic VLAN assignment, downloadable ACLs, and robust authentication for both wired and wireless enterprise environments.