Results for “aws-iam”

Identify and test IAM misconfigurations that allow privilege escalation in AWS environments using Pacu, CloudFox, Principal Mapper, and manual analysis.

Audit AWS S3 bucket permissions to identify publicly accessible buckets, overly permissive ACLs, misconfigured bucket policies, and missing encryption settings using AWS CLI, Prowler, and IAM Access Analyzer.

Manage AWS Identity and Access Management for users, roles, policies, and permissions. Create IAM policies, configure cross-account access, set up service roles, troubleshoot permission errors, and enforce least-privilege security.

Reference for AWS services, architecture patterns, and Well-Architected Framework implementation.

Reads the local AWS configuration to determine the active profile, region, account ID, and caller identity before any AWS task, avoiding guesswork and preventing common deployment errors.

Executes AWS CLI commands with parallel execution, CloudWatch statistics syntax, Cost Explorer aggregation, and output token limits.

Answers questions about AWS resources using the local AWS CLI, defaulting to read-only queries and requiring explicit confirmation before any write or destructive action.

Query AWS resources using natural language, translating intent into read-only AWS CLI commands for EC2, S3, RDS, Lambda, ECS, EKS, and more.

Use Pacu modules for AWS privilege escalation, persistence, and backdooring during authorized penetration tests.

Enumerate AWS resources and identify misconfigurations using ScoutSuite to generate interactive security reports.

Discovers, validates, or creates a SageMaker execution role before deploying or training, preventing IAM-related deployment failures.

Assess cloud infrastructure for security misconfigurations, IAM privilege escalation paths, S3 public exposure, open security group rules, and IaC security gaps across AWS, Azure, and GCP with MITRE ATT&CK mapping.

Conduct authorized AWS penetration testing using Pacu to enumerate IAM configurations, discover privilege escalation paths, test credential harvesting, and validate security controls through systematic attack simulation.

Assesses cloud infrastructure for security misconfigurations, IAM privilege escalation paths, S3 public exposure, open security group rules, and IaC security gaps across AWS, Azure, and GCP with MITRE ATT&CK mapping.

Guides setup and operation of the aws_dynamodb_cdc input in Redpanda Connect, which streams change data capture from AWS DynamoDB into Redpanda or Kafka using DynamoDB Streams. Covers enabling streams, IAM policies, checkpoint tables, snapshot modes, table discovery, and operational constraints.

Deploy AWS Config rules for continuous compliance monitoring, including managed and custom rules aligned to CIS and PCI DSS frameworks, automatic remediation with SSM Automation, and multi-account compliance aggregation.

Configures HashiCorp Vault dynamic secrets engines for database credentials, AWS IAM keys, and PKI certificates with automatic generation, lease management, and credential rotation.

Analyzes AWS WAF web ACLs, rules, IP sets, and logging configurations, and retrieves blocked/allowed request metrics from CloudWatch.

Diagnoses AWS architecture issues and reviews Well-Architected pillars using read-only AWS CLI commands, with confirmation required for any changes.

Analyze AWS resources and IaC files to generate cost optimization recommendations, creating GitHub issues for each opportunity.

Configure Azure API Management as an AI Gateway to govern AI models, MCP tools, and agents with policies for caching, rate limiting, content safety, and cost control.

Manage AWS API Gateway for creating, publishing, and securing REST, HTTP, and WebSocket APIs using CLI commands, SAM templates, and best practices.

Provides a structured approach to designing, implementing, and troubleshooting AWS security configurations with best practices and verification checklists.

Protect API Gateway endpoints with AWS WAF by configuring managed rule groups, rate limiting, bot control, IP reputation filtering, and monitoring.

Map cloud infrastructure assets and relationships into a Neo4j graph using Cartography to discover attack paths, IAM permission chains, and security gaps across AWS, GCP, and Azure.

Analyze AWS GuardDuty findings, detectors, suppression rules, and member accounts with parallel execution and anti-hallucination guardrails.

Deploy web applications, APIs, and background services on AWS using CDK, covering EC2, ECS Fargate, Lambda, API Gateway, CloudFront, Route 53, RDS, ElastiCache, IAM, and monitoring.

Deploys Flutter backends on AWS using EKS, RDS, S3, Lambda, API Gateway, ElastiCache, Secrets Manager, CloudWatch, and IAM, with CLI examples and CDK infrastructure code.

Create, configure, and manage AWS Lambda serverless functions for event-driven compute, including triggers, debugging, cold start optimization, and layers.

Automate AWS GuardDuty threat detection findings processing using EventBridge and Lambda to enable real-time incident response, automatic quarantine of compromised resources, and security notification workflows.