Plugins

1 plugin

Secure Google Cloud Workload

Assesses security requirements, identifies risks, and provides actionable recommendations for IAM, network, and data protection.

4 skills · plugin

Results for “cloud-iam”

45 skills

Manages Google Cloud infrastructure including Compute Engine, Cloud Run, BigQuery, Cloud Functions, GKE, and IAM.

Auditing GCP Iam Permissions

Audits Google Cloud Platform IAM permissions to identify overly permissive bindings, primitive role usage, service account key proliferation, and cross-project access risks using gcloud CLI, Policy Analyzer, and IAM Recommender.

24.6k · bundle

Detecting AWS Iam Privilege Escalation

Identify AWS IAM privilege escalation paths by analyzing policies for dangerous permission combinations and least-privilege violations using boto3 and Cloudsplaining-style analysis.

24.6k · bundle

Operates Google Cloud Platform resources via the gcloud CLI, covering compute instances, storage buckets, BigQuery, Cloud Run, GKE, IAM, and billing. It checks the environment, authenticates, confirms destructive operations, and diagnoses common errors.

Securing AWS Iam Permissions

Hardens AWS IAM configurations to enforce least privilege access across cloud accounts, covering policy scoping, permission boundaries, Access Analyzer integration, and credential rotation.

24.6k · bundle

Performing AWS Privilege Escalation Assessment

Identify and test IAM misconfigurations that allow privilege escalation in AWS environments using Pacu, CloudFox, Principal Mapper, and manual analysis.

24.6k · bundle

More results

Manages AWS infrastructure across EC2, S3, Lambda, RDS, IAM, CloudFormation, and cost optimization, with guidance on security, monitoring, and operational best practices.

Google Cloud Waf Security

Evaluates Google Cloud workloads against the Well-Architected Framework security pillar, identifies security requirements, and provides actionable recommendations for IAM, network security, data protection, and operational security.

Assesses cloud infrastructure for security misconfigurations, IAM privilege escalation paths, S3 public exposure, open security group rules, and IaC security gaps across AWS, Azure, and GCP with MITRE ATT&CK mapping.

Hf Cloud Sagemaker Iam Preflight

Discovers, validates, or creates a SageMaker execution role before deploying or training, preventing IAM-related deployment failures.

10.8k · bundle

Performing Cloud Asset Inventory With Cartography

Map cloud infrastructure assets and relationships into a Neo4j graph using Cartography to discover attack paths, IAM permission chains, and security gaps across AWS, GCP, and Azure.

24.6k · bundle

Detecting Serverless Function Injection

Detects and prevents code injection attacks targeting serverless functions through static analysis, event source poisoning detection, and IAM policy auditing.

24.6k · bundle

Implementing AWS Iam Permission Boundaries

Configure IAM permission boundaries in AWS to delegate role creation to developers while enforcing maximum privilege limits set by the security team.

24.6k · bundle

Agent Platform Migrate From AI Studio

Migrate applications from Google AI Studio to Google Cloud Agent Platform, enabling enterprise features like IAM, billing, and SLAs.

Design and implement AWS architectures with best practices for IAM, S3, Lambda, DynamoDB, and serverless deployments.

Deploy, monitor, and manage GCP services with battle-tested patterns.

Assess cloud infrastructure for security misconfigurations, IAM privilege escalation paths, S3 public exposure, open security group rules, and IaC security gaps across AWS, Azure, and GCP with MITRE ATT&CK mapping.

20.4k · bundle

Performing Cloud Penetration Testing With Pacu

Conduct authorized AWS penetration testing using Pacu to enumerate IAM configurations, discover privilege escalation paths, test credential harvesting, and validate security controls through systematic attack simulation.

24.6k · bundle

cloudthinker-ai

Executes AWS CLI commands with parallel execution, CloudWatch statistics syntax, Cost Explorer aggregation, and output token limits.

Manage AWS Identity and Access Management for users, roles, policies, and permissions. Create IAM policies, configure cross-account access, set up service roles, troubleshoot permission errors, and enforce least-privilege security.

Deploy and serve AI/ML models on Modal's serverless cloud platform with on-demand GPUs, autoscaling containers, persistent storage, and scheduled jobs.

30.2k · bundle

Performing GCP Security Assessment With Forseti

Audit Google Cloud Platform environments for security misconfigurations using Forseti, Security Command Center, and gcloud CLI to evaluate IAM policies, firewall rules, storage permissions, and CIS compliance.

24.6k · bundle

Generates modular Terraform infrastructure-as-code for AWS, GCP, or Azure, including VPC, compute, database, cache, CDN, and monitoring with per-environment sizing, remote state, and cost estimates.

Building Cloud Siem With Sentinel

Deploy Microsoft Sentinel as a cloud-native SIEM and SOAR platform for centralized security operations across AWS, Azure, and GCP.

24.6k · bundle

Conducting Cloud Incident Response

Responds to security incidents in cloud environments (AWS, Azure, GCP) by performing identity-based containment, cloud-native log analysis, resource isolation, and forensic evidence acquisition adapted for ephemeral cloud infrastructure.

24.6k · bundle

Authorized security assessment for cloud, container, and Kubernetes environments covering metadata SSRF, IAM misconfigurations, container escape paths, and cluster RBAC review.

12.8k · bundle

Operates AI infrastructure as a production dependency: manages GPU utilization, MCP servers, LLM gateways, inference pipelines, token costs, semantic caching, and model observability.

Build and manage applications on the Cloudflare platform, including Workers, Pages, storage, AI, networking, security, and infrastructure-as-code.

Deploys and optimizes AI/ML inference workloads on GKE, using GPUs, TPUs, and model servers.

Deploy, inspect, log-tail, snapshot, and troubleshoot AEM Rapid Development Environments using the Adobe I/O CLI plugin.

Performing Cloud Forensics Investigation

Collect and analyze logs, snapshots, and metadata from AWS, Azure, and GCP to investigate security breaches in cloud environments.

24.6k · bundle

leandrobenjaminl

Cloud Architect

Diseña infraestructura cloud como código con Terraform, cubriendo AWS, GCP y Azure, incluyendo arquitecturas serverless, VPC, bases de datos administradas y optimización de costos.

Implementing Cloud Vulnerability Posture Management

Continuously monitor cloud infrastructure for misconfigurations, compliance violations, and security risks using AWS Security Hub, Azure Defender for Cloud, and open-source tools like Prowler and ScoutSuite.

24.6k · bundle

Performing GCP Penetration Testing With Gcpbucketbrute

Enumerate and audit GCP storage buckets and IAM policies using GCPBucketBrute and gcloud CLI to identify privilege escalation paths and overly permissive access.

24.6k · bundle

Deploying Cloud Deception With Decoy Resources

Deploy cloud-native deception across AWS, Azure, and GCP using decoy resources that generate high-fidelity alerts when attackers interact with them.

24.6k · bundle

Conducting Cloud Penetration Testing

Perform authorized penetration testing against AWS, Azure, and GCP cloud environments using cloud-specific tools and methodologies, with findings mapped to the MITRE ATT&CK Cloud matrix.

24.6k · bundle