aws-review
From the author
Performs an AWS security posture review against the CIS Amazon Web Services Foundations Benchmark v3.0.0. Auto-invoked when reviewing AWS infrastructure, IAM policies, S3 configurations, CloudTrail settings, VPC security groups, or RDS encryption. Walks through all five benchmark sections, evaluates each recommendation, and produces a prioritized findings report with remediation guidance mapped to specific CIS control IDs.
Install
npx skills add UnitOneAI/SecuritySkills --skill aws-review -a claude-code
Installs to .claude/skills/aws-review/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
Want your agent to suggest skills while you type? See how to use skills from your IDE.
Safety checks on SKILL.md
No warnings.
Why 78
aiqbench computes the trust score from public signals. It is not a security audit, so read a skill before you install it.
Similar skills
Closest to this one by what they do and when they are used.
- azure-reviewUnitOneAI/SecuritySkillsPerforms an Azure security posture review against the CIS Microsoft Azure Foundations Benchmark v2.1.0. Auto-invoked when reviewing Azure infrastructure, Entra ID configurations, NSG rules, Defender for Cloud settings, or Key Vault access policies. Walks through all nine benchmark sections, evaluates each recommendation, and produces a prioritized findings report with remediation guidance mapped to specific CIS control IDs.DevOps★ 94
- gcp-reviewUnitOneAI/SecuritySkillsPerforms a GCP security posture review against the CIS Google Cloud Platform Foundation Benchmark v2.0.0. Auto-invoked when reviewing GCP infrastructure, IAM bindings, VPC firewall rules, Cloud Audit Logs, or GCS bucket security. Walks through all seven benchmark sections, evaluates each recommendation, and produces a prioritized findings report with remediation guidance mapped to specific CIS control IDs.DevOps★ 94
- aws-backup-coverage-reviewaws/tools-for-devops-agentAWS Backup coverage and data protection posture review. Determines which backup-eligible resources are protected by AWS Backup and which are not, across all enabled Regions of an account, then evaluates backup plan frequency and retention, cross-Region and cross-account copies, vault encryption and Vault Lock, and per-Region resource type opt-in. Uses read-only control-plane API calls and produces a rated report with a coverage matrix and prioritized remediation. Use when a user asks about backup coverage, unprotected or unbacked-up resources, AWS Backup audit or posture, backup plan or vault review, or data protection gaps. Triggers on phrasings like "what is not being backed up", "AWS Backup coverage review", "audit my backup plans", "are my volumes protected", "backup gap analysis", or "review my backup vaults". Do NOT use for restoring data, backup or restore job failure triage, backup cost optimization, or RDS-native automated backups and snapshots taken outside AWS Backup.DevOps★ 116
- auditing-cloud-with-cis-benchmarks26zl/cybersec-toolkitThis skill details how to conduct cloud security audits using Center for Internet Security benchmarks for AWS, Azure, and GCP. It covers interpreting CIS Foundations Benchmark controls, running automated assessments with tools like Prowler and ScoutSuite, remediating failed controls, and maintaining continuous compliance monitoring against CIS v5 for AWS, v4 for Azure, and v4 for GCP.Security★ 82
- aws-essentialsericrisco/rsc-harnessUse when standing up the core AWS surface a small product needs: hardening a fresh account, a private S3 bucket, encrypted RDS Postgres, ECS Fargate vs EC2, CloudFront + OAC, or scoping an IAM policy to least privilege. NOT the CI pipeline that ships the container (that is `deployment`), NOT app-code access-control review (that is `secure-coding`).DevOps★ 272
- aws-eks-operations-reviewaws/tools-for-devops-agentUse this skill when someone wants an Amazon EKS cluster graded against best practices. Use it when they ask to review, assess, audit, or grade a cluster; ask for an operations review, security review, operational-readiness or pre-upgrade check, inventory, or CWR; ask whether a cluster is production-ready or safe to upgrade; ask what risks, gaps, or misconfigurations it carries; or describe Kubernetes workloads on AWS without naming EKS. It grades nine pillars — Operations, Resilience, Security, Scalability, Performance, Observability, Networking, Cost, Control Plane — plus AWS API and Cluster Insights, and returns evidence-backed PASS/FAIL/N/A scorecards with prioritized remediations. Do not use it for a quick ungraded health snapshot or an active incident investigation.DevOps★ 116
Ratings & reviews
—
no reviews
Tried this skill? Rate it to help others. Sign in
Discussion
Join the discussion. Sign in