Plugins

3 plugins

AWS Agent Skills

AWS Agent Skills from itsmostafa/aws-agent-skills.

18 skills · plugin

Docker, Kubernetes, CI/CD and cloud (AWS/Azure/GCP) automation.

24 skills · plugin

@pwdev-solucoes

DevOps com execução segura v1.0 — leitura livre, mutação sob confirmação por comando, destrutivo bloqueado por guard script; 19 skills (AWS, Kubernetes, Docker, Linux, Nginx, PostgreSQL, observabilidade, incidente, segurança, Proxmox, automação, performance, backup, Laravel, confiabilidade, FinOps, IA, documentação) e 4 subagentes

19 skills · plugin

Results for “aws”

125 skills

Auditing Cloud With Cis Benchmarks

Conduct cloud security audits using CIS benchmarks for AWS, Azure, and GCP, including automated assessments, remediation, and continuous compliance monitoring.

24.6k · bundle

Manages multi-cloud infrastructure declaratively through Kubernetes custom resources, covering Crossplane installation, provider setup, and provisioning of AWS resources like RDS and S3.

Emulating Cloud Attacks With Stratus Red Team

Detonate granular AWS, Azure, GCP, and Kubernetes attack techniques to validate detections with Stratus Red Team.

24.6k · bundle

Deploy and manage serverless functions on AWS Lambda, Cloudflare Workers, and Vercel Edge, with event-driven design and cold start optimization.

Cost Optimization Finops

Implements FinOps practices for cloud cost management, including cost tracking, budget alerts, resource optimization, and automated cost analysis for AWS.

cloudthinker-ai

Manage AWS cloud optimization and cost savings with nOps, including ShareSave analysis, commitment management, well-architected reviews, idle resource detection, and cost dashboards.

Detecting Cryptomining In Cloud

Detect and respond to unauthorized cryptocurrency mining in AWS and Azure environments using cost anomalies, compute utilization, network traffic analysis, and runtime monitoring.

24.6k · bundle

Deploying Cloud Deception With Decoy Resources

Deploy cloud-native deception across AWS, Azure, and GCP using decoy resources that generate high-fidelity alerts when attackers interact with them.

24.6k · bundle

leandrobenjaminl

Cloud Architect

Diseña infraestructura cloud como código con Terraform, cubriendo AWS, GCP y Azure, incluyendo arquitecturas serverless, VPC, bases de datos administradas y optimización de costos.

Implementing Cloud Trail Log Analysis

Analyze AWS CloudTrail logs for security monitoring, threat detection, and forensic investigation using Athena, CloudWatch Logs Insights, and SIEM integration.

24.6k · bundle

Implementing AWS Macie For Data Classification

Automatically discover, classify, and protect sensitive data in S3 buckets using machine learning and pattern matching for PII, financial data, and credentials detection.

24.6k · bundle

Manage AWS EC2 virtual machines — instances, security groups, key pairs, AMIs, EBS volumes, Auto Scaling Groups, Spot Instances, Session Manager, placement groups, and instance lifecycle automation.

Conducting Cloud Penetration Testing

Perform authorized penetration testing against AWS, Azure, and GCP cloud environments using cloud-specific tools and methodologies, with findings mapped to the MITRE ATT&CK Cloud matrix.

24.6k · bundle

Generates modular Terraform infrastructure-as-code for AWS, GCP, or Azure, including VPC, compute, database, cache, CDN, and monitoring with per-environment sizing, remote state, and cost estimates.

Detecting Cloud Threats With Guardduty

Deploy and operationalize Amazon GuardDuty for continuous threat detection across AWS accounts and workloads, including enabling protection plans, interpreting findings, and building automated response workflows.

24.6k · bundle

Manage AWS Identity and Access Management for users, roles, policies, and permissions. Create IAM policies, configure cross-account access, set up service roles, troubleshoot permission errors, and enforce least-privilege security.

Performing Cloud Incident Containment Procedures

Execute cloud-native incident containment across AWS, Azure, and GCP by isolating compromised resources, revoking credentials, preserving forensic evidence, and applying security group restrictions to prevent lateral movement.

24.6k · bundle

Assess cloud infrastructure for security misconfigurations, IAM privilege escalation paths, S3 public exposure, open security group rules, and IaC security gaps across AWS, Azure, and GCP with MITRE ATT&CK mapping.

20.4k · bundle

Managing Cloud Identity With Okta

Implement Okta as a centralized identity provider for cloud environments, configure SSO with AWS, Azure, and GCP, deploy phishing-resistant MFA, automate user lifecycle management, and enforce adaptive access policies.

24.6k · bundle

Conducting Cloud Incident Response

Responds to security incidents in cloud environments (AWS, Azure, GCP) by performing identity-based containment, cloud-native log analysis, resource isolation, and forensic evidence acquisition adapted for ephemeral cloud infrastructure.

24.6k · bundle

Performing Cloud Penetration Testing With Pacu

Conduct authorized AWS penetration testing using Pacu to enumerate IAM configurations, discover privilege escalation paths, test credential harvesting, and validate security controls through systematic attack simulation.

24.6k · bundle

Assesses cloud infrastructure for security misconfigurations, IAM privilege escalation paths, S3 public exposure, open security group rules, and IaC security gaps across AWS, Azure, and GCP with MITRE ATT&CK mapping.

Implementing Hashicorp Vault Dynamic Secrets

Configures HashiCorp Vault dynamic secrets engines for database credentials, AWS IAM keys, and PKI certificates with automatic generation, lease management, and credential rotation.

24.6k · bundle

Performing Serverless Function Security Review

Audit serverless functions across AWS Lambda, Azure Functions, and GCP Cloud Functions for overly permissive execution roles, insecure environment variables, injection vulnerabilities, and missing runtime protections.

24.6k · bundle

Performing Cloud Asset Inventory With Cartography

Map cloud infrastructure assets and relationships into a Neo4j graph using Cartography to discover attack paths, IAM permission chains, and security gaps across AWS, GCP, and Azure.

24.6k · bundle

Implementing Cloud Security Posture Management

Continuously monitor multi-cloud environments for misconfigurations, compliance violations, and security risks using Prowler, ScoutSuite, AWS Security Hub, Azure Defender, and GCP Security Command Center.

24.6k · bundle

Implementing Cloud Vulnerability Posture Management

Continuously monitor cloud infrastructure for misconfigurations, compliance violations, and security risks using AWS Security Hub, Azure Defender for Cloud, and open-source tools like Prowler and ScoutSuite.

24.6k · bundle

Implementing API Gateway Security Controls

Configures API gateways (Kong, AWS API Gateway, Azure APIM, Apigee) as a centralized security enforcement point with authentication, rate limiting, request validation, IP allowlisting, TLS termination, and threat protection.

24.6k · bundle

Implementing Zero Trust Network Access

Configure identity-aware proxies, micro-segmentation, and continuous verification to replace traditional VPN-based remote access with zero trust network access across AWS, Azure, and GCP.

24.6k · bundle

Detecting Compromised Cloud Credentials

Detect compromised cloud credentials across AWS, Azure, and GCP by analyzing anomalous API activity, impossible travel patterns, unauthorized resource provisioning, and credential abuse indicators using GuardDuty, Defender for Identity, and SCC Event Threat Detection.

24.6k · bundle

Arize AI Provider Integration

Manage Arize AI integrations that store LLM provider credentials for evaluators and other features. Supports creating, reading, updating, and deleting integrations with providers like OpenAI, Anthropic, Azure OpenAI, AWS Bedrock, Vertex AI, Gemini, and NVIDIA NIM.

36.2k · bundle

Securing Serverless Functions

Hardens serverless compute platforms (AWS Lambda, Azure Functions, Google Cloud Functions) by enforcing least privilege IAM roles, eliminating hardcoded secrets, scanning dependencies for vulnerabilities, validating input, securing function URLs, and enabling runtime monitoring.

24.6k · bundle

Audits codebases for leaked secrets and hardcoded credentials, generates .env templates, configures secrets management with AWS Secrets Manager, Vault, Doppler, or GCP Secret Manager, sets up credential rotation, and integrates secrets into CI/CD pipelines via OIDC federation.

Implementing Cloud Waf Rules

Deploy and tune Web Application Firewall rules on AWS WAF, Azure WAF, and Cloudflare to protect cloud-hosted applications against OWASP Top 10 attacks, including managed rule sets, custom rate limiting, bot management, and false positive reduction.

24.6k · bundle

Create and manage SNS topics, subscriptions, and message publishing for pub/sub messaging patterns.

Analyzing Cloud Storage Access Patterns

Detect abnormal access patterns in AWS S3, GCS, and Azure Blob Storage by analyzing CloudTrail Data Events, GCS audit logs, and Azure Storage Analytics. Identifies after-hours bulk downloads, access from new IP addresses, unusual API calls, and potential data exfiltration using statistical baselines.

24.6k · bundle