Skill UI

Provision production-grade Vertex AI ADK Agent Engine infrastructure with Terraform, covering Agent Engine runtime, code execution sandbox, Memory Bank, VPC Service Controls, and secure IAM setup for multi-agent deployments.

This skill automates the validation of AWS environments against critical industry compliance benchmarks. It performs detailed checks for CIS AWS Foundations, PCI-DSS, HIPAA, and SOC 2 standards, covering key areas like Identity and Access Management (IAM), logging, data protection, and network security. Essential for preparing for regulatory audits and maintaining continuous secure operations.

This comprehensive skill provides a security posture assessment for AWS environments. It uses AWS CLI commands to audit critical security areas, including IAM policy review, network security groups, data encryption status (EBS, S3, RDS), and logging mechanisms (CloudTrail, VPC Flow Logs). Use this to proactively identify misconfigurations and ensure adherence to security best practices and compliance standards.

Generates complete, production-ready Google Cloud Platform (GCP) code examples and infrastructure templates. It spans various modern AI patterns, including ADK agents, Genkit RAG flows, and multimodal analysis using Vertex AI and Gemini. The output includes runnable code, deployment configuration (Terraform/IaC), security best practices (IAM, VPC-SC), and monitoring setup, ensuring enterprise-grade reliability and cost optimization.

Provides automated AWS VPC network design assistance, offering step-by-step guidance, best-practice checks, and production-ready configs whenever “vpc network designer” is mentioned.

Automates VPC network provisioning guidance within the GCP Skills category, offering best practices, ready-to-run code, and validation for compute, storage, BigQuery, Vertex AI, and other Google Cloud services whenever “vpc network setup” is mentioned.

A comprehensive guide for security teams on detecting and responding to unauthorized crypto mining operations in cloud environments (AWS, Azure). It details a multi-layered approach, utilizing cost anomaly detection, compute utilization monitoring, GuardDuty findings, and network flow log analysis (VPC/KQL) to identify resource hijacking attempts and suspicious activity across EC2, ECS, and EKS workloads.

This guide teaches how to implement and audit Google Cloud Platform (GCP) VPC firewall rules using gcloud. It covers creating restrictive ingress and egress rules, enforcing network segmentation using tags and service accounts, and auditing for overly permissive settings. Ideal for compliance, zero-trust architectures, and responding to security findings.

This guide details the implementation of comprehensive security monitoring using Datadog Cloud SIEM, Cloud Security Management (CSM), and Workload Protection. It covers deploying the Datadog Agent across hybrid cloud infrastructure (AWS, Azure, GCP), ingesting critical log sources (CloudTrail, VPC Flow Logs, etc.), configuring Workload Protection, and creating custom detection rules to detect threats, enforce compliance, and provide centralized SOC visibility.

This skill provides a comprehensive guide and structured SQL templates for performing deep forensic investigations on AWS cloud logs. It utilizes AWS Athena to query massive datasets from CloudTrail, VPC Flow Logs, S3 access logs, and ALB logs. Ideal for detecting unauthorized access, data exfiltration, and privilege escalation during security incident response.

AWS Detective automatically analyzes log data from CloudTrail, VPC Flow Logs, GuardDuty, and EKS audit logs to build interactive behavior graphs. This tool enables security analysts to investigate suspicious activity, trace lateral movement across accounts, profile compromised entities (IAM users, EC2 instances), and reconstruct complex attack timelines without manual log parsing. Ideal for triaging GuardDuty findings or investigating suspected AWS compromises.

This guide provides a comprehensive blueprint for deploying the Abridge clinical AI integration to highly secure, HIPAA-compliant cloud infrastructure. It covers best practices for healthcare deployments, including utilizing BAA-covered services (GCP Cloud Run), robust secret management via GCP Secret Manager, and implementing VPC-restricted networking for maximum data security.