Plugins

3 plugins

AWS Agent Skills

AWS Agent Skills from itsmostafa/aws-agent-skills.

18 skills · plugin

Docker, Kubernetes, CI/CD and cloud (AWS/Azure/GCP) automation.

24 skills · plugin

@pwdev-solucoes

DevOps com execução segura v1.0 — leitura livre, mutação sob confirmação por comando, destrutivo bloqueado por guard script; 19 skills (AWS, Kubernetes, Docker, Linux, Nginx, PostgreSQL, observabilidade, incidente, segurança, Proxmox, automação, performance, backup, Laravel, confiabilidade, FinOps, IA, documentação) e 4 subagentes

19 skills · plugin

Results for “aws”

125 skills

Implementing AWS Iam Permission Boundaries

Configure IAM permission boundaries in AWS to delegate role creation to developers while enforcing maximum privilege limits set by the security team.

24.6k · bundle

Performing AWS Privilege Escalation Assessment

Identify and test IAM misconfigurations that allow privilege escalation in AWS environments using Pacu, CloudFox, Principal Mapper, and manual analysis.

24.6k · bundle

Deploy web applications, APIs, and background services on AWS using CDK, covering EC2, ECS Fargate, Lambda, API Gateway, CloudFront, Route 53, RDS, ElastiCache, IAM, and monitoring.

Deploys Flutter backends on AWS using EKS, RDS, S3, Lambda, API Gateway, ElastiCache, Secrets Manager, CloudWatch, and IAM, with CLI examples and CDK infrastructure code.

Implementing AWS Nitro Enclave Security

Builds AWS Nitro Enclave-based confidential computing environments with cryptographic attestation, KMS policy integration, and secure vsock communication for processing sensitive data.

24.6k · bundle

Implementing AWS Security Hub

Deploy AWS Security Hub as a centralized cloud security posture management platform, aggregate findings from GuardDuty, Inspector, Macie, and third-party tools, enable security standards, configure automated remediation, and build compliance dashboards across multi-account AWS organizations.

24.6k · bundle

Detecting AWS Iam Privilege Escalation

Identify AWS IAM privilege escalation paths by analyzing policies for dangerous permission combinations and least-privilege violations using boto3 and Cloudsplaining-style analysis.

24.6k · bundle

cloudthinker-ai

Analyzes AWS Cognito user pools and identity pools, covering authentication flows, MFA status, app client configuration, password policy, Lambda triggers, and federation setup.

Manage AWS S3 buckets and objects: create buckets, upload/download files, configure lifecycle policies, set up static websites, manage permissions, and implement cross-region replication.

cloudthinker-ai

Analyzes AWS ECS clusters, services, and tasks, including health, deployment status, task failures, capacity providers, and resource utilization, with parallel execution and anti-hallucination guardrails.

Detecting AWS Guardduty Findings Automation

Automate AWS GuardDuty threat detection findings processing using EventBridge and Lambda to enable real-time incident response, automatic quarantine of compromised resources, and security notification workflows.

24.6k · bundle

Implementing Envelope Encryption With AWS Kms

Encrypt large data volumes locally using envelope encryption with AWS KMS, generating data keys and managing encrypted keys alongside ciphertext.

24.6k · bundle

Hf Cloud Python Env Setup

Sets up an isolated Python environment for SageMaker and AWS work, pinning Python version and installing current boto3/awscli to avoid dependency conflicts and stale SDKs.

10.8k · bundle

cloudthinker-ai

Analyzes AWS S3 buckets for storage class distribution, lifecycle policies, access patterns, and cost optimization, including security posture checks like encryption and public access.

Securing API Gateway With AWS Waf

Protect API Gateway endpoints with AWS WAF by configuring managed rule groups, rate limiting, bot control, IP reputation filtering, and monitoring.

24.6k · bundle

cloudthinker-ai

Analyzes AWS CloudTrail events and trails, including trail health, API activity, security investigations, resource changes, and event selector audits, with parallel execution and anti-hallucination guardrails.

Configuring AWS Verified Access For Ztna

Configure AWS Verified Access to provide VPN-less zero trust network access to internal applications using identity and device posture verification with Cedar policy language.

24.6k · bundle

Manage AWS RDS relational databases: provision instances, configure backups, manage replicas, troubleshoot connectivity, and optimize performance.

Implementing AWS Security Hub Compliance

Aggregate security findings across AWS accounts, enable compliance standards like CIS and PCI DSS, configure automated remediation with EventBridge and Lambda, and create custom security insights for organizational risk management.

24.6k · bundle

Detecting AWS Cloudtrail Anomalies

Query AWS CloudTrail events with boto3, build statistical baselines of normal API activity, and detect anomalies such as unusual event sources, geographic anomalies, high-frequency API calls, and first-time API usage patterns.

24.6k · bundle

Manage Amazon EKS clusters, node groups, IRSA, add-ons, and deployments using AWS CLI and eksctl.

Enumerating Cloud With Cloudfox

Map AWS and Azure attack paths and find exploitable misconfigurations with CloudFox.

24.6k · bundle

Create and manage Amazon EventBridge event buses, rules, event patterns, and targets for event-driven architectures.

Access AWS Bedrock foundation models for generative AI, including text generation, embeddings, and image generation, with CLI and Python examples.

Remediating S3 Bucket Misconfiguration

Identify and remediate Amazon S3 bucket misconfigurations that expose sensitive data, including enabling Block Public Access, auditing policies and ACLs, enforcing encryption, configuring access logging, and deploying automated remediation with AWS Config and Lambda.

24.6k · bundle

Create, configure, and manage AWS Lambda serverless functions for event-driven compute, including triggers, debugging, cold start optimization, and layers.

Performing Cloud Forensics Investigation

Collect and analyze logs, snapshots, and metadata from AWS, Azure, and GCP to investigate security breaches in cloud environments.

24.6k · bundle

Connect Cdc Dynamodb

Guides setup and operation of the aws_dynamodb_cdc input in Redpanda Connect, which streams change data capture from AWS DynamoDB into Redpanda or Kafka using DynamoDB Streams. Covers enabling streams, IAM policies, checkpoint tables, snapshot modes, table discovery, and operational constraints.

Set up and manage AWS Cognito user pools, identity pools, OAuth flows, and user authentication with CLI commands and Python SDK examples.

Cloud Architect

Designs cloud architectures, creates migration plans, generates cost optimization recommendations, and produces disaster recovery strategies across AWS, Azure, and GCP.

10.4k · bundle

Guides backup, restore, snapshot, PITR, retention, and disaster recovery planning for PostgreSQL and AWS, emphasizing tested restores and RTO/RPO alignment.

Cria e mantém o inventário da plataforma, mapeando contas AWS, clusters, ambientes, bancos e hosts, distinguindo produção de staging para evitar operações arriscadas.

Manage AWS SQS queues, send and receive messages, configure dead-letter queues, and integrate with Lambda using CLI commands and Python boto3 examples.

Manage AWS API Gateway for creating, publishing, and securing REST, HTTP, and WebSocket APIs using CLI commands, SAM templates, and best practices.

Analisa custos AWS e identifica desperdícios em EC2, RDS, S3, EKS, EBS, Elastic IP, NAT Gateway e tráfego, gerando relatório de economia estimada.

Building Cloud Siem With Sentinel

Deploy Microsoft Sentinel as a cloud-native SIEM and SOAR platform for centralized security operations across AWS, Azure, and GCP.

24.6k · bundle