Skill UI

Provision production-grade Vertex AI ADK Agent Engine infrastructure with Terraform, covering Agent Engine runtime, code execution sandbox, Memory Bank, VPC Service Controls, and secure IAM setup for multi-agent deployments.

This skill automates the validation of AWS environments against critical industry compliance benchmarks. It performs detailed checks for CIS AWS Foundations, PCI-DSS, HIPAA, and SOC 2 standards, covering key areas like Identity and Access Management (IAM), logging, data protection, and network security. Essential for preparing for regulatory audits and maintaining continuous secure operations.

This comprehensive skill provides a security posture assessment for AWS environments. It uses AWS CLI commands to audit critical security areas, including IAM policy review, network security groups, data encryption status (EBS, S3, RDS), and logging mechanisms (CloudTrail, VPC Flow Logs). Use this to proactively identify misconfigurations and ensure adherence to security best practices and compliance standards.

Generates complete, production-ready Google Cloud Platform (GCP) code examples and infrastructure templates. It spans various modern AI patterns, including ADK agents, Genkit RAG flows, and multimodal analysis using Vertex AI and Gemini. The output includes runnable code, deployment configuration (Terraform/IaC), security best practices (IAM, VPC-SC), and monitoring setup, ensuring enterprise-grade reliability and cost optimization.

Provides automated AWS VPC network design assistance, offering step-by-step guidance, best-practice checks, and production-ready configs whenever “vpc network designer” is mentioned.

Automates VPC network provisioning guidance within the GCP Skills category, offering best practices, ready-to-run code, and validation for compute, storage, BigQuery, Vertex AI, and other Google Cloud services whenever “vpc network setup” is mentioned.

A comprehensive guide for security teams on detecting and responding to unauthorized crypto mining operations in cloud environments (AWS, Azure). It details a multi-layered approach, utilizing cost anomaly detection, compute utilization monitoring, GuardDuty findings, and network flow log analysis (VPC/KQL) to identify resource hijacking attempts and suspicious activity across EC2, ECS, and EKS workloads.

A comprehensive guide for implementing, auditing, and enforcing least-privilege firewall rules within Google Cloud Platform (GCP) VPC networks. This process ensures robust network segmentation, restricts unauthorized ingress and egress traffic, and enables the application of hierarchical firewall policies across an entire organization, significantly bolstering cloud security posture.

This guide details the implementation of comprehensive security monitoring using Datadog Cloud SIEM, Cloud Security Management (CSM), and Workload Protection. It covers deploying the Datadog Agent across hybrid cloud infrastructure (AWS, Azure, GCP), ingesting critical log sources (CloudTrail, VPC Flow Logs, etc.), configuring Workload Protection, and creating custom detection rules to detect threats, enforce compliance, and provide centralized SOC visibility.

This comprehensive guide outlines a structured workflow for conducting digital forensics investigations across major cloud providers, including AWS, Azure, and GCP. It covers critical steps such as evidence preservation (snapshots, metadata capture), systematic log collection (CloudTrail, Activity Logs, Audit Logs, VPC Flow Logs), and advanced analysis techniques to trace unauthorized accesses and identify root causes of security breaches.

This skill provides a comprehensive guide and structured SQL templates for performing deep forensic investigations on AWS cloud logs. It utilizes AWS Athena to query massive datasets from CloudTrail, VPC Flow Logs, S3 access logs, and ALB logs. Ideal for detecting unauthorized access, data exfiltration, and privilege escalation during security incident response.

This skill guides users on performing advanced, cloud-native threat hunting using AWS Detective. It leverages interactive behavior graphs, entity investigation timelines, and GuardDuty correlations to automatically analyze AWS logs (CloudTrail, VPC Flow Logs, etc.). Users can efficiently investigate suspicious IAM users, detect lateral movement, and correlate complex attack narratives across multiple AWS services.